Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

CVEs (11,928)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-35290 1Sap 1Authenticator Jun 17, 2026 Aug 10, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 Under certain conditions SAP Authenticator for Android allows an attacker to access information which would otherwise be restricted.
CVE-2022-31674 1Vmware 1Vrealize Operations Jun 17, 2026 Aug 10, 2022 N/A· v4 4.3 MEDIUM· v3 N/A· v2 VMware vRealize Operations contains an information disclosure vulnerability. A low-privileged malicious actor with network access can access log files that lead to information disclosure.
CVE-2022-31673 1Vmware 1Vrealize Operations Oct 8, 2026 Aug 10, 2022 N/A· v4 8.8 HIGH· v3 N/A· v2 VMware vRealize Operations contains an information disclosure vulnerability. A low-privileged malicious actor with network access can create and leak hex dumps, leading to information disclosure. Successful exploitation...Show more VMware vRealize Operations contains an information disclosure vulnerability. A low-privileged malicious actor with network access can create and leak hex dumps, leading to information disclosure. Successful exploitation can lead to a remote code execution.Show less
CVE-2022-35715 1Ibm 1Infosphere Information Server Jun 17, 2026 Aug 10, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in a stack trace. This information could be used in further attacks...Show more IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in a stack trace. This information could be used in further attacks against the system. IBM X-Force ID: 231202.Show less
CVE-2022-34659 1Siemens 1Simcenter Star Ccm+ Viewer Jul 14, 2026 Aug 10, 2022 6.9 MEDIUM· v4 7.5 HIGH· v3 N/A· v2 A vulnerability has been identified in Simcenter STAR-CCM+ (All versions only if the Power-on-Demand public license server is used). Affected applications expose user, host and display name of users, when the public lice...Show more A vulnerability has been identified in Simcenter STAR-CCM+ (All versions only if the Power-on-Demand public license server is used). Affected applications expose user, host and display name of users, when the public license server is used. This could allow an attacker to retrieve this information.Show less
CVE-2022-34712 1Microsoft 4Windows 10 Windows 11Windows Server 2016+1 more Jun 17, 2026 Aug 9, 2022 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Windows Defender Credential Guard Information Disclosure Vulnerability
CVE-2022-34710 1Microsoft 5Windows 10 Windows 11Windows Server 2016+2 more Jun 17, 2026 Aug 9, 2022 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Windows Defender Credential Guard Information Disclosure Vulnerability
CVE-2022-34708 1Microsoft 10Windows 10 Windows 11Windows 7+7 more Jun 17, 2026 Aug 9, 2022 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Windows Kernel Information Disclosure Vulnerability
CVE-2022-34704 1Microsoft 5Windows 10 Windows 11Windows Server 2016+2 more Jun 17, 2026 Aug 9, 2022 N/A· v4 4.7 MEDIUM· v3 N/A· v2 Windows Defender Credential Guard Information Disclosure Vulnerability
CVE-2022-34692 1Microsoft 1Exchange Server Jun 17, 2026 Aug 9, 2022 N/A· v4 5.3 MEDIUM· v3 N/A· v2 Microsoft Exchange Server Information Disclosure Vulnerability
CVE-2022-30197 1Microsoft 5Windows 10 Windows 11Windows Server 2016+2 more Jun 17, 2026 Aug 9, 2022 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Windows Kernel Information Disclosure Vulnerability
CVE-2022-2704 1Simple E Learning System Project 1Simple E Learning System Jun 17, 2026 Aug 8, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 A vulnerability was found in SourceCodester Simple E-Learning System. It has been declared as problematic. This vulnerability affects unknown code of the file downloadFiles.php. The manipulation of the argument download...Show more A vulnerability was found in SourceCodester Simple E-Learning System. It has been declared as problematic. This vulnerability affects unknown code of the file downloadFiles.php. The manipulation of the argument download leads to information disclosure. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-205828.Show less
CVE-2022-27633 1Tcl 1Linkhub Mesh Wifi Ac1200 Jun 17, 2026 Aug 5, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 An information disclosure vulnerability exists in the confctl_get_guest_wlan functionality of TCL LinkHub Mesh Wifi MS1G_00_01.00_14. A specially-crafted network packet can lead to information disclosure. An attacker can...Show more An information disclosure vulnerability exists in the confctl_get_guest_wlan functionality of TCL LinkHub Mesh Wifi MS1G_00_01.00_14. A specially-crafted network packet can lead to information disclosure. An attacker can send packets to trigger this vulnerability.Show less
CVE-2022-27630 1Tcl 1Linkhub Mesh Wifi Ac1200 Jun 17, 2026 Aug 5, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 An information disclosure vulnerability exists in the confctl_get_master_wlan functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted network packet can lead to information disclosure. An attacker c...Show more An information disclosure vulnerability exists in the confctl_get_master_wlan functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted network packet can lead to information disclosure. An attacker can send packets to trigger this vulnerability.Show less
CVE-2022-29071 1Arista 1Cloudvision Portal Jun 17, 2026 Aug 5, 2022 N/A· v4 5.5 MEDIUM· v3 N/A· v2 This advisory documents an internally found vulnerability in the on premises deployment model of Arista CloudVision Portal (CVP) where under a certain set of conditions, user passwords can be leaked in the Audit and Syst...Show more This advisory documents an internally found vulnerability in the on premises deployment model of Arista CloudVision Portal (CVP) where under a certain set of conditions, user passwords can be leaked in the Audit and System logs. The impact of this vulnerability is that the CVP user login passwords might be leaked to other authenticated users.Show less
CVE-2022-36835 1Samsung 1Samsung Internet Browser Jun 17, 2026 Aug 5, 2022 N/A· v4 3.3 LOW· v3 N/A· v2 Implicit Intent hijacking vulnerability in Samsung Internet Browser prior to version 17.0.7.34 allows attackers to access arbitrary files.
CVE-2022-36834 1Samsung 1Game Launcher Jun 17, 2026 Aug 5, 2022 N/A· v4 5.0 MEDIUM· v3 N/A· v2 Exposure of Sensitive Information vulnerability in Game Launcher prior to version 6.0.07 allows local attacker to access app data with user interaction.
CVE-2022-33728 1Google 1Android Jun 17, 2026 Aug 5, 2022 N/A· v4 3.3 LOW· v3 N/A· v2 Exposure of sensitive information in Bluetooth prior to SMR Aug-2022 Release 1 allows local attackers to access connected BT macAddress via Settings.Gloabal.
CVE-2022-33724 1Google 1Android Jun 17, 2026 Aug 5, 2022 N/A· v4 3.3 LOW· v3 N/A· v2 Exposure of Sensitive Information in Samsung Dialer application?prior to SMR Aug-2022 Release 1 allows local attackers to access ICCID via log.
CVE-2022-31190 1Duraspace 1Dspace Jun 17, 2026 Aug 1, 2022 N/A· v4 5.3 MEDIUM· v3 N/A· v2 DSpace open source software is a repository application which provides durable access to digital resources. dspace-xmlui is a UI component for DSpace. In affected versions metadata on a withdrawn Item is exposed via the...Show more DSpace open source software is a repository application which provides durable access to digital resources. dspace-xmlui is a UI component for DSpace. In affected versions metadata on a withdrawn Item is exposed via the XMLUI "mets.xml" object, as long as you know the handle/URL of the withdrawn Item. This vulnerability only impacts the XMLUI. Users are advised to upgrade to version 6.4 or newer.Show less

Previous 1...245246247...597 Next