CWE-200

Microsoft Server Message Block 1.0 (SMBv1) allows an information disclosure vulnerability in the way that Microsoft Wind

Microsoft Server Message Block 1.0 (SMBv1) allows an information disclosure vulnerability in the way that Microsoft Wind

Microsoft Server Message Block 1.0 (SMBv1) allows an information disclosure vulnerability in the way that Microsoft Wind

Microsoft Server Message Block 1.0 (SMBv1) allows an information disclosure vulnerability in the way that Microsoft Wind

Microsoft Server Message Block 1.0 (SMBv1) allows an information disclosure vulnerability in the way that Microsoft Wind

Microsoft Server Message Block 1.0 (SMBv1) allows an information disclosure vulnerability in the way that Microsoft Wind

Microsoft Server Message Block 1.0 (SMBv1) allows an information disclosure vulnerability in the way that Microsoft Wind

On Juniper Networks Junos Space versions prior to 16.1R1 when certificate based authentication is enabled for the Junos

In Libgcrypt before 1.7.7, an attacker who learns the EdDSA session key (from side-channel observation during the signin

X-Pack Security 5.2.x would allow access to more fields than the user should have seen if the field level security rules

HTTP.sys in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, W

txAWS (all current versions) fail to perform complete certificate verification resulting in vulnerability to MitM attack

The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST) and DPC3941T (firmwa

The TLS and DTLS processing functionality in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gatewa

IBM Emptoris Strategic Supply Management Platform 10.0 and 10.1 could allow a remote attacker to obtain sensitive inform

IBM WebSphere Application Server 8.0, 8.5, and 9.0 could provide weaker than expected security after using the Admin Con

SimpleSAMLphp 1.14.12 and earlier make it easier for man-in-the-middle attackers to obtain sensitive information by leve

The (1) Htpasswd authentication source in the authcrypt module and (2) SimpleSAML_Session class in SimpleSAMLphp 1.14.11

AdvancedLdapLodinMogule in Red Hat JBoss Enterprise Application Platform (EAP) before 6.4.1 allows attackers to obtain s

OpenStage 60 and OpenScape Desk Phone IP 55G SIP V3, OpenStage 15, 20E, 20 and 40 and OpenScape Desk Phone IP 35G SIP V3

Laravel before 5.5.10 mishandles the remember_me token verification process because DatabaseUserProvider does not have c

The version checking subroutine in percona-toolkit before 2.2.13 and xtrabackup before 2.2.9 was vulnerable to silent HT

Check_MK before 1.2.8p26 mishandles certain errors within the failed-login save feature because of a race condition, whi

dnsmasq before 2.78, when configured as a relay, allows remote attackers to obtain sensitive memory information via vect

The Ruby http gem before 0.7.3 does not verify hostnames in SSL connections, which might allow remote attackers to obtai

Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: WebConnect).

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Updates Ch

Missing HTTP Strict Transport Security state information vulnerability in the server in McAfee Network Data Loss Prevent

The DefaultLinuxSpec function in oci/defaults.go in Docker Moby through 17.03.2-ce does not block /proc/scsi pathnames,

It was discovered that the fix for CVE-2017-12150 was not properly shipped in erratum RHSA-2017:2858 for Red Hat Gluster

IBM Tivoli Endpoint Manager (IBM BigFix 9.2 and 9.5) could allow a remote attacker to obtain sensitive information, caus

There is an overflow bug in the AVX2 Montgomery multiplication procedure used in exponentiation with 1024-bit moduli. No

Elemental Path's CogniToys Dino smart toys through firmware version 0.0.794 do not provide sufficient protections agains

Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.5 before build 67.13, 11.0 before build

A vulnerability in the TLS protocol implementation of legacy Cisco ASA 5500 Series (ASA 5505, 5510, 5520, 5540, and 5550

An issue was discovered in certain Apple products. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Win

Vulnerability in the Oracle JDeveloper component of Oracle Fusion Middleware (subcomponent: ADF Faces). Supported versio

An information disclosure vulnerability exists when the Windows Hyper-V Network Switch running on a Windows 8.1, Windows

An exploitable information disclosure vulnerability exists in the apid daemon of the Circle with Disney running firmware

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Integratio

IBM Cognos TM1 10.1 and 10.2 provides a service to return the victim's password with a valid session key. An authenticat

IBM iNotes 8.5 and 9.0 could allow a remote attacker to send a malformed email to a victim, that when opened could cause

NetApp Clustered Data ONTAP before 8.3.2P8 and 9.0 before P2 allow remote authenticated users to obtain sensitive cluste

Multiple information leaks exist in various IOCTL handlers of the Kaspersky Internet Security KLDISK driver. Specially c

An information disclosure vulnerability in the ih264d decoder in Mediaserver could enable a local malicious application

An information disclosure vulnerability in the MediaTek video driver could enable a local malicious application to acces

An information disclosure vulnerability in the NVIDIA video driver could enable a local malicious application to access

An information disclosure vulnerability in the NVIDIA librm library (libnvrm) could enable a local malicious application

An information disclosure vulnerability in the NVIDIA video driver could enable a local malicious application to access

An information disclosure vulnerability in the bootloader could enable a local attacker to access data outside of its pe