CWE-200

There is an information leak vulnerability in Sprockets. Versions Affected: 4.0.0.beta7 and lower, 3.7.1 and lower, 2.12

In Rclone 1.42, use of "rclone sync" to migrate data between two Google Cloud Storage buckets might allow attackers to t

The PortletV3AnnotatedDemo Multipart Portlet war file code provided in Apache Pluto version 3.0.0 could allow a remote a

Brickstream 2300 devices allow remote attackers to obtain potentially sensitive information via a direct request for the

Electro Industries GaugeTech Nexus devices allow remote attackers to obtain potentially sensitive information via a dire

BWS Systems HA-Bridge devices allow remote attackers to obtain potentially sensitive information via a direct request fo

Pharos Controls devices allow remote attackers to obtain potentially sensitive information via a direct request for the

Northern Electric & Power (NEP) inverter devices allow remote attackers to obtain potentially sensitive information via

Incorrect Access Control in FailOverHelperServlet in Zoho ManageEngine Netflow Analyzer before build 123137, Network Con

The Touch Pal application can collect user behavior data without awareness by the user in Snapdragon Mobile and Snapdrag

Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier

Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier

IBM iNotes before 8.5.3 Fix Pack 6 and 9.x before 9.0.1 allows remote attackers to bypass the remote image filtering mec

MusicCenter / Trivum Multiroom Setup Tool V8.76 - SNR 8604.26 - C4 Professional before V9.34 build 13381 - 12.07.18 allo

There are few web pages associated with the genie app on the Netgear WNDR4500 running firmware version V1.0.1.40_1.0.687

Some Navarino Infinity functions, up to version 2.2, placed in the URL can bypass any authentication mechanism leading t

LICA miniCMTS E8K(u/i/...) devices allow remote attackers to obtain sensitive information via a direct POST request for

An issue was discovered in GitLab Community and Enterprise Edition before 10.8.7, 11.0.x before 11.0.5, and 11.1.x befor

When the F5 BIG-IP APM 13.0.0-13.1.1 or 12.1.0-12.1.3 renders certain pages (pages with a logon agent or a confirm box),

/contingency/servlet/ServletFileDownload executes as root and provides unauthenticated access to files via the file para

An issue was discovered in ext/standard/link_win32.c in PHP before 5.6.37, 7.0.x before 7.0.31, 7.1.x before 7.1.20, and

An Information Exposure issue was discovered in Hitachi Command Suite 8.5.3. A remote attacker may be able to exploit a

Information leakage vulnerability in NetIQ eDirectory before 9.1.1 HF1 due to shared memory usage.

NetComm Wireless G LTE Light Industrial M2M Router (NWL-25) with firmware 2.0.29.11 and prior. The device allows access

NetComm Wireless G LTE Light Industrial M2M Router (NWL-25) with firmware 2.0.29.11 and prior. The directory of the devi

Sensitive Information Disclosure in Zipato Zipabox Smart Home Controller allows remote attacker get sensitive informatio

An information disclosure vulnerability exists in Microsoft .NET Framework that could allow an attacker to access inform

Wi2be SMART HP WMT R1.2.20_201400922 allows unauthorized remote attackers to obtain sensitive information via /Status/Sy

An issue was discovered in the Ola Money (aka com.olacabs.olamoney) application 1.9.0 for Android. If an attacker contro

Information disclosure in Netwave IP camera at get_status.cgi (via HTTP on port 8000) allows an unauthenticated attacker

A vulnerability was found in openstack-cinder releases up to and including Queens, allowing newly created volumes in cer

The ContentProvider in the EPSON iPrint application 6.6.3 for Android does not properly restrict data access. This allow

A flaw was found in the way dic_unserialize function of glusterfs does not handle negative key length values. An attacke

An "Out-of-band resource load" issue was discovered on Xiaomi MIWiFi Xiaomi_55DD Version 2.8.50 devices. It is possible

An issue was discovered in OpenAFS before 1.6.23 and 1.8.x before 1.8.2. Several RPC server routines did not fully initi

An issue was discovered in Browserify-HMR. Attackers are able to steal developer's code because the origin of requests i

An issue was discovered in HMRServer.js in Parcel parcel-bundler. Attackers are able to steal developer's code because t

Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have a use

Adobe Flash Player versions 30.0.0.154 and earlier have a privilege escalation vulnerability. Successful exploitation co

The web component on ARRIS TG2492LG-NA 061213 devices allows remote attackers to obtain sensitive information via the /s

Foxit PhantomPDF and Reader before 9.3 allow remote attackers to trigger Uninitialized Object Information Disclosure bec

The export/content.php exportarticle feature in the wordpress-mobile-pack plugin before 2.1.3 2015-06-03 for WordPress a

The wp-db-backup plugin 2.2.4 for WordPress relies on a five-character string for access control, which makes it easier

An information disclosure vulnerability exists in .NET Core when authentication information is inadvertently exposed in

An information disclosure vulnerability in the Management Console of BlackBerry UEM 12.8.0 and 12.8.1 could allow an att

The MESILAT Zabbix plugin before 1.1.15 for Atlassian Confluence allows attackers to read arbitrary files.

goform/getWlanClientInfo in Orange AirBox Y858_FL_01.16_04 allows remote attackers to discover information about current

A vulnerability in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol component of Cisco Wireless

In \lib\admin\action\dataaction.class.php in Gxlcms v2.0, the database backup filename generation uses mt_rand() unsafel

User Enumeration in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1.