CWE-200

Implicit Intent hijacking vulnerability in Samsung Internet Browser prior to version 17.0.7.34 allows attackers to acces

A flaw was found in wildfly-core in all versions. If a vault expression is in the form of a single attribute that contai

Exposure of Sensitive Information in Find My Mobile prior to version 7.2.25.14 allows local attacker to access IMEI via

Rapid7 InsightVM suffers from an information exposure issue whereby, when the user's session has ended due to inactivity

This issue was addressed with improved entitlements. This issue is fixed in iOS 16, watchOS 9. An app may be able to rea

The issue was addressed with additional restrictions on the observability of app states. This issue is fixed in macOS Bi

IBM Robotic Process Automation for Cloud Pak 21.0.1, 21.0.2, 21.0.3, 21.0.4, and 21.0.5 is vulnerable to exposure of th

The Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.12.6 is susceptible to a loc

Nextcould talk android is the android OS implementation of the nextcloud talk chat system. In affected versions the rece

MPXJ is an open source library to read and write project plans from a variety of file formats and databases. On Unix-lik

Exposure of Sensitive Information vulnerability in Samsung Settings prior to SMR Dec-2022 Release 1 allows local attacke

Nextcloud android is the official Android client for the Nextcloud home server platform. Internal paths to the Nextcloud

An exposure of sensitive system information to an unauthorized control sphere vulnerability [CWE-497] in FortiManager ve

Exposure of Sensitive Information in FaqSymptomCardViewModel in Samsung Members prior to versions 4.3.00.11 in Global an

Arbitrary File Read vulnerability in WPvivid Team Migration, Backup, Staging – WPvivid (WordPress plugin) versions <= 0.

A vulnerability was found in PHPList 3.2.6. It has been declared as problematic. Affected by this vulnerability is an un

Flask-AppBuilder is an application development framework built on top of Flask python framework. In versions prior to 4.

In Splunk Enterprise versions in the following table, an authenticated user can craft a dashboard that could potentially

Nextcloud files access control is a nextcloud app to manage access control for files. Users with limited access can see

Full list of recipients from customer users in a contact field could be disclosed in notification emails event when the

Nextcloud talk is a self hosting messaging service. In versions prior to 12.3.0 the Nextcloud Android Talk application d

Nextcloud Talk is a video and audio conferencing app for Nextcloud. In versions prior to 13.0.5 and 14.0.0, a call moder

A logic issue was addressed with improved state management. This issue is fixed in iOS 16, macOS Ventura 13, watchOS 9.

Exposure of Sensitive Information in GsmAlarmManager prior to SMR Jul-2022 Release 1 allows local attacker to access icc

Dell BIOS versions contain an Information Exposure vulnerability. A local authenticated administrator user could potenti

Nextcloud Android app is the Android client for Nextcloud, a self-hosted productivity platform. In versions prior to 3.1

An exposure of sensitive information to an unauthorized actor vulnerabiltiy [CWE-200] in FortiClient for Mac versions 7.

Exposure of Sensitive Information in CID Manager prior to SMR Jul-2022 Release 1 allows local attacker to access iccid v

Exposure of Sensitive Information in getDsaSimImsi in TelephonyUI prior to SMR Jul-2022 Release 1 allows local attacker

Exposure of Sensitive Information in putDsaSimImsi in TelephonyUI prior to SMR Jul-2022 Release 1 allows local attacker

Information Exposure vulnerability in Galaxy Watch Plugin prior to version 2.2.05.220126741 allows attackers to access u

Information Exposure vulnerability in Galaxy S3 Plugin prior to version 2.2.03.22012751 allows attacker to access passwo

Information Exposure vulnerability in Galaxy Watch Plugin prior to version 2.2.05.22012751 allows attacker to access pas

Information Exposure vulnerability in Watch Active Plugin prior to version 2.2.07.22012751 allows attacker to access pas

Information Exposure vulnerability in Watch Active2 Plugin prior to version 2.2.08.22012751 allows attacker to access pa

Information Exposure vulnerability in Galaxy Watch3 Plugin prior to version 2.2.09.22012751 allows attacker to access pa

Metabase is an open source data analytics platform. In affected versions a security issue has been discovered with the c

A critical unauthenticated remote code execution vulnerability was found all recent versions of Apache Tapestry. The aff

The sensitive information of webcam device is not properly protected. Remote attackers can unauthentically grant adminis

Dell OpenManage Enterprise versions prior to 3.6.1 contain an improper authentication vulnerability. A remote unauthenti

ECOA BAS controller is vulnerable to configuration disclosure when direct object reference is made to the specific files

Dell OpenManage Enterprise versions 3.4 through 3.6.1 and Dell OpenManage Enterprise Modular versions 1.20.00 through 1.

Certain NETGEAR devices are affected by disclosure of sensitive information. This affects RBK352 before 4.4.0.10, RBR350

NETGEAR XR1000 devices before 1.0.0.58 are affected by disclosure of sensitive information.

ManageWiki is an extension to the MediaWiki project. The 'wikiconfig' API leaked the value of private configuration vari

A SQL-Injection vulnerability in the nTracker USB Enterprise(secure USB management solution) allows a remote unauthentic

best it Amazon Pay Plugin before 9.4.2 for Shopware exposes Sensitive Information to an Unauthorized Actor.

Shopware is an open source eCommerce platform. Versions prior to 6.3.5.1 may leak of information via Store-API. The vuln

Certain NETGEAR devices are affected by disclosure of sensitive information. This affects R7000 before 1.0.11.110, R7900

The AJAX action, wp_ajax_ninja_forms_sendwp_remote_install_handler, did not have a capability check on it, nor did it ha