CWE-200

In Apache CloudStack 4.1.0 and 4.1.1, when calling the CloudStack API call listProjectAccounts as a regular, non-adminis

IBM API Connect 5.0.7 and 5.0.8 could allow an authenticated remote user to modify query parameters to obtain sensitive

Microsoft Edge in Microsoft Windows 10 1703 allows information disclosure, due to how Edge handles objects in memory, ak

The Microsoft Windows Embedded OpenType (EOT) font engine in Microsoft Windows 7 SP1 and Windows Server 2008 R2 allows i

IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.3, and 3.5 before 3.5.0.1 allows remote authentica

IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.3, and 3.5 before 3.5.0.1 allows remote authentica

IBM Security Identity Manager Virtual Appliance 7.0.x before 7.0.1.3-ISS-SIM-IF0001 allows remote authenticated users to

Some NetIQ Identity Manager Applications before Identity Manager 4.5.6.1 included the session token in GET URLs, potenti

Huawei Honor Smart Scale Application with software of 1.1.1 has an information disclosure vulnerability. The application

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to obtain sensitive information ca

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Window

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server

IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 5.0 and 6.0) could allow an authenticated user to o

IBM Curam Social Program Management 6.1.x before 6.1.1.1 allows remote authenticated users to bypass intended access res

IBM InfoSphere Master Data Management (MDM) - Collaborative Edition 9.1, 10.1, 11.0, 11.3, 11.4, and 11.5 allow remote a

IBM Maximo Asset Management 7.1, 7.5, and 7.6; Maximo Asset Management Essentials 7.1 and 7.5; Control Desk 7.5 and 7.6;

Avolve Software ProjectDox 8.1 allows remote attackers to enumerate users via vectors related to email addresses.

In the WebRTC component in Opera 51.0.2830.55, after visiting a web site that attempts to gather complete client informa

IBM Security Privileged Identity Manager 2.1.0 contains left-over, sensitive information in page comments. While this in

In the WebRTC component in DuckDuckGo 4.2.0, after visiting a web site that attempts to gather complete client informati

An issue was discovered in certain Apple products. iOS before 11 is affected. macOS before 10.13 is affected. tvOS befor

A information disclosure vulnerability in the Android system (bluetooth). Product: Android. Versions: 5.1.1, 6.0, 6.0.1,

A information disclosure vulnerability in the Android system (bluetooth). Product: Android. Versions: 5.1.1, 6.0, 6.0.1,

S12700 V200R005C00, V200R006C00, V200R006C01, V200R007C00, V200R007C01, V200R007C20, V200R008C00, V200R008C06, V200R009C

An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory, aka "Microsoft

pcs before versions 0.9.164 and 0.10 is vulnerable to a debug parameter removal bypass. REST interface of the pcsd servi

A vulnerability in the web framework of Cisco Unified Communications Manager could allow an authenticated, remote attack

A vulnerability in the web framework of the Cisco Digital Network Architecture Center (DNA Center) could allow an unauth

IBM Jazz Team Server affecting the following IBM Rational Products: Collaborative Lifecycle Management (CLM), Rational D

IBM Jazz Team Server affecting the following IBM Rational Products: Collaborative Lifecycle Management (CLM), Rational D

IBM Campaign 8.6, 9.0, 9.1, 9.1.1, 9.1.2, and 10.0 contains excessive details on the client side which could provide inf

IBM API Connect 5.0.8.1 and 5.0.8.2 could allow a user to get access to internal environment and sensitive API details t

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to obtain sensitive information ca

Jenkins before versions 2.44, 2.32.2 is vulnerable to an information exposure in the internal API that allows access to

An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory, aka "Microsoft

In jenkins before versions 2.44, 2.32.2 node monitor data could be viewed by low privilege users via the remote API. The

An issue was discovered in Joomla! Core before 3.8.8. Inadequate checks allowed users to see the names of tags that were

jenkins before versions 2.44, 2.32.2 is vulnerable to an information disclosure vulnerability in search suggestions (SEC

IBM Security Guardium Big Data Intelligence (SonarG) 3.1 generates an error message that includes sensitive information

IBM API Connect 5.0.0.0 through 5.0.8.2 does not properly update the SESSIONID with each request, which could allow a us

A local file vulnerability exists in the F5 BIG-IP Configuration utility on versions 13.0.0, 12.1.0-12.1.2, 11.6.1-11.6.

An issue was discovered in OTRS 6.0.x before 6.0.7. An attacker who is logged into OTRS as a customer can use the ticket

Crafted CSS in an RSS feed can leak and reveal local path strings, which may contain user name. This vulnerability affec

A Blob URL can violate origin attribute segregation, allowing it to be accessed from a private browsing tab and for data

An information disclosure vulnerability exists when Edge improperly marks files, aka "Microsoft Edge Information Disclos

An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory, aka "Microsoft

The API service on Google Home and Chromecast devices before mid-July 2018 does not prevent DNS rebinding attacks from r

Cybozu Office 10.0.0 to 10.7.0 allow remote attackers to display an image located in an external server via unspecified

Cybozu Office 10.0.0 to 10.7.0 allows authenticated attackers to bypass authentication to view the schedules that are no