CWE-200 · Information Disclosure (page 60)
Page 60 of 100 — CVEs classified under CWE-200, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2014-10047 | High | 7.5 | 2018-04-18 | In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 400 and SD 800, when writing the Full Disk Encryption key to cryp… |
CVE-2018-10189 | High | 7.5 | 2018-04-17 | An issue was discovered in Mautic 1.x and 2.x before 2.13.0. It is possible to systematically emulate tracking cookies per contact due to tracking the contact… |
CVE-2018-5430 | High | 8.8 | 2018-04-17 | The Spring web flows of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMa… |
CVE-2018-10178 | Medium | 5.3 | 2018-04-17 | The FromDocToPDF extension before 13.611.13.2303 for Chrome allows remote attackers to discover visited web sites via vectors involving a mostVisitedSites comm… |
CVE-2018-10106 | Critical | 9.8 | 2018-04-16 | D-Link DIR-815 REV. B (with firmware through DIR-815_REVB_FIRMWARE_PATCH_2.07.B01) devices have permission bypass and information disclosure in /htdocs/web/get… |
CVE-2018-1000169 | Medium | 5.3 | 2018-04-16 | An exposure of sensitive information vulnerability exists in Jenkins 2.115 and older, LTS 2.107.1 and older, in CLICommand.java and ViewOptionHandler.java that… |
CVE-2014-1686 | Medium | 5.3 | 2018-04-16 | MediaWiki 1.18.0 allows remote attackers to obtain the installation path via vectors related to thumbnail creation. |
CVE-2017-0361 | High | 7.8 | 2018-04-13 | Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains an information disclosure flaw, where the api.log might contain passwords in plaintext. |
CVE-2018-10082 | Medium | 5.3 | 2018-04-13 | CMS Made Simple (CMSMS) through 2.2.7 allows physical path leakage via an invalid /index.php?page= value, a crafted URI starting with /index.php?mact=Search, o… |
CVE-2015-0152 | Critical | 9.8 | 2018-04-12 | D-Link DIR-815 devices with firmware before 2.07.B01 allow remote attackers to obtain sensitive information by leveraging cleartext storage of the administrati… |
CVE-2018-1086 | Medium | 4.3 | 2018-04-12 | pcs before versions 0.9.164 and 0.10 is vulnerable to a debug parameter removal bypass. REST interface of the pcsd service did not properly remove the pcs debu… |
CVE-2018-9842 | Medium | 5.3 | 2018-04-12 | CyberArk Password Vault before 9.7 allows remote attackers to obtain sensitive information from process memory by replaying a logon message. |
CVE-2017-6910 | High | 7.5 | 2018-04-12 | The HTTP and WebSocket engine components in the server in Kaazing Gateway before 4.5.3 hotfix-1, Gateway - JMS Edition before 4.0.5 hotfix-15, 4.0.6 before hot… |
CVE-2014-6309 | High | 7.5 | 2018-04-12 | The HTTP and WebSocket engine components in the server in Kaazing Gateway 4.0.2, 4.0.3, and 4.0.4 and Gateway - JMS Edition 4.0.2, 4.0.3, and 4.0.4 allow remot… |
CVE-2018-0892 | Medium | 4.3 | 2018-04-12 | An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory, aka "Microsoft Edge Information Disclosure Vulnerabili… |
CVE-2018-0018 | High | 7.5 | 2018-04-11 | On SRX Series devices during compilation of IDP policies, an attacker sending specially crafted packets may be able to bypass firewall rules, leading to inform… |
CVE-2018-10028 | Medium | 5.3 | 2018-04-11 | joyplus-cms 1.6.0 allows remote attackers to obtain sensitive information via a direct request to the install/ or log/ URI. |
CVE-2018-7930 | Medium | 5.7 | 2018-04-11 | The Near Field Communication (NFC) module in Mate 9 Huawei mobile phones with the versions before MHA-L29B 8.0.0.366(C567) has an information leak vulnerabilit… |
CVE-2017-15327 | Medium | 4.3 | 2018-04-11 | S12700 V200R005C00, V200R006C00, V200R006C01, V200R007C00, V200R007C01, V200R007C20, V200R008C00, V200R008C06, V200R009C00, V200R010C00, S7700 V200R001C00, V20… |
CVE-2017-18072 | High | 7.5 | 2018-04-11 | In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9640, MDM9650, QCA4531, QCA6174A, QCA6… |
CVE-2015-1957 | Medium | 5.3 | 2018-04-10 | IBM WebSphere MQ 7.5.x before 7.5.0.6 and 8.0.x before 8.0.0.3 allows remote authenticated users to obtain sensitive information via a man-in-the-middle attack… |
CVE-2015-0172 | High | 7.5 | 2018-04-10 | IBM Security SiteProtector System 3.0, 3.1.0 and 3.1.1 allows remote attackers to bypass intended security restrictions and consequently execute unspecified co… |
CVE-2014-2078 | Medium | 5.3 | 2018-04-10 | The backend in Open-Xchange (OX) AppSuite 7.4.2 before 7.4.2-rev9 allows remote attackers to obtain sensitive information about user email addresses in opportu… |
CVE-2018-9922 | Medium | 5.3 | 2018-04-10 | An issue was discovered in idreamsoft iCMS through 7.0.7. Physical path leakage exists via an invalid nickname field that reveals a core/library/weixin.class.p… |
CVE-2017-2826 | Low | 3.7 | 2018-04-09 | An information disclosure vulnerability exists in the iConfig proxy request of Zabbix server 2.4.X. A specially crafted iConfig proxy request can cause the Zab… |
CVE-2018-9852 | Critical | 9.8 | 2018-04-08 | In Gxlcms QY v1.0.0713, Lib\Lib\Action\Home\HitsAction.class.php allows remote attackers to read data from a database by embedding a FROM clause in a query str… |
CVE-2018-9325 | High | 7.5 | 2018-04-07 | Etherpad 1.5.x and 1.6.x before 1.6.4 allows an attacker to export all the existing pads of an instance without knowledge of pad names. |
CVE-2014-2359 | Medium | 5.9 | 2018-04-06 | OleumTech Wireless Sensor Network devices allow remote attackers to obtain sensitive information about sensor nodes or spoof devices by reading cleartext proto… |
CVE-2018-7506 | High | 7.5 | 2018-04-06 | The private key of the web server in Moxa MXview versions 2.8 and prior is able to be read and accessed via an HTTP GET request, which may allow a remote attac… |
CVE-2017-0748 | Medium | 5.3 | 2018-04-05 | An information disclosure vulnerability in the Qualcomm audio driver. Product: Android. Versions: Android Kernel. Android ID: A-35764875. References: QC-CR#202… |
CVE-2018-1284 | Low | 3.7 | 2018-04-05 | In Apache Hive 0.6.0 to 2.3.2, malicious user might use any xpath UDFs (xpath/xpath_string/xpath_boolean/xpath_number/xpath_double/xpath_float/xpath_long/xpath… |
CVE-2018-1000150 | Low | 3.3 | 2018-04-05 | An exposure of sensitive information vulnerability exists in Jenkins Reverse Proxy Auth Plugin 1.5 and older in ReverseProxySecurityRealm#authContext that allo… |
CVE-2018-1000148 | Medium | 6.5 | 2018-04-05 | An exposure of sensitive information vulnerability exists in Jenkins Copy To Slave Plugin version 1.4.4 and older in CopyToSlaveBuildWrapper.java that allows a… |
CVE-2018-1000147 | Medium | 6.5 | 2018-04-05 | An exposure of sensitive information vulnerability exists in Jenkins Perforce Plugin version 1.3.36 and older in PerforcePasswordEncryptor.java that allows att… |
CVE-2018-1000145 | Medium | 6.5 | 2018-04-05 | An exposure of sensitive information vulnerability exists in Jenkins Perforce Plugin version 1.3.36 and older in PerforcePasswordEncryptor.java that allows att… |
CVE-2018-1000143 | Medium | 6.7 | 2018-04-05 | An exposure of sensitive information vulnerability exists in Jenkins GitHub Pull Request Builder Plugin version 1.39.0 and older in GhprbCause.java that allows… |
CVE-2018-1000142 | High | 7.8 | 2018-04-05 | An exposure of sensitive information vulnerability exists in Jenkins GitHub Pull Request Builder Plugin version 1.39.0 and older in GhprbCause.java that allows… |
CVE-2018-1097 | High | 8.8 | 2018-04-04 | A flaw was found in foreman before 1.16.1. The issue allows users with limited permissions for powering oVirt/RHV hosts on and off to discover the username and… |
CVE-2018-9126 | Critical | 9.8 | 2018-04-04 | The DNNArticle module 11 for DNN (formerly DotNetNuke) allows remote attackers to read the web.config file, and consequently discover database credentials, via… |
CVE-2018-9275 | High | 8.2 | 2018-04-04 | In check_user_token in util.c in the Yubico PAM module (aka pam_yubico) 2.18 through 2.25, successful logins can leak file descriptors to the auth mapping file… |
CVE-2017-6426 | Low | 3.3 | 2018-04-04 | An information disclosure vulnerability in the Qualcomm SPMI driver. Product: Android. Versions: Android kernel. Android ID: A-33644474. References: QC-CR#1106… |
CVE-2017-6425 | Low | 3.3 | 2018-04-04 | An information disclosure vulnerability in the Qualcomm video driver. Product: Android. Versions: Android kernel. Android ID: A-32577085. References: QC-CR#110… |
CVE-2016-8486 | High | 7.5 | 2018-04-04 | An information disclosure vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-28823691. |
CVE-2016-8485 | High | 7.5 | 2018-04-04 | An information disclosure vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-28823681. |
CVE-2016-10236 | Low | 3.3 | 2018-04-04 | An information disclosure vulnerability in the Qualcomm USB driver. Product: Android. Versions: Android kernel. Android ID: A-33280689. References: QC-CR#11024… |
CVE-2016-10234 | Medium | 5.5 | 2018-04-04 | An information disclosure vulnerability in the Qualcomm IPA driver. Product: Android. Versions: Android kernel. Android ID: A-34390017. References: QC-CR#10690… |
CVE-2017-13269 | Medium | 4.3 | 2018-04-04 | A information disclosure vulnerability in the Android system (bluetooth). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android I… |
CVE-2017-13268 | Medium | 4.3 | 2018-04-04 | A information disclosure vulnerability in the Android system (bluetooth). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android I… |
CVE-2017-13304 | Medium | 5.3 | 2018-04-04 | A information disclosure vulnerability in the Upstream kernel mnh_sm driver. Product: Android. Versions: Android kernel. Android ID: A-70576999. |
CVE-2017-13303 | Medium | 5.3 | 2018-04-04 | A information disclosure vulnerability in the Broadcom bcmdhd driver. Product: Android. Versions: Android kernel. Android ID: A-71359108. References: B-V201801… |
CVE-2017-13298 | Medium | 5.3 | 2018-04-04 | A information disclosure vulnerability in the Android media framework (libhavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android I… |
CVE-2017-13297 | Medium | 5.3 | 2018-04-04 | A information disclosure vulnerability in the Android media framework (libhevc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android I… |
CVE-2017-13296 | Medium | 5.3 | 2018-04-04 | A information disclosure vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID… |
CVE-2017-13294 | Medium | 5.3 | 2018-04-04 | A information disclosure vulnerability in the Android framework (aosp email application). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1… |
CVE-2018-6919 | High | 7.5 | 2018-04-04 | In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p9, 10.4-STABLE, 10.4-RELEASE-p8 and 10.3-RELEASE-p28, due to insufficient initialization of memory copied to userl… |
CVE-2017-3972 | High | 8.3 | 2018-04-03 | Infrastructure-based foot printing vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows attackers to execute… |
CVE-2018-3598 | High | 7.5 | 2018-04-03 | In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-… |
CVE-2018-4168 | Medium | 4.6 | 2018-04-03 | An issue was discovered in certain Apple products. iOS before 11.3 is affected. The issue involves the "Files Widget" component. It allows physically proximate… |
CVE-2018-4138 | Medium | 5.5 | 2018-04-03 | An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "NVIDIA Graphics Drivers" component. It allows atta… |
CVE-2018-4137 | High | 7.5 | 2018-04-03 | An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. The issue involves the "Safari Login AutoFill"… |
CVE-2018-4123 | Low | 2.4 | 2018-04-03 | An issue was discovered in certain Apple products. iOS before 11.3 is affected. The issue involves alarm and timer handling in the "Clock" component. It allows… |
CVE-2018-4117 | Medium | 6.5 | 2018-04-03 | An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTune… |
CVE-2018-4104 | Medium | 5.5 | 2018-04-03 | An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. tvOS before 11.3 is affected. watchOS before… |
CVE-2018-4093 | Medium | 5.5 | 2018-04-03 | An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13.3 is affected. tvOS before 11.2.5 is affected. watchOS bef… |
CVE-2018-4090 | Medium | 5.5 | 2018-04-03 | An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13.3 is affected. tvOS before 11.2.5 is affected. watchOS bef… |
CVE-2018-4084 | Medium | 5.5 | 2018-04-03 | An issue was discovered in certain Apple products. macOS before 10.13.3 is affected. The issue involves the "Wi-Fi" component. It allows attackers to bypass in… |
CVE-2017-7173 | Medium | 5.5 | 2018-04-03 | An issue was discovered in certain Apple products. macOS before 10.13.2 is affected. The issue involves the "Kernel" component. It allows attackers to bypass i… |
CVE-2017-7075 | Medium | 5.5 | 2018-04-03 | An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Notes" component. It allows local users to obtain sensiti… |
CVE-2017-2493 | Medium | 6.5 | 2018-04-03 | An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. iCloud before 6.2 on Windows is affected. tvOS… |
CVE-2017-13877 | Low | 3.3 | 2018-04-03 | An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Sandbox Profiles" component. It allows attackers to deter… |
CVE-2017-13873 | Medium | 4.3 | 2018-04-03 | An issue was discovered in certain Apple products. iOS before 11 is affected. macOS before 10.13 is affected. tvOS before 11 is affected. watchOS before 4 is a… |
CVE-2017-13839 | Medium | 5.5 | 2018-04-03 | An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the "Spotlight" component. It allows local users to see r… |
CVE-2018-6849 | Medium | 4.3 | 2018-04-01 | In the WebRTC component in DuckDuckGo 4.2.0, after visiting a web site that attempts to gather complete client information (such as https://ip.voidsec.com), th… |
CVE-2018-1234 | Medium | 5.5 | 2018-03-30 | RSA Authentication Agent version 8.0.1 and earlier for Web for IIS is affected by a problem where access control list (ACL) permissions on a Windows Named Pipe… |
CVE-2017-17769 | Medium | 5.5 | 2018-03-30 | Information leakage in Android for MSM, Firefox OS for MSM, and QRD Android can occur in the audio driver. |
CVE-2017-15852 | High | 7.8 | 2018-03-30 | Information leak of the ISPIF base address in Android for MSM, Firefox OS for MSM, and QRD Android can occur in the camera driver. |
CVE-2017-14891 | Medium | 5.3 | 2018-03-30 | In the KGSL driver function _gpuobj_map_useraddr() in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-10-12, the contents of the stack can get… |
CVE-2017-14875 | High | 7.5 | 2018-03-30 | In the handler for the ioctl command VIDIOC_MSM_ISP_DUAL_HW_LPM_MODE in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-05-23, a heap overread… |
CVE-2017-11087 | High | 7.5 | 2018-03-30 | libOmxVenc in Android for MSM, Firefox OS for MSM, and QRD Android copies the output buffer to an application with the "filled length", which is larger than th… |
CVE-2018-3817 | Medium | 6.5 | 2018-03-30 | When logging warnings regarding deprecated settings, Logstash before 5.6.6 and 6.x before 6.1.2 could inadvertently log sensitive information. |
CVE-2017-1765 | Low | 3.1 | 2018-03-30 | IBM Business Process Manager 8.6 could allow an authenticated user with special privileges to reveal sensitive information about the application server. IBM X-… |
CVE-2017-1756 | Medium | 4.0 | 2018-03-30 | IBM Business Process Manager 8.6 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 135856. |
CVE-2017-1705 | Medium | 4.3 | 2018-03-30 | IBM Security Privileged Identity Manager 2.1.0 contains left-over, sensitive information in page comments. While this information is not visible at first it ca… |
CVE-2017-9681 | Medium | 6.5 | 2018-03-30 | In Android before 2017-08-05 on Qualcomm MSM, Firefox OS for MSM, QRD Android, and all Android releases from CAF using the Linux kernel, if kernel memory addre… |
CVE-2016-6658 | Critical | 9.6 | 2018-03-29 | Applications in cf-release before 245 can be configured and pushed with a user-provided custom buildpack using a URL pointing to the buildpack. Although it is… |
CVE-2018-1191 | High | 8.8 | 2018-03-29 | Cloud Foundry Garden-runC, versions prior to 1.11.0, contains an information exposure vulnerability. A user with access to Garden logs may be able to obtain le… |
CVE-2014-5028 | Medium | 6.5 | 2018-03-29 | The Original File and Patched File resources in Review Board 1.7.x before 1.7.27 and 2.0.x before 2.0.4 allow remote authenticated users to bypass intended acc… |
CVE-2018-6608 | Medium | 4.3 | 2018-03-28 | In the WebRTC component in Opera 51.0.2830.55, after visiting a web site that attempts to gather complete client information (such as https://ip.voidsec.com)… |
CVE-2017-11510 | Critical | 9.8 | 2018-03-28 | An information leak exists in Wanscam's HW0021 network camera that allows an unauthenticated remote attacker to recover the administrator username and password… |
CVE-2018-7676 | Low | 3.9 | 2018-03-28 | The NetIQ Identity Manager, in versions prior to 4.7, userapp with log / trace enabled may leak sensitive information. |
CVE-2017-7630 | Medium | 5.3 | 2018-03-27 | QNAP QTS 4.2.6 build 20171026, QTS 4.3.3 build 20170727 and earlier allows remote attackers to obtain potentially sensitive information (firmware version and r… |
CVE-2014-5132 | Medium | 4.3 | 2018-03-27 | Avolve Software ProjectDox 8.1 allows remote attackers to enumerate users via vectors related to email addresses. |
CVE-2014-5131 | Medium | 6.5 | 2018-03-27 | Avolve Software ProjectDox 8.1 makes it easier for remote authenticated users to obtain sensitive information by leveraging ciphertext reuse. |
CVE-2014-5130 | Medium | 6.5 | 2018-03-27 | Avolve Software ProjectDox 8.1 allows remote authenticated users to obtain sensitive information from other users via vectors involving a direct access token. |
CVE-2018-9056 | Medium | 5.6 | 2018-03-27 | Systems with microprocessors utilizing speculative execution may allow unauthorized disclosure of information to an attacker with local user access via a side-… |
CVE-2015-5016 | Medium | 4.3 | 2018-03-27 | IBM Maximo Asset Management 7.1, 7.5, and 7.6; Maximo Asset Management Essentials 7.1 and 7.5; Control Desk 7.5 and 7.6; Tivoli Asset Management for IT 7.1 and… |
CVE-2017-12310 | High | 7.5 | 2018-03-27 | A vulnerability in the auto discovery phase of Cisco Spark Hybrid Calendar Service could allow an unauthenticated, remote attacker to view sensitive informatio… |
CVE-2015-7434 | High | 7.8 | 2018-03-26 | IBM Capacity Management Analytics 2.1.0.0 allows local users to discover encrypted usernames and passwords by leveraging access to the CMA install machine. IBM… |
CVE-2015-7433 | High | 7.8 | 2018-03-26 | IBM Capacity Management Analytics 2.1.0.0 allows local users to discover cleartext usernames and passwords by leveraging access to the CMA install machine. IBM… |
CVE-2015-7432 | High | 7.8 | 2018-03-26 | IBM Capacity Management Analytics 2.1.0.0 allows local users to decrypt usernames and passwords by leveraging access to setenv.sh and parameter.txt. IBM X-Forc… |