CWE-219
6 CVEs classified under CWE-219. Browse by severity and year.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-39776 | High | 7.5 | 2024-08-22 | Avtec Outpost stores sensitive information in an insecure location without proper access controls in place. |
CVE-2022-21236 | High | 7.5 | 2022-01-28 | An information disclosure vulnerability exists due to a web server misconfiguration in the Reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP reque… |
CVE-2022-36306 | Medium | 6.5 | 2022-08-16 | An authenticated attacker can enumerate and download sensitive files, including the eNodeB's web management UI's TLS private key, the web server binary, and th… |
CVE-2024-56159 | Medium | 5.3 | 2024-12-19 | Astro is a web framework for content-driven websites. A bug in the build process allows any unauthenticated user to read parts of the server source code. Durin… |
CVE-2023-39467 | Medium | 5.3 | 2024-05-03 | Triangle MicroWorks SCADA Data Gateway certificate Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive infor… |
CVE-2002-2024 | Medium | 5.3 | 2002-12-31 | Horde IMP 2.2.7 allows remote attackers to obtain the full web root pathname via an HTTP request for (1) poppassd.php3, (2) login.php3?reason=chpass2, (3) spel… |