Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

CVEs (11,928)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2012-5644 4Debian FedoraprojectLibuser Project+1 more 4Debian Linux Enterprise LinuxFedora+1 more Jan 23, 2026 Nov 25, 2019 N/A· v4 5.5 MEDIUM· v3 4.9 MEDIUM· v2 libuser has information disclosure when moving user's home directory
CVE-2012-5535 2Fedoraproject Gnome 2Fedora Gnome System Log Nov 21, 2024 Nov 25, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 gnome-system-log polkit policy allows arbitrary files on the system to be read
CVE-2019-16285 1Hp 1Thinpro Linux Jun 17, 2026 Nov 22, 2019 N/A· v4 4.6 MEDIUM· v3 2.1 LOW· v2 If a local user has been configured and logged in, an unauthenticated attacker with physical access may be able to extract sensitive information onto a local drive.
CVE-2012-6079 1Boldgrid 1W3 Total Cache Nov 21, 2024 Nov 22, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 W3 Total Cache before 0.9.2.5 exposes sensitive cached database information which allows remote attackers to download this information via their hash keys.
CVE-2012-6078 1Boldgrid 1W3 Total Cache Nov 21, 2024 Nov 22, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 W3 Total Cache before 0.9.2.5 generates hash keys insecurely which allows remote attackers to predict the values of the hashes.
CVE-2012-6077 1Boldgrid 1W3 Total Cache Nov 21, 2024 Nov 22, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 W3 Total Cache before 0.9.2.5 allows remote attackers to retrieve password hash information due to insecure storage of database cache files.
CVE-2013-3314 1Loftek 1Nexus 543 Firmware Nov 21, 2024 Nov 21, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The Loftek Nexus 543 IP Camera allows remote attackers to obtain (1) IP addresses via a request to get_realip.cgi or (2) firmware versions (ui and system), timestamp, serial number, p2p port number, and wifi status via a...Show more The Loftek Nexus 543 IP Camera allows remote attackers to obtain (1) IP addresses via a request to get_realip.cgi or (2) firmware versions (ui and system), timestamp, serial number, p2p port number, and wifi status via a request to get_status.cgi.Show less
CVE-2019-6852 1Schneider Electric 10140 Cpu6x Firmware 140 Noc 77101 Firmware140 Noc 78x00 Firmware+7 more Jun 17, 2026 Nov 20, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 A CWE-200: Information Exposure vulnerability exists in Modicon Controllers (M340 CPUs, M340 communication modules, Premium CPUs, Premium communication modules, Quantum CPUs, Quantum communication modules - see security...Show more A CWE-200: Information Exposure vulnerability exists in Modicon Controllers (M340 CPUs, M340 communication modules, Premium CPUs, Premium communication modules, Quantum CPUs, Quantum communication modules - see security notification for specific versions), which could cause the disclosure of FTP hardcoded credentials when using the Web server of the controller on an unsecure network.Show less
CVE-2015-3167 3Canonical DebianPostgresql 3Debian Linux PostgresqlUbuntu Linux Nov 21, 2024 Nov 20, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 contrib/pgcrypto in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11, 9.3.x before 9.3.7, and 9.4.x before 9.4.2 uses different error responses when an incorrect key is used, which makes it easier for a...Show more contrib/pgcrypto in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11, 9.3.x before 9.3.7, and 9.4.x before 9.4.2 uses different error responses when an incorrect key is used, which makes it easier for attackers to obtain the key via a brute force attack.Show less
CVE-2013-1817 4Debian FedoraprojectMediawiki+1 more 4Debian Linux Enterprise LinuxFedora+1 more Nov 21, 2024 Nov 20, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 MediaWiki before 1.19.4 and 1.20.x before 1.20.3 contains an error in the api.php script which allows remote attackers to obtain sensitive information.
CVE-2019-10083 1Apache 1Nifi Jun 17, 2026 Nov 19, 2019 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 When updating a Process Group via the API in NiFi versions 1.3.0 to 1.9.2, the response to the request includes all of its contents (at the top most level, not recursively). The response included details about processors...Show more When updating a Process Group via the API in NiFi versions 1.3.0 to 1.9.2, the response to the request includes all of its contents (at the top most level, not recursively). The response included details about processors and controller services which the user may not have had read access to.Show less
CVE-2012-0843 2Debian Uzbl 2Debian Linux Uzbl Nov 21, 2024 Nov 19, 2019 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 uzbl: Information disclosure via world-readable cookies storage file
CVE-2011-4919 1Mpack Project 1Mpack Nov 21, 2024 Nov 19, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 mpack 1.6 has information disclosure via eavesdropping on mails sent by other users
CVE-2012-0842 2Debian Suckless 2Debian Linux Surf Nov 21, 2024 Nov 19, 2019 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 surf: cookie jar has read access from other local user
CVE-2019-19022 1Iterm2 1Iterm2 Jun 17, 2026 Nov 17, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 iTerm2 through 3.3.6 has potentially insufficient documentation about the presence of search history in com.googlecode.iterm2.plist, which might allow remote attackers to obtain sensitive information, as demonstrated by...Show more iTerm2 through 3.3.6 has potentially insufficient documentation about the presence of search history in com.googlecode.iterm2.plist, which might allow remote attackers to obtain sensitive information, as demonstrated by searching for the NoSyncSearchHistory string in .plist files within public Git repositories.Show less
CVE-2013-7089 3Clamav DebianFedoraproject 3Clamav Debian LinuxFedora Nov 21, 2024 Nov 15, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 ClamAV before 0.97.7: dbg_printhex possible information leak
CVE-2019-18987 1Mediawiki 1Abusefilter Jun 17, 2026 Nov 15, 2019 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 An issue was discovered in the AbuseFilter extension through 1.34 for MediaWiki. Once a specific abuse filter has (accidentally or otherwise) been made public, its previous versions can be exposed, thus potentially discl...Show more An issue was discovered in the AbuseFilter extension through 1.34 for MediaWiki. Once a specific abuse filter has (accidentally or otherwise) been made public, its previous versions can be exposed, thus potentially disclosing private or sensitive information within the filter's definition.Show less
CVE-2013-3070 1Netgear 1Wndr4700 Firmware Nov 21, 2024 Nov 14, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 An Information Disclosure vulnerability exists in Netgear WNDR4700 running firmware 1.0.0.34 in the management web interface, which discloses the PSK of the wireless LAN.
CVE-2012-1169 2Fedoraproject Moodle 2Fedora Moodle Nov 21, 2024 Nov 14, 2019 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 Moodle before 2.2.2 has Personal information disclosure, when administrative setting users name display is set to first name only full names are shown in page breadcrumbs.
CVE-2012-1161 2Fedoraproject Moodle 2Fedora Moodle Nov 21, 2024 Nov 14, 2019 N/A· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 Moodle before 2.2.2: Course information leak via hidden courses being displayed in tag search results

Previous 1...296297298...597 Next