Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

CVEs (11,862)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2018-9275 1Yubico 1Yubico Pam Jun 17, 2026 Apr 4, 2018 N/A· v4 8.2 HIGH· v3 6.4 MEDIUM· v2 In check_user_token in util.c in the Yubico PAM module (aka pam_yubico) 2.18 through 2.25, successful logins can leak file descriptors to the auth mapping file, which can lead to information disclosure (serial number of...Show more In check_user_token in util.c in the Yubico PAM module (aka pam_yubico) 2.18 through 2.25, successful logins can leak file descriptors to the auth mapping file, which can lead to information disclosure (serial number of a device) and/or DoS (reaching the maximum number of file descriptors).Show less
CVE-2017-6426 1Google 1Android Nov 21, 2024 Apr 4, 2018 N/A· v4 3.3 LOW· v3 4.3 MEDIUM· v2 An information disclosure vulnerability in the Qualcomm SPMI driver. Product: Android. Versions: Android kernel. Android ID: A-33644474. References: QC-CR#1106842.
CVE-2017-6425 1Google 1Android Nov 21, 2024 Apr 4, 2018 N/A· v4 3.3 LOW· v3 4.3 MEDIUM· v2 An information disclosure vulnerability in the Qualcomm video driver. Product: Android. Versions: Android kernel. Android ID: A-32577085. References: QC-CR#1103689.
CVE-2016-8486 1Google 1Android Nov 21, 2024 Apr 4, 2018 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 An information disclosure vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-28823691.
CVE-2016-8485 1Google 1Android Nov 21, 2024 Apr 4, 2018 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 An information disclosure vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-28823681.
CVE-2016-10236 1Google 1Android Nov 21, 2024 Apr 4, 2018 N/A· v4 3.3 LOW· v3 4.3 MEDIUM· v2 An information disclosure vulnerability in the Qualcomm USB driver. Product: Android. Versions: Android kernel. Android ID: A-33280689. References: QC-CR#1102418.
CVE-2016-10234 1Google 1Android Nov 21, 2024 Apr 4, 2018 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 An information disclosure vulnerability in the Qualcomm IPA driver. Product: Android. Versions: Android kernel. Android ID: A-34390017. References: QC-CR#1069060.
CVE-2017-13269 1Google 1Android Nov 21, 2024 Apr 4, 2018 N/A· v4 4.3 MEDIUM· v3 3.3 LOW· v2 A information disclosure vulnerability in the Android system (bluetooth). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-68818034.
CVE-2017-13268 1Google 1Android Nov 21, 2024 Apr 4, 2018 N/A· v4 4.3 MEDIUM· v3 3.3 LOW· v2 A information disclosure vulnerability in the Android system (bluetooth). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-67058064.
CVE-2017-13304 1Google 1Android Nov 21, 2024 Apr 4, 2018 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 A information disclosure vulnerability in the Upstream kernel mnh_sm driver. Product: Android. Versions: Android kernel. Android ID: A-70576999.
CVE-2017-13303 1Google 1Android Nov 21, 2024 Apr 4, 2018 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 A information disclosure vulnerability in the Broadcom bcmdhd driver. Product: Android. Versions: Android kernel. Android ID: A-71359108. References: B-V2018010501.
CVE-2017-13298 1Google 1Android Nov 21, 2024 Apr 4, 2018 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 A information disclosure vulnerability in the Android media framework (libhavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-72117051.
CVE-2017-13297 1Google 1Android Nov 21, 2024 Apr 4, 2018 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 A information disclosure vulnerability in the Android media framework (libhevc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-71766721.
CVE-2017-13296 1Google 1Android Nov 21, 2024 Apr 4, 2018 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 A information disclosure vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-70897454.
CVE-2017-13294 1Google 1Android Nov 21, 2024 Apr 4, 2018 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 A information disclosure vulnerability in the Android framework (aosp email application). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-71814449.
CVE-2018-6919 1Freebsd 1Freebsd Jun 17, 2026 Apr 4, 2018 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p9, 10.4-STABLE, 10.4-RELEASE-p8 and 10.3-RELEASE-p28, due to insufficient initialization of memory copied to userland, small amounts of kernel memory may be disclosed to userl...Show more In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p9, 10.4-STABLE, 10.4-RELEASE-p8 and 10.3-RELEASE-p28, due to insufficient initialization of memory copied to userland, small amounts of kernel memory may be disclosed to userland processes. Unprivileged users may be able to access small amounts privileged kernel data.Show less
CVE-2017-3972 1Mcafee 1Network Security Manager Nov 21, 2024 Apr 3, 2018 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Infrastructure-based foot printing vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows attackers to execute arbitrary code via the server banner leaking potentially sen...Show more Infrastructure-based foot printing vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows attackers to execute arbitrary code via the server banner leaking potentially sensitive or security relevant information.Show less
CVE-2018-3598 1Google 1Android Nov 21, 2024 Apr 3, 2018 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, insufficient validation of parameters from userspace in t...Show more In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, insufficient validation of parameters from userspace in the camera driver can lead to information leak and out-of-bounds access.Show less
CVE-2018-4168 1Apple 1Iphone Os Nov 21, 2024 Apr 3, 2018 N/A· v4 4.6 MEDIUM· v3 2.1 LOW· v2 An issue was discovered in certain Apple products. iOS before 11.3 is affected. The issue involves the "Files Widget" component. It allows physically proximate attackers to obtain sensitive information by leveraging the...Show more An issue was discovered in certain Apple products. iOS before 11.3 is affected. The issue involves the "Files Widget" component. It allows physically proximate attackers to obtain sensitive information by leveraging the display of cached data on a locked device.Show less
CVE-2018-4138 1Apple 1Mac Os X Nov 21, 2024 Apr 3, 2018 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "NVIDIA Graphics Drivers" component. It allows attackers to bypass intended memory-read restrictions via a craft...Show more An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "NVIDIA Graphics Drivers" component. It allows attackers to bypass intended memory-read restrictions via a crafted app.Show less

Previous 1...356357358...594 Next