CWE-200

An information disclosure vulnerability in Fortinet FortiOS 5.6.0, 5.4.4 and below versions allows attacker to get Forti

Adobe Digital Editions 4.5.4 and earlier has a security bypass vulnerability.

Adobe Experience Manager 6.3 and earlier has a misconfiguration vulnerability.

Adobe Experience Manager 6.1 and earlier has a sensitive data exposure vulnerability.

Fortinet FortiManager 5.0.x before 5.0.11, 5.2.x before 5.2.2 allows remote attackers to obtain arbitrary files via vect

A vulnerability in the AutoVNF automation tool of the Cisco Ultra Services Framework could allow an unauthenticated, rem

The RESTful control interface (aka RAPI or ganeti-rapi) in Ganeti before 2.9.7, 2.10.x before 2.10.8, 2.11.x before 2.11

In all Qualcomm products with Android releases from CAF using the Linux kernel, if a userspace string is not NULL-termin

In all Qualcomm products with Android releases from CAF using the Linux kernel, if a pointer argument coming from usersp

In Cloud Foundry Foundation CAPI-release versions after v1.6.0 and prior to v1.38.0 and cf-release versions after v244 a

In ImageMagick before 6.9.7-6 and 7.x before 7.0.4-6, the ReadMATImage function in coders/mat.c uses uninitialized data,

The mostActiveCommitters.do resource in Atlassian Fisheye and Crucible, before version 4.4.1 allows anonymous remote att

The samsung_extdisp driver in the Samsung S4 (GT-I9500) I9500XXUEMK8 kernel 3.4 and earlier allows attackers to potentia

Emacs 24.4 allows remote attackers to bypass security restrictions.

Information disclosure vulnerability in Netatmo Indoor Module firmware 100 and earlier.

ZTE OX-330P, ZXHN H108N, W300V1.0.0S_ZRD_TR1_D68, HG110, GAN9.8T101A-B, MF28G, ZXHN H108N use non-unique X.509 certifica

Error responses from Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating included stack trace, exposing excessiv

Libgcrypt before 1.8.1 does not properly consider Curve25519 side-channel attacks, which makes it easier for attackers t

A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V1.81.2). An attacker with net

Soplanning 1.32 and earlier generates static links for sharing ICAL calendars with embedded login information, which all

NetApp OnCommand Unified Manager for Clustered Data ONTAP before 7.2P1 does not set the secure flag for an unspecified c

In res/res_rtp_asterisk.c in Asterisk 11.x before 11.25.2, 13.x before 13.17.1, and 14.x before 14.6.1 and Certified Ast

TelescopeJS before 0.15 leaks user bcrypt password hashes in websocket messages, which might allow remote attackers to o

Apache Directory LDAP API before 1.0.0-M31 allows attackers to conduct timing attacks via unspecified vectors.

Vulnerability in Easy Joomla Backup v3.2.4. The software creates a copy of the backup in the web root with an easily gue

There is a sensitive information disclosure vulnerability in document.php in Dolibarr ERP/CRM version 6.0.0 via the file

IBM QRadar 7.2 and 7.3 discloses sensitive information to unauthorized users. The information can be used to mount furth

The EyesOfNetwork web interface (aka eonweb) 5.1-0 allows local file inclusion via the tool_list parameter (aka the url_

When using a VirtualDirContext with Apache Tomcat 7.0.0 to 7.0.80 it was possible to bypass security constraints and/or

Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to obtain sensitive informa

There is LFD (local file disclosure) on BE126 WIFI repeater 1.0 devices that allows attackers to read the entire filesys

iTerm2 3.x before 3.1.1 allows remote attackers to discover passwords by reading DNS queries. A new (default) feature wa

The knife bootstrap command in chef Infra client before version 15.4.45 leaks the validator.pem private RSA key to /var/

ZKTeco ZKTime Web 2.0.1.12280 allows remote attackers to obtain sensitive employee metadata via a direct request for a P

An information disclosure vulnerability in the Android framework (file system). Product: Android. Versions: 7.0, 7.1.1,

An information disclosure vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.

An information disclosure vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 4.4

An information disclosure vulnerability in the Android system (rild). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6

An information disclosure vulnerability in the Broadcom wifi driver. Product: Android. Versions: Android kernel. Android

On Broadcom BCM4355C0 Wi-Fi chips 9.44.78.27.0.1.56, an attacker can trigger an information leak due to insufficient len

The Pipeline: Input Step Plugin by default allowed users with Item/Read access to a pipeline to interact with the step t

In Asterisk 11.x before 11.25.3, 13.x before 13.17.2, and 14.x before 14.6.2 and Certified Asterisk 11.x before 11.6-cer

Trapeze TransitMaster is vulnerable to information disclosure (emails / hashed passwords) via a modified userID field in

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, informat

Tiandy IP cameras 5.56.17.120 do not properly restrict a certain proprietary protocol, which allows remote attackers to

The Microsoft Windows Search component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Wind

Microsoft Outlook 2016 allows an attacker to obtain the email content of a user, due to how Outlook 2016 discloses user

ChakraCore allows an attacker to execute arbitrary code in the context of the current user, due to how the ChakraCore sc

ChakraCore allows an attacker to execute arbitrary code in the context of the current user, due to how the ChakraCore sc

Fiyo CMS 2.0.1.8 allows remote attackers to obtain sensitive information via a direct request to the database backup fil