CWE-212 · Improper Removal of Sensitive Information Before Storage or Transfer (page 2)
Page 2 of 2 — CVEs classified under CWE-212, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-8696 | Medium | 5.5 | 2020-11-12 | Improper removal of sensitive information before storage or transfer in some Intel(R) Processors may allow an authenticated user to potentially enable informat… |
CVE-2020-25635 | Medium | 5.0 | 2020-10-05 | A flaw was found in Ansible Base when using the aws_ssm connection plugin as garbage collector is not happening after playbook run is completed. Files would re… |
CVE-2020-14370 | Medium | 5.3 | 2020-09-23 | An information disclosure vulnerability was found in containers/podman in versions before 2.0.5. When using the deprecated Varlink API or the Docker-compatible… |
CVE-2020-11684 | Critical | 9.1 | 2020-09-14 | AT91bootstrap before 3.9.2 does not properly wipe encryption and authentication keys from memory before passing control to a less privileged software component… |
CVE-2020-15024 | Medium | 5.5 | 2020-09-10 | An issue was discovered in the Login Password feature of the Password Manager component in Avast Antivirus 20.1.5069.562. An entered password continues to be s… |
CVE-2020-15094 | High | 8.0 | 2020-09-02 | In Symfony before versions 4.4.13 and 5.1.5, the CachingHttpClient class from the HttpClient Symfony component relies on the HttpCache class to handle requests… |
CVE-2020-13179 | Medium | 5.5 | 2020-08-11 | Broker Protocol messages in Teradici PCoIP Standard Agent for Windows and Graphics Agent for Windows prior to 20.04.1 are not cleaned up in server memory, whic… |
CVE-2020-11740 | Medium | 5.5 | 2020-04-14 | An issue was discovered in xenoprof in Xen through 4.13.x, allowing guest OS users (without active profiling) to obtain sensitive information about other guest… |
CVE-2019-20637 | High | 7.5 | 2020-04-08 | An issue was discovered in Varnish Cache before 6.0.5 LTS, 6.1.x and 6.2.x before 6.2.2, and 6.3.x before 6.3.1. It does not clear a pointer between the handli… |
CVE-2020-9780 | Low | 3.3 | 2020-04-01 | The issue was resolved by clearing application previews when content is deleted. This issue is fixed in iOS 13.4 and iPadOS 13.4. A local user may be able to v… |
CVE-2020-3874 | Medium | 5.3 | 2020-02-27 | An issued existed in the naming of screenshots. The issue was corrected with improved naming. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1. Screenshots… |
CVE-2020-1940 | High | 7.5 | 2020-01-28 | The optional initial password change and password expiration features present in Apache Jackrabbit Oak 1.2.0 to 1.22.0 are prone to a sensitive information dis… |
CVE-2019-19362 | Medium | 6.5 | 2019-12-02 | An issue was discovered in the Chat functionality of the TeamViewer desktop application 14.3.4730 on Windows. (The vendor states that it was later fixed.) Upon… |
CVE-2019-13402 | High | 8.8 | 2019-07-08 | /usr/sbin/default.sh and /usr/apache/htdocs/cgi-bin/admin/hardfactorydefault.cgi on Dynacolor FCM-MB40 v1.2.0.0 devices implement an incomplete factory-reset p… |
CVE-2019-11243 | High | 8.1 | 2019-04-22 | In Kubernetes v1.12.0-v1.12.4 and v1.13.0, the rest.AnonymousClientConfig() method returns a copy of the provided config, with credentials removed (bearer toke… |
CVE-2018-6337 | High | 7.5 | 2018-12-31 | folly::secureRandom will re-use a buffer between parent and child processes when fork() is called. That will result in multiple forked children producing repea… |
CVE-2018-5559 | Low | 3.4 | 2018-11-28 | In Rapid7 Komand version 0.41.0 and prior, certain endpoints that are able to list the always encrypted-at-rest connection data could return some configuration… |
CVE-2017-15113 | High | 7.2 | 2018-07-27 | ovirt-engine before version 4.1.7.6 with log level set to DEBUG includes passwords in the log file without masking. Only administrators can change the log leve… |
CVE-2018-1062 | Medium | 5.3 | 2018-03-06 | A vulnerability was discovered in oVirt 4.1.x before 4.1.9, where the combination of Enable Discard and Wipe After Delete flags for VM disks managed by oVirt… |
CVE-2005-0406 | Medium | 5.5 | 2005-02-14 | A design flaw in image processing software that modifies JPEG images might not modify the original EXIF thumbnail, which could lead to an information leak of p… |
CVE-2002-0704 | High | 7.5 | 2002-07-26 | The Network Address Translation (NAT) capability for Netfilter ("iptables") 1.2.6a and earlier leaks translated IP addresses in ICMP error messages. |