CWE-200

Frog CMS 0.9.5 provides a directory listing for a /public request.

A vulnerability in the TFTP service of Cisco Network Convergence System 1000 Series software could allow an unauthentica

An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. There is an information disclosure vulnerability via reque

sslheaders plugin extracts information from the client certificate and sets headers in the request based on the configur

Topvision CC8800 CMTS C-E devices allow remote attackers to obtain sensitive information via a direct request for /WebCo

The WP-jobhunt plugin before version 2.4 for WordPress does not control AJAX requests sent to the cs_employer_ajax_profi

Wireless keys are stored in plain text on Hospira Plum A+ Infusion System version 13.4 and prior, Plum A+3 Infusion Syst

Wireless keys are stored in plain text on version 5 of the Hospira LifeCare PCA Infusion System. According to Hospira, v

HoneyPress through 2016-09-27 can be fingerprinted by attackers because of the ingrained unique www.atxsec.com and ayylm

An information disclosure vulnerability exists in the ACEManager authentication functionality of Sierra Wireless AirLink

An issue was discovered in the Ascensia Contour NEXT ONE app for iOS before 2019-01-15. An attacker may proxy communicat

An issue was discovered in the Ascensia Contour NEXT ONE application for Android before 2019-01-15. An attacker may reve

The WP Backup+ (aka WPbackupplus) plugin through 2018-11-22 for WordPress allows remote attackers to obtain sensitive in

The ServiceNow driver in NetIQ Identity Manager versions prior to 4.6 are susceptible to an information disclosure vulne

OX Software GmbH App Suite 7.8.4 and earlier is affected by: Information Exposure.

If a process running within Aruba Instant crashes, it may leave behind a "core dump", which contains the memory contents

Unvalidated URL in Download Manager in Seagate NAS OS version 4.3.15.1 allows attackers to access the loopback interface

DoBox_CstmBox_Info.model.htm on Kyocera TASKalfa 4002i and 6002i devices allows remote attackers to read the documents o

A vulnerability has been identified in SINAMICS PERFECT HARMONY GH180 with NXG I control, MLFBs: 6SR2...-, 6SR3...-, 6SR

A CWE-200: Information Exposure vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum,

A CWE-200: Information Exposure vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum,

EXCELLENT INFOTEK BiYan v1.57 ~ v2.8 allows an attacker to leak user information without being authenticated, by sending

An information leakage exists in Micro Focus NetIQ Self Service Password Reset Software all versions prior to version 4.

The MakerBot Replicator 5G printer runs an Apache HTTP Server with directory indexing enabled. Apache logs, system logs,

An information exposure issue where IPv6 DNS traffic would be sent outside of the VPN tunnel (when Traffic Enforcement w

Invoxia NVX220 devices allow access to /bin/sh via escape from a restricted CLI, leading to disclosure of password hashe

IBM Jazz for Service Management 1.1.3 and 1.1.3.2 stores sensitive information in URL parameters. This may lead to infor

Univention Corporate Server univention-directory-notifier 12.0.1-3 and earlier is affected by: CWE-213: Intentional Info

Clients hostname gets added to DNS record on device which is running dnsmasq resulting in an information exposure in Sna

The Apache Storm Logviewer daemon exposes HTTP-accessible endpoints to read/search log files on hosts running Storm. In

cPanel before 60.0.25 does not use TLS for HTTP POSTs to listinput.cpanel.net (SEC-192).

Search Guard versions before 23.1 had an issue that for aggregations clear text values of anonymised fields were leaked.

An information disclosure vulnerability exists when the Windows RDP server improperly discloses the contents of its memo

An information disclosure vulnerability exists when the Windows RDP server improperly discloses the contents of its memo

ClickHouse MySQL client before versions 1.1.54390 had "LOAD DATA LOCAL INFILE" functionality enabled that allowed a mali

A vulnerability in the Intelligent Platform Management Interface (IPMI) implementation of Cisco Integrated Management Co

The charitable plugin before 1.5.14 for WordPress has unauthorized access to user and donation details.

An issue was discovered in GitLab Community and Enterprise Edition 11.8.x before 11.8.10, 11.9.x before 11.9.11, and 11.

In Limesurvey before 3.17.14, the entire database is exposed through browser caching.

In SAP Business Objects Business Intelligence Platform, before versions 4.1, 4.2 and 4.3, some dynamic pages (like jsp)

An issue was discovered in PRiSE adAS 1.7.0. The current database password is embedded in the change password form.

Home Assistant before 0.67.0 was vulnerable to an information disclosure that allowed an unauthenticated attacker to rea

A vulnerability in the Dialer interface feature for ISDN connections in Cisco IOS XE Software for Cisco 4000 Series Inte

In the Screen Lock, there is a possible information disclosure due to an unusual root cause. In certain circumstances, t

The ThemeMakers Diplomat | Political theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive

The ThemeMakers Car Dealer / Auto Dealer Responsive theme through 2015-05-15 for WordPress allows remote attackers to ob

The ThemeMakers Invento Responsive Gallery/Architecture Template component through 2015-05-15 for WordPress allows remot

The ThemeMakers Accio One Page Parallax Responsive theme through 2015-05-15 for WordPress allows remote attackers to obt

The ThemeMakers Accio Responsive Parallax One Page Site Template component through 2015-05-15 for WordPress allows remot

The ThemeMakers Axioma Premium Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensi