CWE-200 · Information Disclosure (page 76)
Page 76 of 100 — CVEs classified under CWE-200, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2016-9107 | High | 7.5 | 2017-01-13 | The OTR plugin for Gajim sends information in cleartext when using XHTML, which allows remote attackers to obtain sensitive information via unspecified vectors. |
CVE-2016-8671 | Medium | 5.9 | 2017-01-13 | The pstm_exptmod function in MatrixSSL 3.8.6 and earlier does not properly perform modular exponentiation, which might allow remote attackers to predict the se… |
CVE-2016-6887 | Medium | 5.9 | 2017-01-13 | The pstm_exptmod function in MatrixSSL 3.8.6 and earlier does not properly perform modular exponentiation, which might allow remote attackers to predict the se… |
CVE-2016-3130 | High | 8.1 | 2017-01-13 | An information disclosure vulnerability in the Core and Management Console in BlackBerry Enterprise Server (BES) 12 through 12.5.2 allows remote attackers to o… |
CVE-2016-10140 | High | 7.5 | 2017-01-13 | Information disclosure and authentication bypass vulnerability exists in the Apache HTTP Server configuration bundled with ZoneMinder v1.30 and v1.29, which al… |
CVE-2016-10135 | Medium | 5.5 | 2017-01-13 | An issue was discovered on LG devices using the MTK chipset with L(5.0/5.1), M(6.0/6.0.1), and N(7.0) software, and RCA Voyager Tablet, BLU Advance 5.0, and BL… |
CVE-2016-3152 | Critical | 9.8 | 2017-01-12 | Barco ClickShare CSC-1 devices with firmware before 01.09.03 allow remote attackers to obtain the root password by downloading and extracting the firmware imag… |
CVE-2017-0402 | Medium | 5.5 | 2017-01-12 | An information disclosure vulnerability in lvm/wrapper/Bundle/EffectBundle.cpp in libeffects in Audioserver could enable a local malicious application to acces… |
CVE-2017-0401 | Medium | 5.5 | 2017-01-12 | An information disclosure vulnerability in lvm/wrapper/Bundle/EffectBundle.cpp in libeffects in the Qualcomm audio post processor could enable a local maliciou… |
CVE-2017-0400 | Medium | 5.5 | 2017-01-12 | An information disclosure vulnerability in lvm/wrapper/Bundle/EffectBundle.cpp in libeffects in Audioserver could enable a local malicious application to acces… |
CVE-2017-0399 | Medium | 5.5 | 2017-01-12 | An information disclosure vulnerability in lvm/wrapper/Bundle/EffectBundle.cpp in libeffects in the Qualcomm audio post processor could enable a local maliciou… |
CVE-2017-0397 | Medium | 5.5 | 2017-01-12 | An information disclosure vulnerability in id3/ID3.cpp in libstagefright in Mediaserver could enable a local malicious application to access data outside of it… |
CVE-2017-0396 | Medium | 5.5 | 2017-01-12 | An information disclosure vulnerability in visualizer/EffectVisualizer.cpp in libeffects in Mediaserver could enable a local malicious application to access da… |
CVE-2017-0388 | Medium | 5.5 | 2017-01-12 | An elevation of privilege vulnerability in the External Storage Provider could enable a local secondary user to read data from an external storage SD card inse… |
CVE-2016-8475 | Medium | 4.7 | 2017-01-12 | An information disclosure vulnerability in the HTC input driver could enable a local malicious application to access data outside of its permission levels. Thi… |
CVE-2016-8474 | Medium | 4.7 | 2017-01-12 | An information disclosure vulnerability in the STMicroelectronics driver could enable a local malicious application to access data outside of its permission le… |
CVE-2016-8473 | Medium | 4.7 | 2017-01-12 | An information disclosure vulnerability in the STMicroelectronics driver could enable a local malicious application to access data outside of its permission le… |
CVE-2016-8472 | Medium | 4.7 | 2017-01-12 | An information disclosure vulnerability in the MediaTek driver could enable a local malicious application to access data outside of its permission levels. This… |
CVE-2016-8471 | Medium | 4.7 | 2017-01-12 | An information disclosure vulnerability in the MediaTek driver could enable a local malicious application to access data outside of its permission levels. This… |
CVE-2016-8470 | Medium | 4.7 | 2017-01-12 | An information disclosure vulnerability in the MediaTek driver could enable a local malicious application to access data outside of its permission levels. This… |
CVE-2016-8469 | Medium | 4.7 | 2017-01-12 | An information disclosure vulnerability in the camera driver could enable a local malicious application to access data outside of its permission levels. This i… |
CVE-2016-8462 | Medium | 5.5 | 2017-01-12 | An information disclosure vulnerability in the bootloader could enable a local attacker to access data outside of its permission level. This issue is rated as… |
CVE-2016-8461 | Medium | 5.5 | 2017-01-12 | An information disclosure vulnerability in the bootloader could enable a local attacker to access data outside of its permission level. This issue is rated as… |
CVE-2016-8460 | Medium | 5.5 | 2017-01-12 | An information disclosure vulnerability in the NVIDIA video driver could enable a local malicious application to access data outside of its permission levels… |
CVE-2016-8410 | Medium | 4.7 | 2017-01-12 | An information disclosure vulnerability in the Qualcomm sound driver could enable a local malicious application to access data outside of its permission levels… |
CVE-2016-8409 | Medium | 4.7 | 2017-01-12 | An information disclosure vulnerability in the NVIDIA video driver could enable a local malicious application to access data outside of its permission levels… |
CVE-2016-8408 | Medium | 4.7 | 2017-01-12 | An information disclosure vulnerability in the NVIDIA video driver could enable a local malicious application to access data outside of its permission levels… |
CVE-2016-8407 | Medium | 4.7 | 2017-01-12 | An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could enable a local mali… |
CVE-2016-8406 | Medium | 4.7 | 2017-01-12 | An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could enable a local mali… |
CVE-2016-8405 | Medium | 4.7 | 2017-01-12 | An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could enable a local mali… |
CVE-2016-8404 | Medium | 4.7 | 2017-01-12 | An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could enable a local mali… |
CVE-2016-8403 | Medium | 4.7 | 2017-01-12 | An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could enable a local mali… |
CVE-2016-8402 | Medium | 4.7 | 2017-01-12 | An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could enable a local mali… |
CVE-2016-8401 | Medium | 4.7 | 2017-01-12 | An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could enable a local mali… |
CVE-2016-8400 | Medium | 5.5 | 2017-01-12 | An information disclosure vulnerability in the NVIDIA librm library (libnvrm) could enable a local malicious application to access data outside of its permissi… |
CVE-2016-8397 | Medium | 5.5 | 2017-01-12 | An information disclosure vulnerability in the NVIDIA video driver could enable a local malicious application to access data outside of its permission levels… |
CVE-2016-8396 | Medium | 5.5 | 2017-01-12 | An information disclosure vulnerability in the MediaTek video driver could enable a local malicious application to access data outside of its permission levels… |
CVE-2016-6774 | Medium | 4.7 | 2017-01-12 | An information disclosure vulnerability in Package Manager could enable a local malicious application to bypass operating system protections that isolate appli… |
CVE-2016-6773 | Medium | 5.5 | 2017-01-12 | An information disclosure vulnerability in the ih264d decoder in Mediaserver could enable a local malicious application to access data outside of its permissio… |
CVE-2016-6757 | Medium | 4.7 | 2017-01-12 | An information disclosure vulnerability in Qualcomm components including the camera driver and video driver could enable a local malicious application to acces… |
CVE-2016-6756 | Medium | 4.7 | 2017-01-12 | An information disclosure vulnerability in Qualcomm components including the camera driver and video driver could enable a local malicious application to acces… |
CVE-2016-6820 | High | 7.5 | 2017-01-11 | MetroCluster Tiebreaker for clustered Data ONTAP in versions before 1.2 discloses sensitive information in cleartext which may be viewed by an unauthenticated… |
CVE-2016-4806 | High | 7.5 | 2017-01-11 | Web2py versions 2.14.5 and below was affected by Local File Inclusion vulnerability, which allows a malicious intended user to read/access web server sensitive… |
CVE-2015-8020 | Low | 3.7 | 2017-01-11 | Clustered Data ONTAP versions 8.0, 8.3.1, and 8.3.2 contain a default privileged account which under certain conditions can be used for unauthorized informatio… |
CVE-2016-9885 | Critical | 9.8 | 2017-01-06 | An issue was discovered in Pivotal GemFire for PCF 1.6.x versions prior to 1.6.5 and 1.7.x versions prior to 1.7.1. The gfsh (Geode Shell) endpoint, used by op… |
CVE-2016-4306 | Medium | 5.5 | 2017-01-06 | Multiple information leaks exist in various IOCTL handlers of the Kaspersky Internet Security KLDISK driver. Specially crafted IOCTL requests can cause the dri… |
CVE-2016-2380 | Low | 3.1 | 2017-01-06 | An information leak exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent to the server could potentially result in an out-of… |
CVE-2016-2374 | High | 8.1 | 2017-01-06 | An exploitable memory corruption vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT MultiMX message sent via the serve… |
CVE-2016-2372 | Medium | 5.9 | 2017-01-06 | An information leak exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent via the server could potentially result in an out-o… |
CVE-2016-2367 | Medium | 5.9 | 2017-01-06 | An information leak exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent via the server could potentially result in an out-o… |
CVE-2016-1550 | Medium | 5.3 | 2017-01-06 | An exploitable vulnerability exists in the message authentication functionality of libntp in ntp 4.2.8p4 and NTPSec a5fb34b9cc89b92a8fef2f459004865c93bb7f92. A… |
CVE-2016-10105 | Critical | 9.8 | 2017-01-03 | admin/plugin.php in Piwigo through 2.8.3 doesn't validate the sections variable while using it to include files. This can cause information disclosure and code… |
CVE-2016-6859 | Medium | 4.3 | 2016-12-31 | Hybris Management Console (HMC) in SAP Hybris before 6.0 allows remote attackers to obtain sensitive information by triggering an error and then reading a Java… |
CVE-2016-9845 | Medium | 6.5 | 2016-12-29 | QEMU (aka Quick Emulator) built with the Virtio GPU Device emulator support is vulnerable to an information leakage issue. It could occur while processing 'VIR… |
CVE-2016-5329 | Medium | 5.5 | 2016-12-29 | VMware Fusion 8.x before 8.5 on OS X, when System Integrity Protection (SIP) is enabled, allows local users to determine kernel memory addresses and bypass the… |
CVE-2016-5328 | Medium | 5.5 | 2016-12-29 | VMware Tools 9.x and 10.x before 10.1.0 on OS X, when System Integrity Protection (SIP) is enabled, allows local users to determine kernel memory addresses and… |
CVE-2016-9756 | Medium | 5.5 | 2016-12-28 | arch/x86/kvm/emulate.c in the Linux kernel before 4.8.12 does not properly initialize Code Segment (CS) in certain error cases, which allows local users to obt… |
CVE-2016-9908 | Low | 3.3 | 2016-12-23 | Quick Emulator (Qemu) built with the Virtio GPU Device emulator support is vulnerable to an information leakage issue. It could occur while processing 'VIRTIO_… |
CVE-2016-6910 | Medium | 5.5 | 2016-12-23 | The non-existent notification listener vulnerability was introduced in the initial Android 5.0.2 builds for the Samsung Galaxy S6 Edge devices, but the vulnera… |
CVE-2016-7555 | Medium | 5.5 | 2016-12-23 | The avi_read_header function in libavformat/avidec.c in FFmpeg before 3.1.4 is vulnerable to memory leak when decoding an AVI file that has a crafted "strh" st… |
CVE-2016-7091 | Medium | 4.4 | 2016-12-22 | sudo: It was discovered that the default sudo configuration on Red Hat Enterprise Linux and possibly other Linux implementations preserves the value of INPUTRC… |
CVE-2016-7172 | High | 7.5 | 2016-12-21 | NetApp Snap Creator Framework before 4.3.1 discloses sensitive information which could be viewed by an unauthorized user. |
CVE-2016-7295 | Medium | 5.5 | 2016-12-20 | The Common Log File System (CLFS) driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Go… |
CVE-2016-7284 | Medium | 4.3 | 2016-12-20 | Microsoft Internet Explorer 10 and 11 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Internet Explore… |
CVE-2016-7278 | Medium | 5.3 | 2016-12-20 | Microsoft Internet Explorer 9 through 11 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Windows Hyper… |
CVE-2016-7258 | Medium | 5.5 | 2016-12-20 | The kernel in Microsoft Windows 10 Gold, 1511, and 1607 and Windows Server 2016 mishandles page-fault system calls, which allows local users to obtain sensitiv… |
CVE-2016-7257 | Medium | 6.5 | 2016-12-20 | The GDI component in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Office for Mac 2011, and Office 2016 for Mac allows remote… |
CVE-2016-7219 | Medium | 5.5 | 2016-12-20 | The Crypto driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8… |
CVE-2016-10005 | High | 7.5 | 2016-12-19 | Webdynpro in SAP Solman 7.1 through 7.31 allows remote attackers to obtain sensitive information via webdynpro/dispatcher/sap.com/caf~eu~gp~example~timeoff~wd… |
CVE-2016-9159 | Medium | 5.9 | 2016-12-17 | A vulnerability has been identified in SIMATIC S7-300 CPU family (All versions), SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All… |
CVE-2016-8820 | Medium | 6.1 | 2016-12-16 | All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape where a check on a f… |
CVE-2015-3271 | Medium | 5.3 | 2016-12-15 | Apache Tika server (aka tika-server) in Apache Tika 1.9 might allow remote attackers to read arbitrary files via the HTTP fileUrl header. |
CVE-2016-7889 | High | 7.5 | 2016-12-15 | Adobe Digital Editions versions 4.5.2 and earlier has an issue with parsing crafted XML entries that could lead to information disclosure. |
CVE-2016-7888 | Medium | 5.3 | 2016-12-15 | Adobe Digital Editions versions 4.5.2 and earlier has an important vulnerability that could lead to memory address leak. |
CVE-2016-7887 | High | 7.5 | 2016-12-15 | Adobe ColdFusion Builder versions 2016 update 2 and earlier, 3.0.3 and earlier have an important vulnerability that could lead to information disclosure. |
CVE-2016-6852 | Medium | 4.3 | 2016-12-15 | An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev8. Users can provide local file paths to the RSS reader; the response and error code give… |
CVE-2016-4047 | Medium | 4.3 | 2016-12-15 | An issue was discovered in Open-Xchange OX App Suite before 7.8.1-rev8. References to external Open XML document type definitions (.dtd resources) can be place… |
CVE-2016-4027 | Low | 3.5 | 2016-12-15 | An issue was discovered in Open-Xchange OX App Suite before 7.8.1-rev10. App Suite frontend offers to control whether a user wants to store cookies that exceed… |
CVE-2016-9201 | High | 7.5 | 2016-12-14 | A vulnerability in the Zone-Based Firewall feature of Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, remote attacker to pass traffic that… |
CVE-2016-6471 | Medium | 6.5 | 2016-12-14 | A vulnerability in the web-based management interface of Cisco Firepower Management Center running FireSIGHT System software could allow an authenticated, remo… |
CVE-2016-6464 | High | 7.5 | 2016-12-14 | A vulnerability in the web management interface of the Cisco Unified Communications Manager IM and Presence Service could allow an unauthenticated, remote atta… |
CVE-2016-6313 | Medium | 5.3 | 2016-12-13 | The mixing functions in the random number generator in Libgcrypt before 1.5.6, 1.6.x before 1.6.6, and 1.7.x before 1.7.3 and GnuPG before 1.4.21 make it easie… |
CVE-2016-6722 | Medium | 5.5 | 2016-12-13 | An information disclosure vulnerability in libstagefright in Mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-1… |
CVE-2016-6720 | Medium | 5.5 | 2016-12-13 | An information disclosure vulnerability in libstagefright in Mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-1… |
CVE-2015-5073 | Critical | 9.1 | 2016-12-13 | Heap-based buffer overflow in the find_fixedlength function in pcre_compile.c in PCRE before 8.38 allows remote attackers to cause a denial of service (crash)… |
CVE-2016-9855 | Medium | 5.3 | 2016-12-11 | An issue was discovered in phpMyAdmin. By calling some scripts that are part of phpMyAdmin in an unexpected way, it is possible to trigger phpMyAdmin to displa… |
CVE-2016-9854 | Medium | 5.3 | 2016-12-11 | An issue was discovered in phpMyAdmin. By calling some scripts that are part of phpMyAdmin in an unexpected way, it is possible to trigger phpMyAdmin to displa… |
CVE-2016-9853 | Medium | 5.3 | 2016-12-11 | An issue was discovered in phpMyAdmin. By calling some scripts that are part of phpMyAdmin in an unexpected way, it is possible to trigger phpMyAdmin to displa… |
CVE-2016-9852 | Medium | 5.3 | 2016-12-11 | An issue was discovered in phpMyAdmin. By calling some scripts that are part of phpMyAdmin in an unexpected way, it is possible to trigger phpMyAdmin to displa… |
CVE-2016-9848 | Medium | 5.3 | 2016-12-11 | An issue was discovered in phpMyAdmin. phpinfo (phpinfo.php) shows PHP information including values of HttpOnly cookies. All 4.6.x versions (prior to 4.6.5), 4… |
CVE-2016-6627 | Medium | 5.3 | 2016-12-11 | An issue was discovered in phpMyAdmin. An attacker can determine the phpMyAdmin host location through the file url.php. All 4.6.x versions (prior to 4.6.4), 4… |
CVE-2016-6625 | Medium | 4.3 | 2016-12-11 | An issue was discovered in phpMyAdmin. An attacker can determine whether a user is logged in to phpMyAdmin. The user's session, username, and password are not… |
CVE-2016-6613 | Medium | 5.3 | 2016-12-11 | An issue was discovered in phpMyAdmin. A user can specially craft a symlink on disk, to a file which phpMyAdmin is permitted to read but the user is not, which… |
CVE-2016-6612 | Medium | 6.5 | 2016-12-11 | An issue was discovered in phpMyAdmin. A user can exploit the LOAD LOCAL INFILE functionality to expose files on the server to the database system. All 4.6.x v… |
CVE-2016-6610 | Medium | 4.3 | 2016-12-11 | A full path disclosure vulnerability was discovered in phpMyAdmin where a user can trigger a particular error in the export mechanism to discover the full path… |
CVE-2016-6606 | High | 8.1 | 2016-12-11 | An issue was discovered in cookie encryption in phpMyAdmin. The decryption of the username/password is vulnerable to a padding oracle attack. This can allow an… |
CVE-2016-9103 | Medium | 6.0 | 2016-12-09 | The v9fs_xattrcreate function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS administrators to obtain sensitive host heap memory informatio… |
CVE-2016-9839 | High | 7.5 | 2016-12-08 | In MapServer before 7.0.3, OGR driver error messages are too verbose and may leak sensitive information if data connection fails. |
CVE-2016-3012 | High | 7.5 | 2016-12-01 | IBM API Connect (aka APIConnect) before 5.0.3.0 with NPM before 2.2.8 includes certain internal server credentials in the software package, which might allow r… |
CVE-2016-2887 | High | 8.1 | 2016-11-30 | IBM IMS Enterprise Suite Data Provider before 3.2.0.1 for Microsoft .NET allows remote authenticated users to obtain sensitive information or modify data via u… |