CWE-200

The login function in lib/lawn.rb in the lawn-login gem 0.0.7 for Ruby places credentials on the curl command line, whic

lib/ksymfony1.rb in the kcapifony gem 2.1.6 for Ruby places database user passwords on the (1) mysqldump, (2) pg_dump, (

lib/brbackup.rb in the brbackup gem 0.1.1 for Ruby places the database password on the mysql command line, which allows

keycloak-httpd-client-install versions before 0.8 allow users to insecurely pass password through command line, leaking

The do_ed_script function in pch.c in GNU patch through 2.7.6, and patch in FreeBSD 10.1 before 10.1-RELEASE-p17, 10.2 b

A Disclosure of Sensitive Information vulnerability in HPE SiteScope version v11.2x, v11.3x was found.

All versions of OnCommand API Services prior to 2.1 and NetApp Service Level Manager prior to 1.0RC4 log a privileged da

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, untruste

IBM Capacity Management Analytics 2.1.0.0 allows local users to decrypt usernames and passwords by leveraging access to

IBM Capacity Management Analytics 2.1.0.0 allows local users to discover cleartext usernames and passwords by leveraging

IBM Capacity Management Analytics 2.1.0.0 allows local users to discover encrypted usernames and passwords by leveraging

Information leak of the ISPIF base address in Android for MSM, Firefox OS for MSM, and QRD Android can occur in the came

An exposure of sensitive information vulnerability exists in Jenkins GitHub Pull Request Builder Plugin version 1.39.0 a

Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains an information disclosure flaw, where the api.log might contain pass

A vulnerability in the web portal authentication process of Cisco Prime Collaboration Provisioning could allow an unauth

An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "Accessibili

Lack of copy_from_user and information leak in function "msm_ois_subdev_do_ioctl, file msm_ois.c can lead to a camera cr

The iTrack Easy mobile application stores the account password used to authenticate to the cloud API in base64-encoding

The Zizai Tech Nut mobile app stores the account password used to authenticate to the cloud API in cleartext in the cach

A vulnerability in Cisco Digital Network Architecture (DNA) Center could allow an authenticated, local attacker to acces

An issue was discovered in Xen through 4.11.x on AMD x86 platforms, possibly allowing guest OS users to gain host OS pri

set_file_metadata in xattr.c in GNU Wget before 1.20.1 stores a file's origin URL in the user.xdg.origin.url metadata at

ovirt-engine API and administration web portal before versions 4.2.2.5, 4.1.11.2 is vulnerable to an exposure of Power M

In systems using the optional capture & replay functionality of SAP HANA, 1.00 and 2.00, (see SAP Note 2362820 for more

Existing UEFI setting restrictions for DCI (Direct Connect Interface) in 5th and 6th generation Intel Xeon Processor E3

Linaro's open source TEE solution called OP-TEE, version 2.4.0 (and older) is vulnerable to the bellcore attack in the L

Cobham Sea Tel 121 build 222701 devices allow remote attackers to obtain potentially sensitive information about valid u

The Apache Sling JCR ContentLoader 2.1.4 XmlReader used in the Sling JCR content loader module makes it possible to impo

When an Apache Geode cluster before v1.3.0 is operating in secure mode, a user with read access to specific regions with

It was found that FreeIPA 4.2.0 and later could disclose password hashes to users having the 'System: Read Stage Users'

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while fl

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while pe

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while up

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, userspac

node/utils/ExportEtherpad.js in Etherpad 1.5.x before 1.5.2 might allow remote attackers to obtain sensitive information

An information disclosure vulnerability in the Android framework (clipboardservice). Product: Android. Versions: 5.1.1,

An information disclosure vulnerability in the Android media framework (av) related to id3 unsynchronization. Product: A

An information disclosure vulnerability in the Android media framework (mediadrm). Product: Android. Versions: 5.1.1, 6.

An information disclosure vulnerability in the Android media framework (libeffects). Product: Android. Versions: 5.1.1,

An information disclosure vulnerability in the Android media framework (aacdec). Product: Android. Versions: 5.1.1, 6.0,

An information disclosure vulnerability in the Android media framework (stagefright mpeg4writer). Product: Android. Vers

An information disclosure vulnerability in the Upstream kernel kernel. Product: Android. Versions: Android kernel. Andro

An uninitialized pointer information disclosure vulnerability in Trend Micro Mobile Security (Enterprise) versions 9.7 a

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Netgain Ente

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Netgain Ente

RAVPower FileHub 2.000.056 allows remote users to steal sensitive information via a crafted HTTP request.

An issue was discovered in the "Email Subscribers & Newsletters" plugin before 3.4.8 for WordPress. Sending an HTTP POST

Arbitrary File Download exists in the Jtag Members Directory 5.3.7 component for Joomla! via the download_file parameter

In the function sbusfb_ioctl_helper() in drivers/video/fbdev/sbuslib.c in the Linux kernel through 4.15, an integer sign

Hotspot Shield runs a webserver with a static IP address 127.0.0.1 and port 895. The web server uses JSONP and hosts sen