CWE-200 · Information Disclosure (page 82)
Page 82 of 100 — CVEs classified under CWE-200, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2016-1919 | Medium | 4.7 | 2017-01-27 | Samsung KNOX 1.0 uses a weak eCryptFS Key generation algorithm, which makes it easier for local users to obtain sensitive information by leveraging knowledge o… |
CVE-2016-10002 | High | 7.5 | 2017-01-27 | Incorrect processing of responses to If-None-Modified HTTP conditional requests in Squid HTTP Proxy 3.1.10 through 3.1.23, 3.2.0.3 through 3.5.22, and 4.0.1 th… |
CVE-2016-9932 | Low | 3.3 | 2017-01-26 | CMPXCHG8B emulation in Xen 3.3.x through 4.7.x on x86 systems allows local HVM guest OS users to obtain sensitive information from host stack memory via a "sup… |
CVE-2017-3805 | Medium | 5.3 | 2017-01-26 | A vulnerability in the web-based management interface of Cisco IOS and Cisco IOx Software could allow an unauthenticated, remote attacker to view confidential… |
CVE-2017-3797 | Medium | 5.3 | 2017-01-26 | A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to view the fully qualified domain name of the Cisco WebEx admin… |
CVE-2017-5372 | High | 7.5 | 2017-01-23 | The function msp (aka MSPRuntimeInterface) in the P4 SERVERCORE component in SAP AS JAVA allows remote attackers to obtain sensitive system information by leve… |
CVE-2016-6668 | High | 7.5 | 2017-01-23 | The Atlassian Hipchat Integration Plugin for Bitbucket Server 6.26.0 before 6.27.5, 6.28.0 before 7.3.7, and 7.4.0 before 7.8.17; Confluence HipChat plugin 6.2… |
CVE-2017-5182 | High | 7.5 | 2017-01-23 | Remote Manager in Open Enterprise Server (OES) allows unauthenticated remote attackers to read any arbitrary file, via a specially crafted URL, that allows com… |
CVE-2016-5014 | Medium | 5.4 | 2017-01-20 | In Moodle 2.x and 3.x, an unenrolled user still receives event monitor notifications even though they can no longer access the course. |
CVE-2016-5012 | Medium | 5.3 | 2017-01-20 | In Moodle 3.x, glossary search displays entries without checking user permissions to view them. |
CVE-2016-10143 | High | 7.5 | 2017-01-20 | A vulnerability in Tiki Wiki CMS 15.2 could allow a remote attacker to read arbitrary files on a targeted system via a crafted pathname in a banner URL field. |
CVE-2016-5220 | Medium | 6.5 | 2017-01-19 | PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly handled navigation within PDFs, which allowe… |
CVE-2016-5212 | Medium | 6.5 | 2017-01-19 | Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android insufficiently sanitized DevTools URLs, which allowed a remote att… |
CVE-2016-5201 | Medium | 6.5 | 2017-01-19 | A leak of privateClass in the extensions API in Google Chrome prior to 54.0.2840.100 for Linux, and 54.0.2840.99 for Windows, and 54.0.2840.98 for Mac allowed… |
CVE-2016-9680 | High | 7.5 | 2017-01-18 | Citrix Provisioning Services before 7.12 allows attackers to obtain sensitive information from kernel memory via unspecified vectors. |
CVE-2016-9677 | Medium | 5.3 | 2017-01-18 | Citrix Provisioning Services before 7.12 allows attackers to obtain sensitive kernel address information via unspecified vectors. |
CVE-2017-5223 | Medium | 5.5 | 2017-01-16 | An issue was discovered in PHPMailer before 5.2.22. PHPMailer's msgHTML method applies transformations to an HTML document to make it usable as an email messag… |
CVE-2017-5487 | Medium | 5.3 | 2017-01-15 | wp-includes/rest-api/endpoints/class-wp-rest-users-controller.php in the REST API implementation in WordPress 4.7 before 4.7.1 does not properly restrict listi… |
CVE-2017-2584 | High | 7.1 | 2017-01-15 | arch/x86/kvm/emulate.c in the Linux kernel through 4.9.3 allows local users to obtain sensitive information from kernel memory or cause a denial of service (us… |
CVE-2017-0398 | Medium | 5.5 | 2017-01-13 | An information disclosure vulnerability in Audioserver could enable a local malicious application to access data outside of its permission levels. This issue i… |
CVE-2016-9107 | High | 7.5 | 2017-01-13 | The OTR plugin for Gajim sends information in cleartext when using XHTML, which allows remote attackers to obtain sensitive information via unspecified vectors. |
CVE-2016-8671 | Medium | 5.9 | 2017-01-13 | The pstm_exptmod function in MatrixSSL 3.8.6 and earlier does not properly perform modular exponentiation, which might allow remote attackers to predict the se… |
CVE-2016-6887 | Medium | 5.9 | 2017-01-13 | The pstm_exptmod function in MatrixSSL 3.8.6 and earlier does not properly perform modular exponentiation, which might allow remote attackers to predict the se… |
CVE-2016-3130 | High | 8.1 | 2017-01-13 | An information disclosure vulnerability in the Core and Management Console in BlackBerry Enterprise Server (BES) 12 through 12.5.2 allows remote attackers to o… |
CVE-2016-10140 | High | 7.5 | 2017-01-13 | Information disclosure and authentication bypass vulnerability exists in the Apache HTTP Server configuration bundled with ZoneMinder v1.30 and v1.29, which al… |
CVE-2016-10135 | Medium | 5.5 | 2017-01-13 | An issue was discovered on LG devices using the MTK chipset with L(5.0/5.1), M(6.0/6.0.1), and N(7.0) software, and RCA Voyager Tablet, BLU Advance 5.0, and BL… |
CVE-2016-3152 | Critical | 9.8 | 2017-01-12 | Barco ClickShare CSC-1 devices with firmware before 01.09.03 allow remote attackers to obtain the root password by downloading and extracting the firmware imag… |
CVE-2017-0402 | Medium | 5.5 | 2017-01-12 | An information disclosure vulnerability in lvm/wrapper/Bundle/EffectBundle.cpp in libeffects in Audioserver could enable a local malicious application to acces… |
CVE-2017-0401 | Medium | 5.5 | 2017-01-12 | An information disclosure vulnerability in lvm/wrapper/Bundle/EffectBundle.cpp in libeffects in the Qualcomm audio post processor could enable a local maliciou… |
CVE-2017-0400 | Medium | 5.5 | 2017-01-12 | An information disclosure vulnerability in lvm/wrapper/Bundle/EffectBundle.cpp in libeffects in Audioserver could enable a local malicious application to acces… |
CVE-2017-0399 | Medium | 5.5 | 2017-01-12 | An information disclosure vulnerability in lvm/wrapper/Bundle/EffectBundle.cpp in libeffects in the Qualcomm audio post processor could enable a local maliciou… |
CVE-2017-0397 | Medium | 5.5 | 2017-01-12 | An information disclosure vulnerability in id3/ID3.cpp in libstagefright in Mediaserver could enable a local malicious application to access data outside of it… |
CVE-2017-0396 | Medium | 5.5 | 2017-01-12 | An information disclosure vulnerability in visualizer/EffectVisualizer.cpp in libeffects in Mediaserver could enable a local malicious application to access da… |
CVE-2017-0388 | Medium | 5.5 | 2017-01-12 | An elevation of privilege vulnerability in the External Storage Provider could enable a local secondary user to read data from an external storage SD card inse… |
CVE-2016-8475 | Medium | 4.7 | 2017-01-12 | An information disclosure vulnerability in the HTC input driver could enable a local malicious application to access data outside of its permission levels. Thi… |
CVE-2016-8474 | Medium | 4.7 | 2017-01-12 | An information disclosure vulnerability in the STMicroelectronics driver could enable a local malicious application to access data outside of its permission le… |
CVE-2016-8473 | Medium | 4.7 | 2017-01-12 | An information disclosure vulnerability in the STMicroelectronics driver could enable a local malicious application to access data outside of its permission le… |
CVE-2016-8472 | Medium | 4.7 | 2017-01-12 | An information disclosure vulnerability in the MediaTek driver could enable a local malicious application to access data outside of its permission levels. This… |
CVE-2016-8471 | Medium | 4.7 | 2017-01-12 | An information disclosure vulnerability in the MediaTek driver could enable a local malicious application to access data outside of its permission levels. This… |
CVE-2016-8470 | Medium | 4.7 | 2017-01-12 | An information disclosure vulnerability in the MediaTek driver could enable a local malicious application to access data outside of its permission levels. This… |
CVE-2016-8469 | Medium | 4.7 | 2017-01-12 | An information disclosure vulnerability in the camera driver could enable a local malicious application to access data outside of its permission levels. This i… |
CVE-2016-8462 | Medium | 5.5 | 2017-01-12 | An information disclosure vulnerability in the bootloader could enable a local attacker to access data outside of its permission level. This issue is rated as… |
CVE-2016-8461 | Medium | 5.5 | 2017-01-12 | An information disclosure vulnerability in the bootloader could enable a local attacker to access data outside of its permission level. This issue is rated as… |
CVE-2016-8460 | Medium | 5.5 | 2017-01-12 | An information disclosure vulnerability in the NVIDIA video driver could enable a local malicious application to access data outside of its permission levels… |
CVE-2016-8410 | Medium | 4.7 | 2017-01-12 | An information disclosure vulnerability in the Qualcomm sound driver could enable a local malicious application to access data outside of its permission levels… |
CVE-2016-8409 | Medium | 4.7 | 2017-01-12 | An information disclosure vulnerability in the NVIDIA video driver could enable a local malicious application to access data outside of its permission levels… |
CVE-2016-8408 | Medium | 4.7 | 2017-01-12 | An information disclosure vulnerability in the NVIDIA video driver could enable a local malicious application to access data outside of its permission levels… |
CVE-2016-8407 | Medium | 4.7 | 2017-01-12 | An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could enable a local mali… |
CVE-2016-8406 | Medium | 4.7 | 2017-01-12 | An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could enable a local mali… |
CVE-2016-8405 | Medium | 4.7 | 2017-01-12 | An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could enable a local mali… |
CVE-2016-8404 | Medium | 4.7 | 2017-01-12 | An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could enable a local mali… |
CVE-2016-8403 | Medium | 4.7 | 2017-01-12 | An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could enable a local mali… |
CVE-2016-8402 | Medium | 4.7 | 2017-01-12 | An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could enable a local mali… |
CVE-2016-8401 | Medium | 4.7 | 2017-01-12 | An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could enable a local mali… |
CVE-2016-8400 | Medium | 5.5 | 2017-01-12 | An information disclosure vulnerability in the NVIDIA librm library (libnvrm) could enable a local malicious application to access data outside of its permissi… |
CVE-2016-8397 | Medium | 5.5 | 2017-01-12 | An information disclosure vulnerability in the NVIDIA video driver could enable a local malicious application to access data outside of its permission levels… |
CVE-2016-8396 | Medium | 5.5 | 2017-01-12 | An information disclosure vulnerability in the MediaTek video driver could enable a local malicious application to access data outside of its permission levels… |
CVE-2016-6774 | Medium | 4.7 | 2017-01-12 | An information disclosure vulnerability in Package Manager could enable a local malicious application to bypass operating system protections that isolate appli… |
CVE-2016-6773 | Medium | 5.5 | 2017-01-12 | An information disclosure vulnerability in the ih264d decoder in Mediaserver could enable a local malicious application to access data outside of its permissio… |
CVE-2016-6757 | Medium | 4.7 | 2017-01-12 | An information disclosure vulnerability in Qualcomm components including the camera driver and video driver could enable a local malicious application to acces… |
CVE-2016-6756 | Medium | 4.7 | 2017-01-12 | An information disclosure vulnerability in Qualcomm components including the camera driver and video driver could enable a local malicious application to acces… |
CVE-2016-6820 | High | 7.5 | 2017-01-11 | MetroCluster Tiebreaker for clustered Data ONTAP in versions before 1.2 discloses sensitive information in cleartext which may be viewed by an unauthenticated… |
CVE-2016-4806 | High | 7.5 | 2017-01-11 | Web2py versions 2.14.5 and below was affected by Local File Inclusion vulnerability, which allows a malicious intended user to read/access web server sensitive… |
CVE-2015-8020 | Low | 3.7 | 2017-01-11 | Clustered Data ONTAP versions 8.0, 8.3.1, and 8.3.2 contain a default privileged account which under certain conditions can be used for unauthorized informatio… |
CVE-2016-9885 | Critical | 9.8 | 2017-01-06 | An issue was discovered in Pivotal GemFire for PCF 1.6.x versions prior to 1.6.5 and 1.7.x versions prior to 1.7.1. The gfsh (Geode Shell) endpoint, used by op… |
CVE-2016-4306 | Medium | 5.5 | 2017-01-06 | Multiple information leaks exist in various IOCTL handlers of the Kaspersky Internet Security KLDISK driver. Specially crafted IOCTL requests can cause the dri… |
CVE-2016-2380 | Low | 3.1 | 2017-01-06 | An information leak exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent to the server could potentially result in an out-of… |
CVE-2016-2374 | High | 8.1 | 2017-01-06 | An exploitable memory corruption vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT MultiMX message sent via the serve… |
CVE-2016-2372 | Medium | 5.9 | 2017-01-06 | An information leak exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent via the server could potentially result in an out-o… |
CVE-2016-2367 | Medium | 5.9 | 2017-01-06 | An information leak exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent via the server could potentially result in an out-o… |
CVE-2016-1550 | Medium | 5.3 | 2017-01-06 | An exploitable vulnerability exists in the message authentication functionality of libntp in ntp 4.2.8p4 and NTPSec a5fb34b9cc89b92a8fef2f459004865c93bb7f92. A… |
CVE-2016-10105 | Critical | 9.8 | 2017-01-03 | admin/plugin.php in Piwigo through 2.8.3 doesn't validate the sections variable while using it to include files. This can cause information disclosure and code… |
CVE-2016-6859 | Medium | 4.3 | 2016-12-31 | Hybris Management Console (HMC) in SAP Hybris before 6.0 allows remote attackers to obtain sensitive information by triggering an error and then reading a Java… |
CVE-2016-9845 | Medium | 6.5 | 2016-12-29 | QEMU (aka Quick Emulator) built with the Virtio GPU Device emulator support is vulnerable to an information leakage issue. It could occur while processing 'VIR… |
CVE-2016-5329 | Medium | 5.5 | 2016-12-29 | VMware Fusion 8.x before 8.5 on OS X, when System Integrity Protection (SIP) is enabled, allows local users to determine kernel memory addresses and bypass the… |
CVE-2016-5328 | Medium | 5.5 | 2016-12-29 | VMware Tools 9.x and 10.x before 10.1.0 on OS X, when System Integrity Protection (SIP) is enabled, allows local users to determine kernel memory addresses and… |
CVE-2016-9756 | Medium | 5.5 | 2016-12-28 | arch/x86/kvm/emulate.c in the Linux kernel before 4.8.12 does not properly initialize Code Segment (CS) in certain error cases, which allows local users to obt… |
CVE-2016-9908 | Low | 3.3 | 2016-12-23 | Quick Emulator (Qemu) built with the Virtio GPU Device emulator support is vulnerable to an information leakage issue. It could occur while processing 'VIRTIO_… |
CVE-2016-6910 | Medium | 5.5 | 2016-12-23 | The non-existent notification listener vulnerability was introduced in the initial Android 5.0.2 builds for the Samsung Galaxy S6 Edge devices, but the vulnera… |
CVE-2016-7555 | Medium | 5.5 | 2016-12-23 | The avi_read_header function in libavformat/avidec.c in FFmpeg before 3.1.4 is vulnerable to memory leak when decoding an AVI file that has a crafted "strh" st… |
CVE-2016-7091 | Medium | 4.4 | 2016-12-22 | sudo: It was discovered that the default sudo configuration on Red Hat Enterprise Linux and possibly other Linux implementations preserves the value of INPUTRC… |
CVE-2016-7172 | High | 7.5 | 2016-12-21 | NetApp Snap Creator Framework before 4.3.1 discloses sensitive information which could be viewed by an unauthorized user. |
CVE-2016-7295 | Medium | 5.5 | 2016-12-20 | The Common Log File System (CLFS) driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Go… |
CVE-2016-7284 | Medium | 4.3 | 2016-12-20 | Microsoft Internet Explorer 10 and 11 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Internet Explore… |
CVE-2016-7278 | Medium | 5.3 | 2016-12-20 | Microsoft Internet Explorer 9 through 11 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Windows Hyper… |
CVE-2016-7258 | Medium | 5.5 | 2016-12-20 | The kernel in Microsoft Windows 10 Gold, 1511, and 1607 and Windows Server 2016 mishandles page-fault system calls, which allows local users to obtain sensitiv… |
CVE-2016-7257 | Medium | 6.5 | 2016-12-20 | The GDI component in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Office for Mac 2011, and Office 2016 for Mac allows remote… |
CVE-2016-7219 | Medium | 5.5 | 2016-12-20 | The Crypto driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8… |
CVE-2016-10005 | High | 7.5 | 2016-12-19 | Webdynpro in SAP Solman 7.1 through 7.31 allows remote attackers to obtain sensitive information via webdynpro/dispatcher/sap.com/caf~eu~gp~example~timeoff~wd… |
CVE-2016-9159 | Medium | 5.9 | 2016-12-17 | A vulnerability has been identified in SIMATIC S7-300 CPU family (All versions), SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All… |
CVE-2016-8820 | Medium | 6.1 | 2016-12-16 | All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape where a check on a f… |
CVE-2015-3271 | Medium | 5.3 | 2016-12-15 | Apache Tika server (aka tika-server) in Apache Tika 1.9 might allow remote attackers to read arbitrary files via the HTTP fileUrl header. |
CVE-2016-7889 | High | 7.5 | 2016-12-15 | Adobe Digital Editions versions 4.5.2 and earlier has an issue with parsing crafted XML entries that could lead to information disclosure. |
CVE-2016-7888 | Medium | 5.3 | 2016-12-15 | Adobe Digital Editions versions 4.5.2 and earlier has an important vulnerability that could lead to memory address leak. |
CVE-2016-7887 | High | 7.5 | 2016-12-15 | Adobe ColdFusion Builder versions 2016 update 2 and earlier, 3.0.3 and earlier have an important vulnerability that could lead to information disclosure. |
CVE-2016-6852 | Medium | 4.3 | 2016-12-15 | An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev8. Users can provide local file paths to the RSS reader; the response and error code give… |
CVE-2016-4047 | Medium | 4.3 | 2016-12-15 | An issue was discovered in Open-Xchange OX App Suite before 7.8.1-rev8. References to external Open XML document type definitions (.dtd resources) can be place… |
CVE-2016-4027 | Low | 3.5 | 2016-12-15 | An issue was discovered in Open-Xchange OX App Suite before 7.8.1-rev10. App Suite frontend offers to control whether a user wants to store cookies that exceed… |
CVE-2016-9201 | High | 7.5 | 2016-12-14 | A vulnerability in the Zone-Based Firewall feature of Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, remote attacker to pass traffic that… |
CVE-2016-6471 | Medium | 6.5 | 2016-12-14 | A vulnerability in the web-based management interface of Cisco Firepower Management Center running FireSIGHT System software could allow an authenticated, remo… |