CWE-200 · Information Disclosure (page 74)
Page 74 of 100 — CVEs classified under CWE-200, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-0334 | Medium | 5.5 | 2017-03-08 | An information disclosure vulnerability in the NVIDIA GPU driver could enable a local malicious application to access data outside of its permission levels. Th… |
CVE-2016-8483 | Medium | 5.5 | 2017-03-08 | An information disclosure vulnerability in the Qualcomm power driver could enable a local malicious application to access data outside of its permission levels… |
CVE-2016-8478 | Medium | 4.7 | 2017-03-08 | An information disclosure vulnerability in the Qualcomm video driver could enable a local malicious application to access data outside of its permission levels… |
CVE-2016-8477 | Medium | 4.7 | 2017-03-08 | An information disclosure vulnerability in the Qualcomm camera driver could enable a local malicious application to access data outside of its permission level… |
CVE-2016-8416 | Medium | 4.7 | 2017-03-08 | An information disclosure vulnerability in the Qualcomm video driver could enable a local malicious application to access data outside of its permission levels… |
CVE-2016-8413 | Medium | 4.7 | 2017-03-08 | An information disclosure vulnerability in the Qualcomm camera driver could enable a local malicious application to access data outside of its permission level… |
CVE-2017-1124 | Low | 2.9 | 2017-03-07 | IBM Maximo Asset Management 7.1, 7.5, and 7.6 could allow a local attacker to obtain sensitive information using HTTP Header Injection. IBM Reference #: 199805… |
CVE-2016-9725 | Medium | 5.3 | 2017-03-07 | IBM QRadar Incident Forensics 7.2 allows for Cross-Origin Resource Sharing (CORS), which is a mechanism that allows web sites to request resources from externa… |
CVE-2016-9720 | Medium | 5.3 | 2017-03-07 | IBM QRadar 7.2 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM Reference #: 1999… |
CVE-2016-8940 | High | 8.8 | 2017-03-07 | IBM Tivoli Storage Manager (IBM Spectrum Protect) 6.1, 6.2, 6.3, and 7.1 does not perform sufficient authority checking on SQL queries. As a result, an attacke… |
CVE-2016-4950 | High | 7.5 | 2017-03-07 | Cloudera Manager 5.5 and earlier allows remote attackers to enumerate user sessions via a request to /api/v11/users/sessions. |
CVE-2016-4949 | High | 7.5 | 2017-03-07 | Cloudera Manager 5.5 and earlier allows remote attackers to obtain sensitive information via a (1) stderr.log or (2) stdout.log value in the filename parameter… |
CVE-2016-4947 | Medium | 5.3 | 2017-03-07 | Cloudera HUE 3.9.0 and earlier allows remote attackers to enumerate user accounts via a request to desktop/api/users/autocomplete. |
CVE-2013-5653 | Medium | 5.5 | 2017-03-07 | The getenv and filenameforall functions in Ghostscript 9.10 ignore the "-dSAFER" argument, which allows remote attackers to read data via a crafted postscript… |
CVE-2016-3127 | High | 7.5 | 2017-03-03 | An information disclosure vulnerability in the logging implementation of BlackBerry Good Control Server versions earlier than 2.3.53.62 allows remote attackers… |
CVE-2016-7409 | Medium | 5.5 | 2017-03-03 | The dbclient and server in Dropbear SSH before 2016.74, when compiled with DEBUG_TRACE, allows local users to read process memory via the -v argument, related… |
CVE-2016-6883 | Medium | 5.9 | 2017-03-03 | MatrixSSL before 3.8.3 configured with RSA Cipher Suites allows remote attackers to obtain sensitive information via a Bleichenbacher variant attack. |
CVE-2016-6882 | Medium | 5.9 | 2017-03-03 | MatrixSSL before 3.8.7, when the DHE_RSA based cipher suite is supported, makes it easier for remote attackers to obtain RSA private key information by conduct… |
CVE-2017-5866 | Medium | 4.3 | 2017-03-03 | The autocomplete feature in the E-Mail share dialog in ownCloud Server before 8.1.11, 8.2.x before 8.2.9, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 allows rem… |
CVE-2017-5865 | Low | 3.7 | 2017-03-03 | The password reset functionality in ownCloud Server before 8.1.11, 8.2.x before 8.2.9, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 sends different error message… |
CVE-2015-2877 | Low | 3.3 | 2017-03-03 | Kernel Samepage Merging (KSM) in the Linux kernel 2.6.32 through 4.x does not prevent use of a write-timing side channel, which allows guest OS users to defeat… |
CVE-2017-5995 | High | 7.5 | 2017-03-01 | The NetApp ONTAP Select Deploy administration utility 2.0 through 2.2.1 might allow remote attackers to obtain sensitive information via unspecified vectors. |
CVE-2017-2685 | High | 7.4 | 2017-03-01 | Siemens SINUMERIK Integrate Operate Clients between 2.0.3.00.016 (including) and 2.0.6 (excluding) and between 3.0.4.00.032 (including) and 3.0.6 (excluding) c… |
CVE-2016-8507 | Medium | 6.5 | 2017-03-01 | Yandex Browser for iOS before 16.10.0.2357 does not properly restrict processing of facetime:// URLs, which allows remote attackers to initiate facetime-call w… |
CVE-2017-5927 | High | 7.5 | 2017-02-27 | Page table walks conducted by the MMU during virtual to physical address translation leave a trace in the last level cache of modern ARM processors. By perform… |
CVE-2017-5926 | High | 7.5 | 2017-02-27 | Page table walks conducted by the MMU during virtual to physical address translation leave a trace in the last level cache of modern AMD processors. By perform… |
CVE-2017-5925 | High | 7.5 | 2017-02-27 | Page table walks conducted by the MMU during virtual to physical address translation leave a trace in the last level cache of modern Intel processors. By perfo… |
CVE-2016-4042 | Medium | 5.3 | 2017-02-24 | Plone 3.3 through 5.1a1 allows remote attackers to obtain information about the ID of sensitive content via unspecified vectors. |
CVE-2017-6076 | Medium | 5.5 | 2017-02-24 | In versions of wolfSSL before 3.10.2 the function fp_mul_comba makes it easier to extract RSA key information for a malicious user who has access to view cache… |
CVE-2017-6206 | High | 7.5 | 2017-02-23 | D-Link DGS-1510-28XMP, DGS-1510-28X, DGS-1510-52X, DGS-1510-52, DGS-1510-28P, DGS-1510-28, and DGS-1510-20 Websmart devices with firmware before 1.31.B003 allo… |
CVE-2016-3052 | Medium | 5.9 | 2017-02-22 | Under non-standard configurations, IBM WebSphere MQ might send password data in clear text over the network. This data could be intercepted using man in the mi… |
CVE-2016-9384 | Medium | 6.5 | 2017-02-22 | Xen 4.7 allows local guest OS users to obtain sensitive host information by loading a 32-bit ELF symbol table. |
CVE-2017-3842 | Medium | 5.3 | 2017-02-22 | A vulnerability in the web-based management interface of the Cisco Intrusion Prevention System Device Manager (IDM) could allow an unauthenticated, remote atta… |
CVE-2017-3841 | High | 7.5 | 2017-02-22 | A vulnerability in the web interface of the Cisco Secure Access Control System (ACS) could allow an unauthenticated, remote attacker to disclose sensitive info… |
CVE-2017-3836 | Medium | 4.3 | 2017-02-22 | A vulnerability in the web framework Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to view sensitive data. More Informat… |
CVE-2015-4057 | High | 7.5 | 2017-02-21 | The "Plug-in for VMware vCenter" in VCE Vision Intelligent Operations before 2.6.5 sends a cleartext HTTP response upon a request for the Settings screen, whic… |
CVE-2017-6072 | Medium | 5.3 | 2017-02-21 | CMS Made Simple version 1.x Form Builder before version 0.8.1.6 allows remote attackers to conduct information-disclosure attacks via defaultadmin. |
CVE-2017-6071 | Medium | 5.3 | 2017-02-21 | CMS Made Simple version 1.x Form Builder before version 0.8.1.6 allows remote attackers to conduct information-disclosure attacks via exportxml. |
CVE-2017-6070 | Critical | 9.8 | 2017-02-21 | CMS Made Simple version 1.x Form Builder before version 0.8.1.6 allows remote attackers to execute PHP code via the cntnt01fbrp_forma_form_template parameter i… |
CVE-2016-9314 | High | 7.8 | 2017-02-21 | Sensitive Information Disclosure in com.trend.iwss.gui.servlet.ConfigBackup in Trend Micro InterScan Web Security Virtual Appliance (IWSVA) version 6.5-SP2_Bui… |
CVE-2017-0038 | Medium | 5.5 | 2017-02-20 | gdi32.dll in Graphics Device Interface (GDI) in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 201… |
CVE-2016-6249 | Medium | 5.3 | 2017-02-20 | F5 BIG-IP 12.0.0 and 11.5.0 - 11.6.1 REST requests which timeout during user account authentication may log sensitive attributes such as passwords in plaintext… |
CVE-2017-2365 | Medium | 6.5 | 2017-02-20 | An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. The issue i… |
CVE-2017-2364 | Medium | 6.5 | 2017-02-20 | An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. The issue involves the "WebKit" component… |
CVE-2017-2363 | Medium | 6.5 | 2017-02-20 | An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. watchOS bef… |
CVE-2017-2357 | Low | 3.3 | 2017-02-20 | An issue was discovered in certain Apple products. macOS before 10.12.3 is affected. The issue involves the "IOAudioFamily" component. It allows attackers to o… |
CVE-2017-2350 | Medium | 6.5 | 2017-02-20 | An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. The issue i… |
CVE-2016-7765 | Low | 2.4 | 2017-02-20 | An issue was discovered in certain Apple products. iOS before 10.2 is affected. The issue involves the "Clipboard" component, which allows physically proximate… |
CVE-2016-7761 | Medium | 5.5 | 2017-02-20 | An issue was discovered in certain Apple products. macOS before 10.12.2 is affected. The issue involves the "WiFi" component, which allows local users to obtai… |
CVE-2016-7759 | Medium | 4.3 | 2017-02-20 | An issue was discovered in certain Apple products. iOS before 10 is affected. The issue involves the "Springboard" component, which allows physically proximate… |
CVE-2016-7714 | Low | 3.3 | 2017-02-20 | An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue i… |
CVE-2016-7666 | Medium | 5.5 | 2017-02-20 | An issue was discovered in certain Apple products. Transporter before 1.9.2 is affected. The issue involves the "iTMSTransporter" component, which allows attac… |
CVE-2016-7664 | Low | 2.4 | 2017-02-20 | An issue was discovered in certain Apple products. iOS before 10.2 is affected. The issue involves the "Accessibility" component. which allows physically proxi… |
CVE-2016-7653 | Low | 2.4 | 2017-02-20 | An issue was discovered in certain Apple products. iOS before 10.2 is affected. The issue involves the "Media Player" component, which allows physically proxim… |
CVE-2016-7634 | Medium | 4.6 | 2017-02-20 | An issue was discovered in certain Apple products. iOS before 10.2 is affected. The issue involves the "Accessibility" component, which accepts spoken password… |
CVE-2016-7625 | Low | 3.3 | 2017-02-20 | An issue was discovered in certain Apple products. macOS before 10.12.2 is affected. The issue involves the "IOKit" component. It allows local users to obtain… |
CVE-2016-7624 | Low | 3.3 | 2017-02-20 | An issue was discovered in certain Apple products. macOS before 10.12.2 is affected. The issue involves the "IOAcceleratorFamily" component. It allows local us… |
CVE-2016-7623 | Medium | 6.5 | 2017-02-20 | An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. The issue involves the "WebKit" component. It… |
CVE-2016-7620 | Low | 3.3 | 2017-02-20 | An issue was discovered in certain Apple products. macOS before 10.12.2 is affected. The issue involves the "IOSurface" component. It allows local users to obt… |
CVE-2016-7614 | Medium | 5.5 | 2017-02-20 | An issue was discovered in certain Apple products. iCloud before 6.1 is affected. The issue involves the "Windows Security" component. It allows local users to… |
CVE-2016-7608 | Medium | 5.5 | 2017-02-20 | An issue was discovered in certain Apple products. macOS before 10.12.2 is affected. The issue involves the "IOFireWireFamily" component, which allows local us… |
CVE-2016-7607 | Medium | 5.5 | 2017-02-20 | An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue i… |
CVE-2016-7600 | Medium | 6.2 | 2017-02-20 | An issue was discovered in certain Apple products. macOS before 10.12.2 is affected. The issue involves the "OpenPAM" component, which allows local users to ob… |
CVE-2016-7599 | Medium | 6.5 | 2017-02-20 | An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before… |
CVE-2016-7598 | Medium | 6.5 | 2017-02-20 | An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before… |
CVE-2016-7592 | Medium | 4.3 | 2017-02-20 | An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before… |
CVE-2016-7586 | Medium | 6.5 | 2017-02-20 | An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before… |
CVE-2016-7579 | Medium | 5.9 | 2017-02-20 | An issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10.12.1 is affected. tvOS before 10.0.1 is affected. The issue inv… |
CVE-2016-7577 | Low | 3.7 | 2017-02-20 | An issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10.12.1 is affected. The issue involves the "FaceTime" component… |
CVE-2016-4680 | Medium | 5.5 | 2017-02-20 | An issue was discovered in certain Apple products. iOS before 10.1 is affected. tvOS before 10.0.1 is affected. watchOS before 3.1 is affected. The issue invol… |
CVE-2016-4665 | Low | 3.3 | 2017-02-20 | An issue was discovered in certain Apple products. iOS before 10.1 is affected. tvOS before 10.0.1 is affected. watchOS before 3.1 is affected. The issue invol… |
CVE-2016-4664 | Low | 3.3 | 2017-02-20 | An issue was discovered in certain Apple products. iOS before 10.1 is affected. tvOS before 10.0.1 is affected. watchOS before 3.1 is affected. The issue invol… |
CVE-2016-4660 | High | 7.1 | 2017-02-20 | An issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10.12.1 is affected. tvOS before 10.0.1 is affected. watchOS befor… |
CVE-2016-4613 | Medium | 6.5 | 2017-02-20 | An issue was discovered in certain Apple products. Safari before 10.0.1 is affected. iCloud before 6.0.1 is affected. iTunes before 12.5.2 is affected. tvOS be… |
CVE-2016-6190 | Medium | 4.3 | 2017-02-17 | SOGo before 2.3.12 and 3.x before 3.1.1 does not restrict access to the UID and DTSTAMP attributes, which allows remote authenticated users to obtain sensitive… |
CVE-2017-5017 | Medium | 4.3 | 2017-02-17 | Interactions with the OS in Google Chrome prior to 56.0.2924.76 for Mac insufficiently cleared video memory, which allowed a remote attacker to possibly extrac… |
CVE-2017-5011 | Medium | 6.5 | 2017-02-17 | Google Chrome prior to 56.0.2924.76 for Windows insufficiently sanitized DevTools URLs, which allowed a remote attacker who convinced a user to install a malic… |
CVE-2016-6060 | Medium | 4.3 | 2017-02-15 | An undisclosed vulnerability in IBM Rational DOORS Next Generation 4.0, 5.0, and 6.0 could allow a JazzGuest user to see project names. IBM Reference #: 199554… |
CVE-2017-5967 | Medium | 4.0 | 2017-02-14 | The time subsystem in the Linux kernel through 4.9.9, when CONFIG_TIMER_STATS is enabled, allows local users to discover real PID values (as distinguished from… |
CVE-2017-5166 | Critical | 9.8 | 2017-02-13 | An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter. An INFORMATION EXPOSURE flaw can be used to gain privileged access to… |
CVE-2017-5146 | High | 7.5 | 2017-02-13 | An issue was discovered in Carlo Gavazzi VMU-C EM prior to firmware Version A11_U05, and VMU-C PV prior to firmware Version A17. Sensitive information is store… |
CVE-2016-9349 | High | 7.5 | 2017-02-13 | An issue was discovered in Advantech SUISAccess Server Version 3.0 and prior. An attacker could traverse the file system and extract files that can result in i… |
CVE-2016-5813 | Medium | 5.3 | 2017-02-13 | An issue was discovered in Visonic PowerLink2, all versions prior to October 2016 firmware release. When a specific URL to an image is accessed, the downloaded… |
CVE-2016-5786 | High | 7.5 | 2017-02-13 | An issue was discovered in OmniMetrix OmniView, Version 1.2. The OmniView web application transmits credentials with the HTTP protocol, which could be sniffed… |
CVE-2016-3995 | High | 7.5 | 2017-02-13 | The timing attack protection in Rijndael::Enc::ProcessAndXorBlock and Rijndael::Dec::ProcessAndXorBlock in Crypto++ (aka cryptopp) before 5.6.4 may be optimize… |
CVE-2016-6210 | Medium | 5.9 | 2017-02-13 | sshd in OpenSSH before 7.3, when SHA256 or SHA512 are used for user password hashing, uses BLOWFISH hashing on a static password when the username does not exi… |
CVE-2016-8495 | High | 7.4 | 2017-02-13 | An improper certificate validation vulnerability in Fortinet FortiManager 5.0.6 through 5.2.7 and 5.4.0 through 5.4.1 allows remote attacker to spoof a trusted… |
CVE-2016-9244 | High | 7.5 | 2017-02-09 | A BIG-IP virtual server configured with a Client SSL profile that has the non-default Session Tickets option enabled may leak up to 31 bytes of uninitialized m… |
CVE-2016-5918 | Medium | 4.7 | 2017-02-08 | IBM Tivoli Storage Manager HSM for Windows displays the encrypted Tivoli Storage Manager password in application trace output if the password access option is… |
CVE-2016-5900 | Medium | 5.9 | 2017-02-08 | IBM Tealeaf Customer Experience on Cloud Network Capture Add-On could allow a remote attacker to obtain sensitive information, caused by the failure to properl… |
CVE-2016-0307 | Medium | 4.3 | 2017-02-08 | IBM Connections 5.5 and earlier allows remote attackers to obtain sensitive information by reading stack traces in returned responses. |
CVE-2016-0210 | Medium | 5.3 | 2017-02-08 | IBM Sterling B2B Integrator Standard Edition could allow a remote attacker to obtain sensitive information. By allowing HTTP OPTIONS method, a remote attacker… |
CVE-2016-0203 | Medium | 5.5 | 2017-02-08 | A vulnerability has been identified in the IBM Cloud Orchestrator task API. The task API might allow an authenticated user to view background information assoc… |
CVE-2016-0202 | Low | 3.3 | 2017-02-08 | A vulnerability has been identified in tasks, backend object generated for handling any action performed by the application in IBM Cloud Orchestrator. It is po… |
CVE-2015-7493 | Medium | 4.7 | 2017-02-08 | IBM InfoSphere Information Server could allow a local user under special circumstances to execute commands during installation processes that could expose sens… |
CVE-2015-7418 | Medium | 4.4 | 2017-02-08 | IBM WebSphere eXtreme Scale and the WebSphere DataPower XC10 Appliance allow some sensitive data to linger in memory instead of being overwritten which could a… |
CVE-2016-9748 | Medium | 4.3 | 2017-02-08 | IBM Rational DOORS Next Generation 5.0 and 6.0 discloses sensitive information in error response messages that could be used for further attacks against the sy… |
CVE-2016-2866 | Medium | 4.3 | 2017-02-08 | An unspecified vulnerability in IBM Jazz Team Server may disclose some deployment information to an authenticated user. |
CVE-2017-5933 | Medium | 5.9 | 2017-02-08 | Citrix NetScaler ADC and NetScaler Gateway 10.5 before Build 65.11, 11.0 before Build 69.12/69.123, and 11.1 before Build 51.21 randomly generates GCM nonces… |
CVE-2016-8492 | Medium | 5.9 | 2017-02-08 | The implementation of an ANSI X9.31 RNG in Fortinet FortiGate allows attackers to gain unauthorized read access to data handled by the device via IPSec/TLS dec… |