Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

CVEs (11,927)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2019-2183 1Google 1Android Jun 17, 2026 Oct 11, 2019 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 In generateServicesMap of RegisteredServicesCache.java, there is a possible account protection bypass due to a caching optimization. This could lead to local information disclosure with no additional execution privileges...Show more In generateServicesMap of RegisteredServicesCache.java, there is a possible account protection bypass due to a caching optimization. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10Android ID: A-136261465Show less
CVE-2015-9492 1Smartit Premium Responsive Project 1Smartit Premium Responsive Nov 21, 2024 Oct 11, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The ThemeMakers SmartIT Premium Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for th...Show more The ThemeMakers SmartIT Premium Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI.Show less
CVE-2015-9491 1Blessing Premium Responsive Project 1Blessing Premium Responsive Nov 21, 2024 Oct 11, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The ThemeMakers Blessing Premium Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for t...Show more The ThemeMakers Blessing Premium Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI.Show less
CVE-2015-9490 1Gamestheme Premium Project 1Gamestheme Premium Nov 21, 2024 Oct 11, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The ThemeMakers GamesTheme Premium theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-con...Show more The ThemeMakers GamesTheme Premium theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI.Show less
CVE-2015-9489 1Goodnex Premium Responsive Project 1Goodnex Premium Responsive Nov 21, 2024 Oct 11, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The ThemeMakers Goodnex Premium Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for th...Show more The ThemeMakers Goodnex Premium Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI.Show less
CVE-2015-9488 1Almera Responsive Portfolio Site Template Project 1Almera Responsive Portfolio Site Template Nov 21, 2024 Oct 11, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The ThemeMakers Almera Responsive Portfolio Site Template component through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a di...Show more The ThemeMakers Almera Responsive Portfolio Site Template component through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI.Show less
CVE-2015-9487 1Almera Responsive Portfolio Project 1Almera Responsive Portfolio Nov 21, 2024 Oct 11, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The ThemeMakers Almera Responsive Portfolio theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for t...Show more The ThemeMakers Almera Responsive Portfolio theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI.Show less
CVE-2015-9486 1Axioma Premium Responsive Project 1Axioma Premium Responsive Nov 21, 2024 Oct 11, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The ThemeMakers Axioma Premium Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the...Show more The ThemeMakers Axioma Premium Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI.Show less
CVE-2015-9485 1Accio Responsive Onepage Parallax Site Template Project 1Accio Responsive Onepage Parallax Site Template Nov 21, 2024 Oct 11, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The ThemeMakers Accio Responsive Parallax One Page Site Template component through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) v...Show more The ThemeMakers Accio Responsive Parallax One Page Site Template component through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI.Show less
CVE-2015-9484 1Accio One Page Parallax Responsive Theme Project 1Accio One Page Parallax Responsive Theme Nov 21, 2024 Oct 11, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The ThemeMakers Accio One Page Parallax Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct reques...Show more The ThemeMakers Accio One Page Parallax Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI.Show less
CVE-2015-9483 1Invento / Architecture Building Agency Template Project 1Invento / Architecture Building Agency Template Nov 21, 2024 Oct 11, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The ThemeMakers Invento Responsive Gallery/Architecture Template component through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) v...Show more The ThemeMakers Invento Responsive Gallery/Architecture Template component through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI.Show less
CVE-2015-9482 1Car Dealer / Auto Dealer Responsive Project 1Car Dealer / Auto Dealer Responsive Nov 21, 2024 Oct 11, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The ThemeMakers Car Dealer / Auto Dealer Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct reque...Show more The ThemeMakers Car Dealer / Auto Dealer Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI.Show less
CVE-2015-9481 1Diplomat \| Political Project 1Diplomat \| Political Nov 21, 2024 Oct 11, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The ThemeMakers Diplomat \| Political theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-c...Show more The ThemeMakers Diplomat \| Political theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI.Show less
CVE-2019-1369 1Microsoft 1Open Enclave Software Development Kit Jun 17, 2026 Oct 10, 2019 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 An information disclosure vulnerability exists when affected Open Enclave SDK versions improperly handle objects in memory, aka 'Open Enclave SDK Information Disclosure Vulnerability'.
CVE-2019-1363 1Microsoft 2Windows 7 Windows Server 2008 Jun 17, 2026 Oct 10, 2019 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, allowing an attacker to retrieve information from a targeted system, aka 'Windows GDI...Show more An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, allowing an attacker to retrieve information from a targeted system, aka 'Windows GDI Information Disclosure Vulnerability'.Show less
CVE-2019-1356 1Microsoft 1Edge Jun 17, 2026 Oct 10, 2019 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 An information disclosure vulnerability exists when Microsoft Edge based on Edge HTML improperly handles objects in memory, aka 'Microsoft Edge based on Edge HTML Information Disclosure Vulnerability'.
CVE-2019-1337 1Microsoft 3Windows 10 Windows Server 2016Windows Server 2019 Jun 17, 2026 Oct 10, 2019 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 An information disclosure vulnerability exists when Windows Update Client fails to properly handle objects in memory, aka 'Windows Update Client Information Disclosure Vulnerability'.
CVE-2019-1334 1Microsoft 7Windows 10 Windows 7Windows 8.1+4 more Jun 17, 2026 Oct 10, 2019 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1345.
CVE-2019-15859 1Socomec 1Diris A 40 Firmware Jun 17, 2026 Oct 9, 2019 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 Password disclosure in the web interface on socomec DIRIS A-40 devices before 48250501 allows a remote attacker to get full access to a device via the /password.jsn URI.
CVE-2019-4514 1Ibm 1Security Key Lifecycle Manager Jun 17, 2026 Oct 4, 2019 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 IBM Security Key Lifecycle Manager 2.6, 2.7, 3.0, and 3.0.1 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 165136.

Previous 1...300301302...597 Next