CWE-200

A vulnerability in the Elastic Services Controller (ESC) web interface of the Cisco Ultra Services Platform could allow

IBM Curam Social Program Management 6.0, 6.1, 6.2, and 7.0 contains an unspecified vulnerability that could allow an aut

RTPproxy through 2.2.alpha.20160822 has a NAT feature that results in not properly determining the IP address and port n

A vulnerability in the ability for guest users to join meetings via a hyperlink with Cisco Meeting Server could allow an

A vulnerability in the Inventory Management feature of Cisco Prime Collaboration Provisioning Tool could allow an authen

A information disclosure vulnerability in the Broadcom wi-fi driver. Product: Android. Versions: Android kernel. Android

All versions of the SDP server in BlueZ 5.46 and earlier are vulnerable to an information disclosure vulnerability which

Default access permissions for Persistent Volumes (PVs) created by the Kubernetes Azure cloud provider in versions 1.6.0

The Fastly CDN module before 1.2.26 for Magento2, when used with a third-party authentication plugin, might allow remote

A information disclosure vulnerability in the Android system (bluetooth). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.

A information disclosure vulnerability in the Android system (bluetooth). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.

Polycom RealPresence Resource Manager (aka RPRM) before 8.4 allows remote authenticated users to obtain the installation

member/Orderinfo.asp in ASP4CMS AspCMS 2.7.2 allows remote authenticated users to read arbitrary order information via a

Jaspersoft JasperReports 4.7 suffers from a saved credential disclosure vulnerability, which allows a remote authenticat

When an Apache Geode cluster before v1.2.1 is operating in secure mode, an unauthenticated client can enter multi-user a

Docker Commons Plugin provides a list of applicable credential IDs to allow users configuring a job to select the one th

When asking to get a file from a file:// URL, libcurl provides a feature that outputs meta-data about the file using HTT

When doing a TFTP transfer and curl/libcurl is given a URL that contains a very long file name (longer than about 515 by

IBM Financial Transaction Manager for ACH Services for Multi-Platform 3.0.2 could allow an authenticated user to obtain

ReadGIFImage in coders/gif.c in ImageMagick 7.0.6-1 and GraphicsMagick 1.3.26 leaves the palette uninitialized when proc

An Information Exposure issue was discovered in ProMinent MultiFLEX M10a Controller web interface. When an authenticated

The embedded web server on ABB Fox515T 1.0 devices is vulnerable to Local File Inclusion. It accepts a parameter that sp

An issue was discovered in Xen through 4.9.x allowing x86 HVM guest OS users to obtain sensitive information from the ho

An issue was discovered in Octopus before 3.17.7. When the special Guest user account is granted the CertificateExportPr

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Container). Support

Vulnerability in the XML Database component of Oracle Database Server. Supported versions that are affected are 11.2.0.4

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Test Frame

Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: WebConnect).

Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Import/Expo

Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: Leisure). Sup

Use of an uninitialized value in Skia in Google Chrome prior to 61.0.3163.79 for Linux and Windows allowed a remote atta

Artica Pandora FMS version 7.0 leaks a full installation pathname via GET data when intercepting the main page's graph r

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader

GraphicsMagick 1.3.26 is vulnerable to a memory information disclosure vulnerability found in the DescribeImage function

There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL before 1.0.2m and 1.1.0 before 1

Tor Browser before 7.0.9 on macOS and Linux allows remote attackers to bypass the intended anonymity feature and discove

Information disclosure through directory listing on the Cohu 3960HD allows an attacker to view and download source code,

INSERT ... ON CONFLICT DO UPDATE commands in PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, and 9.5.x before 9.5.10 di

The UMA product with software V200R001 and V300R001 has an information leak vulnerability. An attacker could exploit the

An issue was discovered in Xen through 4.9.x on the ARM platform allowing guest OS users to obtain sensitive information

IBM Sterling File Gateway 2.2 could allow an authenticated attacker to obtain sensitive information such as login ids on

In Open Ticket Request System (OTRS) through 3.3.20, 4 through 4.0.26, 5 through 5.0.24, and 6 through 6.0.1, an attacke

An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier ver

The console in Puppet Enterprise 3.7.x, 3.8.x, and 2015.2.x does not set the secure flag for the JSESSIONID cookie in an

Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold,

Microsoft Office 2016 Click-to-Run (C2R) allows an information disclosure vulnerability due to the way Microsoft Office

The Web Configuration Utility in Meinberg LANTIME devices with firmware before 6.24.004 allows remote attackers to read

The Web Configuration Utility in Meinberg LANTIME devices with firmware before 6.24.004 allows remote authenticated user