CWE-219

6 CVEs classified under CWE-219. Browse by severity and year.

Top CVEs for CWE-219
CVESeverityScorePublishedSummary
CVE-2024-39776High7.52024-08-22Avtec Outpost stores sensitive information in an insecure location without proper access controls in place.
CVE-2022-21236High7.52022-01-28An information disclosure vulnerability exists due to a web server misconfiguration in the Reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP reque…
CVE-2022-36306Medium6.52022-08-16An authenticated attacker can enumerate and download sensitive files, including the eNodeB's web management UI's TLS private key, the web server binary, and th…
CVE-2024-56159Medium5.32024-12-19Astro is a web framework for content-driven websites. A bug in the build process allows any unauthenticated user to read parts of the server source code. Durin…
CVE-2023-39467Medium5.32024-05-03Triangle MicroWorks SCADA Data Gateway certificate Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive infor…
CVE-2002-2024Medium5.32002-12-31Horde IMP 2.2.7 allows remote attackers to obtain the full web root pathname via an HTTP request for (1) poppassd.php3, (2) login.php3?reason=chpass2, (3) spel…
All CVEs classified under CWE-219 — newest first (page 1 of 1)
CVESeverityScorePublishedSummary
CVE-2024-56159Medium5.32024-12-19Astro is a web framework for content-driven websites. A bug in the build process allows any unauthenticated user to read parts of the server source code. Durin…
CVE-2024-39776High7.52024-08-22Avtec Outpost stores sensitive information in an insecure location without proper access controls in place.
CVE-2023-39467Medium5.32024-05-03Triangle MicroWorks SCADA Data Gateway certificate Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive infor…
CVE-2022-36306Medium6.52022-08-16An authenticated attacker can enumerate and download sensitive files, including the eNodeB's web management UI's TLS private key, the web server binary, and th…
CVE-2022-21236High7.52022-01-28An information disclosure vulnerability exists due to a web server misconfiguration in the Reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP reque…
CVE-2002-2024Medium5.32002-12-31Horde IMP 2.2.7 allows remote attackers to obtain the full web root pathname via an HTTP request for (1) poppassd.php3, (2) login.php3?reason=chpass2, (3) spel…