CWE-200
High likelihoodExposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
10,152 vulnerabilities with CWE-200
CVE-2020-36723
MEDIUM
ListingPro - WordPress Directory & Listing Theme <2.6.1 - Info Disc...
CVSS 5.3
CVE-2020-4927
MEDIUM
IBM Spectrum Scale 5.0.5.0-5.1.6.1 - Unauthorized Data Access and Arbitrary Data Injection
CVSS 5.7
CVE-2020-36668
MEDIUM
JetBackup < 1.4.0 - Sensitive Information Exposure via backup_guard_get_manual_modal AJAX Action
CVSS 4.3
CVE-2020-9846
MEDIUM
macOS < 12.0.1 - Unauthorized Access to Local Users' Apple IDs
CVSS 5.3
CVE-2020-36660
MEDIUM
paxswill EVE Ship Replacement Program <0.12.11 - Info Disclosure
CVSS 4.3
CVE-2020-8975
HIGH
ZGR TPS200 NG Firmware 2.00 - Information Disclosure via Web Application Routes
CVSS 7.5
CVE-2020-4159
HIGH
IBM QRadar Network Security 5.4.0 and 5.5.0 - Exposure of Sensitive Information
CVSS 7.5
CVE-2020-35167
MEDIUM
Dell BSAFE <4.1.5-4.6 - Use After Free
CVSS 4.8
CVE-2020-36532
MEDIUM
Klapp App - Unauthenticated Exposure of Sensitive Information via Authorization Component
CVSS 4.3
CVE-2020-4957
MEDIUM
IBM Security Identity Governance and Intelligence 5.2.6 - Exposure of Sensitive Information in URL Parameters
CVSS 5.3
CVE-2020-14112
MEDIUM
Xiaomi Router AX6000 < 1.0.56 - Unauthorized Information Disclosure via Incorrect Routing Configuration
CVSS 5.3
CVE-2020-12966
MEDIUM
AMD EPYC Firmware < milanpi-sp3_1.0.0.5 - Authenticated Information Disclosure via SEV-ES/SEV-SNP
CVSS 5.5
CVE-2020-15933
MEDIUM
FortiMail <=6.0.9/6.2.4/6.4.1 Sensitive Version Info Exposure via Client-Side Inspection
CVSS 5.3
CVE-2020-27414
MEDIUM
Mahavitaran Android <7.50 - Info Disclosure
CVSS 5.9
CVE-2020-4951
LOW
IBM Cognos Analytics 11.1.7 and 11.2.0 - Exposure of Sensitive Information via Locally Cached Browser Data
CVSS 3.3
CVE-2020-7819
CRITICAL
nTracker USB Enterprise - SQL Injection
CVSS 9.3
CVE-2020-7387
MEDIUM
Sage X3 AdxAdmin < 93.2.53 - Installation Path Disclosure via AdxDSrv.exe Response
CVSS 5.3
CVE-2020-12987
MEDIUM
AMD Graphics Driver - Info Disclosure
CVSS 5.5
CVE-2020-14371
MEDIUM
Red Hat Satellite - Credential Leak via VM Exposure
CVSS 6.5
CVE-2020-14335
MEDIUM
Red Hat Satellite - Exposure of Sensitive Information via ISC DHCP Smart-Proxy OMAPI Secrets
CVSS 5.5
CVE-2020-14329
LOW
Ansible Tower < 3.7.2 - Unauthorized Sensitive Data Exposure via Labels API Endpoint
CVSS 3.3
CVE-2020-10698
LOW
Ansible Tower <3.6.4-3.4.6 - Info Disclosure
CVSS 3.3
CVE-2020-36319
LOW
Vaadin Flow 3.0.0-3.0.5 & Vaadin 15.0.0-15.0.4 Sensitive Information Exposure via Insecure ObjectMapper
CVSS 3.1
CVE-2020-7270
MEDIUM
McAfee Advanced Threat Defense < 4.12.2 - Authenticated Exposure of Sensitive Information via HTTP Request Parameter
CVSS 4.9
CVE-2020-7269
MEDIUM
McAfee Advanced Threat Defense < 4.12.2 - Authenticated Exposure of Sensitive Information via HTTP Request Parameter
CVSS 4.9
Details
Vulnerabilities
10,152
Exploit Likelihood
High