CWE-200

Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers

Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers

A RADIUS Secret Disclosure vulnerability in the web network management interface of Cisco Prime Optical for Service Prov

IBM Algorithmics One-Algo Risk Application 4.9.1, 5.0, and 5.1.0 could allow a user to gain access to another user's rep

An error in the implementation of an autosubscribe feature in the check_stream_exists route of the Zulip group chat appl

Nextcloud Server before 9.0.55 and 10.0.2 suffers from a error message disclosing existence of file in write-only share.

The Adobe Type Manager Font Driver (ATMFD.dll) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windo

An information disclosure vulnerability exists in Microsoft Edge when the Chakra scripting engine does not properly hand

IBM Tivoli Application Dependency Discovery Manager 7.2.2 and 7.3 could allow a remote attacker to read system files or

Cybozu Office 9.0.0 to 10.4.0 allows remote authenticated attackers to bypass access restriction to view unauthorized pr

Cybozu Office 9.0.0 to 10.4.0 allows remote authenticated attackers to bypass access restrictions to view the names of u

Cybozu Mailwise before 5.4.0 allows remote attackers to obtain information on when an email is read.

Cybozu Mailwise before 5.4.0 allows remote attackers to conduct clickjacking attacks.

The capability check to access other badges in Moodle 3.0 through 3.0.3, 2.9 through 2.9.5, 2.8 through 2.8.11, 2.7 thro

IBM Curam Social Program Management 5.2, 6.0, and 7.0 contains a vulnerability that would allow an authorized user to ob

IBM Curam Social Program Management 5.2, 6.0, and 7.0 could allow an authenticated attacker to disclose sensitive inform

Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications (subcompo

Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications (subcompo

Cybozu Garoon 3.0.0 to 4.2.3 allow remote attackers to obtain tokens used for CSRF protection via unspecified vectors.

IBM Insights Foundation for Energy 1.0, 1.5, and 1.6 could allow an authenticated user to obtain sensitive information f

IBM Jazz Foundation could allow an authenticated user to obtain sensitive information from stack traces. IBM X-Force ID:

Authconfig version 6.2.8 is vulnerable to an Information exposure while using SSSD to authenticate against remote server

Elastic X-Pack Security versions prior to 5.4.1 and 5.3.3 did not always correctly apply Document Level Security to inde

IBM Maximo Asset Management 7.1, 7.5, and 7.6 could allow an authenticated user to view incorrect item sets that they sh

Hands-on Vulnerability Learning Tool "AppGoat" for Web Application V3.0.2 and earlier allow remote attackers to obtain l

IBM Jazz Foundation could expose potentially sensitive information to authenticated users through stack trace error cond

Microsoft Edge in Windows 10 1607 and 1703, and Windows Server 2016 allows an attacker to read data not intended to be d

Microsoft Edge in Windows 10 1607 and 1703, and Windows Server 2016 allows an attacker to read the URL of a cross-origin

IBM Jazz Foundation could allow an authenticated attacker to obtain sensitive information from error message stack trace

IBM Jazz Reporting Service (JRS) 5.0 and 6.0 could allow an authenticated attacker to access report data that should be

EMC RSA Archer 5.4.1.3, 5.5.3.1, 5.5.2.3, 5.5.2, 5.5.1.3.1, 5.5.1.1 is affected by an information exposure through an er

EMC RSA Archer 5.4.1.3, 5.5.3.1, 5.5.2.3, 5.5.2, 5.5.1.3.1, 5.5.1.1 is affected by an information exposure through an er

In Moodle 3.3, the course overview block reveals activities in hidden courses.

IBM Emptoris Contract Management 10.0 and 10.1 reveals detailed error messages in certain features that could cause an a

Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to disclose in

Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to obtain information to further compromise the user's sy

Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to disclose information due to how strings are validated

IBM Runbook Automation reveals sensitive information in error messages that could be used in further attacks against the

A vulnerability in Cisco Elastic Services Controller (ESC) could allow an authenticated, remote attacker to view sensiti

A vulnerability in SNMP polling for the Cisco Web Security Appliance (WSA), Email Security Appliance (ESA), and Content

IBM Sametime 8.5 and 9.0 meetings server may provide detailed information in an error message that may provide details a

IBM Sametime Meeting Server 8.5.2 and 9.0 may send replies that contain emails of people that should not be in these mes

IBM Sametime 8.5.2 and 9.0 could allow an unauthorized authenticated user to enumerate group chat ID numbers and join me

IBM Sametime 8.5.1 and 9.0 could allow an authenticated user to enumerate meeting rooms by guessing the meeting room id.

IBM Sametime Meeting Server 8.5.2 and 9.0 could allow a meeting invitee to obtain previously cleared sensitive informati

Microsoft Edge in Microsoft Windows 10 Version 1703 allows an attacker to obtain information to further compromise the u

Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to leave a mal

Microsoft Edge in Microsoft Windows Version 1703 allows an attacker to obtain information to further compromise the user

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server

Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to obtain information to further compromise the user's sy