CWE-200
11,927 CVEs • Abstraction: Class • Likelihood of Exploit: High
Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
CVEs (11,927)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
An information disclosure vulnerability in Fortinet FortiOS 6.0.1, 5.6.7 and below allows attacker to reveals serial number of FortiGate via hostname field defined in connection control setup packets of PPTP protocol. |
In Eclipse Kura versions up to 4.0.0, Kura exposes the underlying Ui Web server version in its replies. This can be used as a hint by an attacker to specifically craft attacks to the web server run by Kura. |
Some URIs in IBM API Connect 2018.1 and 2018.4.1.3 disclose system specification information like the machine id, system uuid, filesystem paths, network interface names along with their mac addresses. An attacker can use...Show more |
1Ibm 2Business Automation Workflow Business Process ManagerNov 21, 2024 Apr 8, 2019 N/A· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, and 18.0.0.2 could reveal sensitive version information about the server from error pages that could aid an attacker in further attacks against the system. IBM X-Force...Show more |
1Ibm 4Business Automation Workflow Business Process ManagerBusiness Process Manager Enterprise Service Bus+1 moreNov 21, 2024 Apr 8, 2019 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, and 18.0.0.2 could allow an unauthenticated attacker to obtain sensitve information using a specially cracted HTTP request. IBM X-Force ID: 152020. |
2Linux Netapp2Element Software Management Node Linux KernelNov 21, 2024 Apr 4, 2019 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 The hidma_chan_stats function in drivers/dma/qcom/hidma_dbg.c in the Linux kernel 4.14.90 allows local users to obtain sensitive address information by reading "callback=" lines in a debugfs file. |
1Qualcomm 21Mdm9206 Firmware Mdm9607 FirmwareMdm9650 Firmware+18 moreNov 21, 2024 Apr 4, 2019 N/A· v4 5.5 MEDIUM· v3 4.9 MEDIUM· v2 Interrupt exit code flow may undermine access control policy set forth by secure world can lead to potential secure asset leakage in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snap...Show more |
"Clear History and Website Data" did not clear the history. The issue was addressed with improved data deletion. This issue affected versions prior to iOS 12.1.1, Safari 12.0.2. |
1Apple 4Iphone Os Mac Os XTvos+1 moreNov 21, 2024 Apr 3, 2019 N/A· v4 5.5 MEDIUM· v3 4.9 MEDIUM· v2 A memory initialization issue was addressed with improved memory handling. This issue affected versions prior to iOS 12.1.1, macOS Mojave 10.14.2, tvOS 12.1.1, watchOS 5.1.2. |
A lock screen issue allowed access to contacts on a locked device. This issue was addressed with improved state management. This issue affected versions prior to iOS 12.1.1. |
This issue was addressed by removing additional entitlements. This issue affected versions prior to macOS Mojave 10.14.1. |
A lock screen issue allowed access to the share function on a locked device. This issue was addressed by restricting options offered on a locked device. This issue affected versions prior to iOS 12.1. |
A lock screen issue allowed access to photos via Reply With Message on a locked device. This issue was addressed with improved state management. This issue affected versions prior to iOS 12.1. |
A lock screen issue allowed access to photos and contacts on a locked device. This issue was addressed by restricting options offered on a locked device. This issue affected versions prior to iOS 12.0.1. |
A lock screen issue allowed access to the share function on a locked device. This issue was addressed by restricting options offered on a locked device. This issue affected versions prior to iOS 12.0.1. |
A configuration issue was addressed with additional restrictions. This issue affected versions prior to iOS 12, macOS Mojave 10.14. |
A consistency issue existed in the handling of application snapshots. The issue was addressed with improved handling of notes deletions. This issue affected versions prior to iOS 12. |
A logic issue was addressed with improved restrictions. This issue affected versions prior to iOS 12. |
1Apple 5Icloud Iphone OsItunes+2 moreNov 21, 2024 Apr 3, 2019 N/A· v4 8.1 HIGH· v3 5.8 MEDIUM· v2 The issue was addressed by removing origin information. This issue affected versions prior to iOS 12, watchOS 5, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7. |
The session cookie generated by the CUPS web interface was easy to guess on Linux, allowing unauthorized scripted access to the web interface when the web interface is enabled. This issue affected versions prior to v2.2....Show more |