← Back
CWE-200

10,499 CVEs • Abstraction: Class • Likelihood of Exploit: High

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

JSON object

Loading...

CVEs (10,499)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2017-13205
1Google
1Android
Nov 21, 2024
Jan 12, 2018
N/A· v4
9.1 CRITICAL· v3
8.5 HIGH· v2
An information disclosure vulnerability in the Android media framework (libmpeg2). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-64550583.
CVE-2017-13204
1Google
1Android
Nov 21, 2024
Jan 12, 2018
N/A· v4
9.1 CRITICAL· v3
8.5 HIGH· v2
An information disclosure vulnerability in the Android media framework (libavc). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-64380237.
CVE-2017-13203
1Google
1Android
Nov 21, 2024
Jan 12, 2018
N/A· v4
9.1 CRITICAL· v3
8.5 HIGH· v2
An information disclosure vulnerability in the Android media framework (libavc). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-63122634.
CVE-2017-13202
1Google
1Android
Nov 21, 2024
Jan 12, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
An information disclosure vulnerability in the Android media framework (libeffects). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-67647856.
CVE-2017-13201
1Google
1Android
Nov 21, 2024
Jan 12, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
An information disclosure vulnerability in the Android media framework (mediadrm). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-63982768.
CVE-2017-13200
1Google
1Android
Nov 21, 2024
Jan 12, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
An information disclosure vulnerability in the Android media framework (av) related to id3 unsynchronization. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-63100526.
CVE-2017-13188
1Google
1Android
Nov 21, 2024
Jan 12, 2018
N/A· v4
9.1 CRITICAL· v3
8.5 HIGH· v2
An information disclosure vulnerability in the Android media framework (aac). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-65280786.
CVE-2017-13187
1Google
1Android
Nov 21, 2024
Jan 12, 2018
N/A· v4
9.1 CRITICAL· v3
8.5 HIGH· v2
An information disclosure vulnerability in the Android media framework (libhevc). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-65034175.
CVE-2017-13185
1Google
1Android
Nov 21, 2024
Jan 12, 2018
N/A· v4
9.1 CRITICAL· v3
8.5 HIGH· v2
An information disclosure vulnerability in the Android media framework (libhevc). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-65123471.
CVE-2017-0846
1Google
1Android
Nov 21, 2024
Jan 12, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
An information disclosure vulnerability in the Android framework (clipboardservice). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-64934810.
CVE-2017-16741
1Phoenixcontact
29Fl Switch 3004t Fx Firmware
Fl Switch 3004t Fx St FirmwareFl Switch 3005 Firmware+26 more
Nov 21, 2024
Jan 12, 2018
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
An Information Exposure issue was discovered in PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, and 48xxx Series products running firmware Version 1.0 to 1.32. A remote unauthenticated attacker may be able to use Monitor Mode on t...Show more
An Information Exposure issue was discovered in PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, and 48xxx Series products running firmware Version 1.0 to 1.32. A remote unauthenticated attacker may be able to use Monitor Mode on the device to read diagnostic information.Show less
CVE-2015-2298
1Etherpad
1Etherpad
Nov 21, 2024
Jan 12, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
node/utils/ExportEtherpad.js in Etherpad 1.5.x before 1.5.2 might allow remote attackers to obtain sensitive information by leveraging an improper substring check when exporting a padID.
CVE-2014-6437
1Aztech
3Adsl Dsl5018en (1t1r) Firmware
Dsl705e FirmwareDsl705eu Firmware
Nov 21, 2024
Jan 12, 2018
N/A· v4
9.8 CRITICAL· v3
5.0 MEDIUM· v2
Aztech ADSL DSL5018EN (1T1R), DSL705E, and DSL705EU devices allow remote attackers to obtain sensitive device configuration information via vectors involving the ROM file.
CVE-2017-1681
1Ibm
1Liberty
Nov 21, 2024
Jan 11, 2018
N/A· v4
3.3 LOW· v3
2.1 LOW· v2
IBM WebSphere Application Server (IBM Liberty for Java for Bluemix 3.15) could allow a local attacker to obtain sensitive information, caused by improper handling of application requests, which could allow unauthorized a...Show more
IBM WebSphere Application Server (IBM Liberty for Java for Bluemix 3.15) could allow a local attacker to obtain sensitive information, caused by improper handling of application requests, which could allow unauthorized access to read a file. IBM X-Force ID: 134003.Show less
CVE-2017-1478
1Ibm
1Security Access Manager 9.0 Firmware
Nov 21, 2024
Jan 11, 2018
N/A· v4
3.3 LOW· v3
2.1 LOW· v2
IBM Security Access Manager Appliance 9.0.0 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 128613.
CVE-2018-0014
1Juniper
1Screenos
Nov 21, 2024
Jan 10, 2018
N/A· v4
6.5 MEDIUM· v3
3.3 LOW· v2
Juniper Networks ScreenOS devices do not pad Ethernet packets with zeros, and thus some packets can contain fragments of system memory or data from previous packets. This issue is often detected as CVE-2003-0001. The iss...Show more
Juniper Networks ScreenOS devices do not pad Ethernet packets with zeros, and thus some packets can contain fragments of system memory or data from previous packets. This issue is often detected as CVE-2003-0001. The issue affects all versions of Juniper Networks ScreenOS prior to 6.3.0r25.Show less
CVE-2018-0013
1Juniper
1Junos Space
Nov 21, 2024
Jan 10, 2018
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
A local file inclusion vulnerability in Juniper Networks Junos Space Network Management Platform may allow an authenticated user to retrieve files from the system.
CVE-2017-15850
1Google
1Android
Nov 21, 2024
Jan 10, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, userspace can read values from audio codec registers.
CVE-2017-14870
1Google
1Android
Nov 21, 2024
Jan 10, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while updating the recovery message for eMMC devices, 1088 bytes of stack memory can potentially be leaked.
CVE-2017-14869
1Google
1Android
Nov 21, 2024
Jan 10, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while performing update of FOTA partition, uninitialized data can be pushed to storage.