CWE-200
High likelihoodExposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
10,152 vulnerabilities with CWE-200
CVE-2020-7030
MEDIUM
Avaya IP Office 9.x, 10.0-10.1.0.7, 11.0-11.0.4.3 - Insufficiently Protected Credentials
CVSS 5.5
CVE-2020-13597
MEDIUM
Calico < 2.6.2, < 3.8.8, 3.14.0 - Information Disclosure via IPv6 Route Advertisement
CVSS 6.0
CVE-2020-13764
HIGH
Rocketgenius Gravityforms < 2.4.9 - Information Disclosure
CVSS 7.5
CVE-2020-5573
MEDIUM
Kintone Mobile <2.5 - Info Disclosure
CVSS 4.6
CVE-2020-5572
MEDIUM
Mailwise for Android <1.0.1 - Info Disclosure
CVSS 4.6
CVE-2020-11059
CRITICAL
AEgir >=21.7.0-<21.10.1 - Info Disclosure
CVSS 9.6
CVE-2020-10945
MEDIUM
Centreon <19.10.7 - Info Disclosure
CVSS 4.3
CVE-2020-4226
HIGH
IBM MobileFirst Platform Foundation 8.0.0.0 - Exposure of Sensitive Information via URL Parameters
CVSS 7.5
CVE-2020-6830
HIGH
Firefox for iOS < 25.0 - Exposure of Sensitive Information via Bridging Token Leak
CVSS 7.5
CVE-2020-6489
MEDIUM
Google Chrome < 83.0.4103.61 - Exposure of Sensitive Information via Developer Tools
CVSS 4.3
CVE-2020-5364
MEDIUM
Dell EMC Isilon OneFS <= 8.2.2 - Sensitive Information Exposure via SNMPv2 Default Community String
CVSS 5.3
CVE-2020-13129
HIGH
stashcat < 3.9.1 - Exposure of Sensitive Information via Query String Logging
CVSS 7.2
CVE-2020-0092
MEDIUM
Android 10 - Unauthorized Sensitive Information Exposure via NotificationStackScrollLayout
CVSS 5.0
CVE-2020-12772
HIGH
Ignite Realtime Spark 2.8.3 - Info Disclosure
CVSS 8.8
CVE-2020-1746
MEDIUM
Ansible Engine <2.7.17, 2.8.x <2.8.11, 2.9.x <2.9.7 - Info Disclosure
CVSS 5.0
CVE-2020-8151
HIGH
Active Resource <v5.1.1 - Info Disclosure
CVSS 7.5
CVE-2020-1698
MEDIUM
Keycloak < 9.0.0 - Password Exposure via HttpMethod Exception Logging
CVSS 5.0
CVE-2020-3259
HIGH
KEV
Cisco ASA & FTD Unauthenticated Memory Disclosure via Web Interface
CVSS 7.5
CVE-2020-11033
MEDIUM
GLPI 9.1-9.4.5 - Authenticated Exposure of Sensitive Information via API User Endpoint
CVSS 6.6
CVE-2020-5331
HIGH
RSA Archer < 6.7.0.3 - Authenticated Exposure of Sensitive Information in Log Files
CVSS 8.8
CVE-2020-10618
MEDIUM
LCDS LAquis SCADA <4.3.1 - Info Disclosure
CVSS 5.5
CVE-2020-6865
MEDIUM
ZTE OSCP V16.19.10 and V16.19.20 - Exposure of Sensitive Information via Error Response
CVSS 6.5
CVE-2020-5890
MEDIUM
BIG-IP 12.1.0-15.0.1 & BIG-IQ 5.2.0-7.1.0 - LDAP Credential Exposure via QKView Obfuscation Bypass
CVSS 5.5
CVE-2020-9387
MEDIUM
Mahara 19.04-19.04.5 and 19.10-19.10.3 - Unauthorized Exposure of Sensitive Account Information via Elasticsearch
CVSS 4.3
CVE-2020-11024
MEDIUM
Moonlight iOS/tvOS < 4.0.1 - Man-in-the-Middle Attack via Pairing Process
CVSS 6.1
Details
Vulnerabilities
10,152
Exploit Likelihood
High