CWE-200
High likelihoodExposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
10,152 vulnerabilities with CWE-200
CVE-2020-25192
MEDIUM
MOXA NPort IAW5000A-I/O Firmware < 2.1 - Unauthenticated Exposure of Sensitive Information
CVSS 5.3
CVE-2020-12518
MEDIUM
Phoenix Contact PLCnext Control Devices <2021.0 LTS - Info Disclosure
CVSS 5.5
CVE-2020-4908
MEDIUM
IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4 - Information Exposure via Login Dialog
CVSS 5.3
CVE-2020-0488
MEDIUM
Android 11 - Information Disclosure via Uninitialized Data in ihevc_inter_pred_chroma_copy_ssse3
CVSS 6.5
CVE-2020-8284
LOW
curl < 7.73.0 - Exposure of Sensitive Information via FTP PASV Response
CVSS 3.7
CVE-2020-8169
HIGH
curl 7.62.0-7.70.0 - Information Disclosure via Password Leak
CVSS 7.5
CVE-2020-25179
CRITICAL
Gehealthcare 3.0t Signa Hdxt Firmware - Information Disclosure
CVSS 9.8
CVE-2020-27134
CRITICAL
Cisco Jabber - Information Disclosure via Sensitive Data Insertion
CVSS 9.9
CVE-2020-26417
MEDIUM
GitLab CE/EE 13.1-<13.4.7, 13.5-<13.5.5, 13.6-<13.6.2 - Info Disclo...
CVSS 5.3
CVE-2020-26415
MEDIUM
GitLab <13.4.7,<13.5.5,<13.6.2 - Info Disclosure
CVSS 4.3
CVE-2020-26413
MEDIUM
GitLab CE/EE <13.6.2 - Info Disclosure
CVSS 5.3
CVE-2020-9849
MEDIUM
iCloud < 11.5 - Exposure of Sensitive Information via Improved State Management
CVSS 6.5
CVE-2020-17527
HIGH
Apache Tomcat <10.0.0-M9, 9.0.39, 8.5.59 - Info Disclosure
CVSS 7.5
CVE-2020-5676
HIGH
GROWI < 4.1.3 - Unauthorized Information Exposure
CVSS 7.5
CVE-2020-29043
HIGH
BigBlueButton < 2.2.29 - Unauthenticated Email Validation Bypass
CVSS 7.5
CVE-2020-28333
CRITICAL
Barco wePresent WiPG-1600W Firmware 2.5.1.8 - Authentication Bypass via SEID Token Exposure
CVSS 9.8
CVE-2020-7568
MEDIUM
Modicon M221 Firmware - Exposure of Sensitive Information via Traffic Capture
CVSS 4.3
CVE-2020-12496
MEDIUM
Endress+Hauser Ecograph T/M <V2.0.0 - Info Disclosure
CVSS 6.5
CVE-2020-25703
MEDIUM
Moodle 3.7.0-3.7.8, 3.8.0-3.8.5, 3.9.0-3.9.2 - Information Disclosure in Participants Table Download
CVSS 5.3
CVE-2020-26076
HIGH
Cisco IoT Field Network Director < 4.6.1 - Sensitive Database Information Exposure
CVSS 7.5
CVE-2020-25746
MEDIUM
QED ResourceXpress Qubi3 Firmware < 1.40.9 - Sensitive Information Exposure via Debug Interface
CVSS 4.6
CVE-2020-26230
HIGH
Radar COVID < 1.0.7 (Android), < 1.0.8 (iOS), < 1.1.0 (Android/iOS), Backend < 1.1.2 - User De-Anonymization
CVSS 7.4
CVE-2020-2022
HIGH
Palo Alto Networks PAN-OS 8.1 < 8.1.17 - Privilege Escalation via Context Switch Token Exposure
CVSS 7.5
CVE-2020-26220
LOW
touchbase.ai < 2.0 - Unauthorized Sensitive Information Exposure via EXIF Data Leak
CVSS 3.5
CVE-2020-27403
MEDIUM
TCL Android Smart TV - Info Disclosure
CVSS 6.5
Details
Vulnerabilities
10,152
Exploit Likelihood
High