Improper Removal of Sensitive Information Before Storage or Transfer

The product stores, transfers, or shares a resource that contains sensitive information, but it does not properly remove that information before the product makes the resource available to unauthorized actors.

CVEs (124)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2017-15113 2Ovirt Redhat 2Ovirt Virtualization Nov 21, 2024 Jul 27, 2018 N/A· v4 6.6 MEDIUM· v3 3.5 LOW· v2 ovirt-engine before version 4.1.7.6 with log level set to DEBUG includes passwords in the log file without masking. Only administrators can change the log level and only administrators can access the logs. This presents...Show more ovirt-engine before version 4.1.7.6 with log level set to DEBUG includes passwords in the log file without masking. Only administrators can change the log level and only administrators can access the logs. This presents a risk when debug-level logs are shared with vendors or other parties to troubleshoot issues.Show less
CVE-2018-1062 1Redhat 1Ovirt Engine Nov 21, 2024 Mar 6, 2018 N/A· v4 5.3 MEDIUM· v3 3.5 LOW· v2 A vulnerability was discovered in oVirt 4.1.x before 4.1.9, where the combination of Enable Discard and Wipe After Delete flags for VM disks managed by oVirt, could cause a disk to be incompletely zeroed when removed fro...Show more A vulnerability was discovered in oVirt 4.1.x before 4.1.9, where the combination of Enable Discard and Wipe After Delete flags for VM disks managed by oVirt, could cause a disk to be incompletely zeroed when removed from a VM. If the same storage blocks happen to be later allocated to a new disk attached to another VM, potentially sensitive data could be revealed to privileged users of that VM.Show less
CVE-2005-0406 1Image Processing Project 1Image Processing Apr 16, 2026 Feb 14, 2005 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 A design flaw in image processing software that modifies JPEG images might not modify the original EXIF thumbnail, which could lead to an information leak of potentially sensitive visual information that had been removed...Show more A design flaw in image processing software that modifies JPEG images might not modify the original EXIF thumbnail, which could lead to an information leak of potentially sensitive visual information that had been removed from the main JPEG image.Show less
CVE-2002-0704 1Linux 1Linux Kernel Apr 16, 2026 Jul 26, 2002 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The Network Address Translation (NAT) capability for Netfilter ("iptables") 1.2.6a and earlier leaks translated IP addresses in ICMP error messages.

Previous 1 2 3 4 5 67