CWE-200
High likelihoodExposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
10,152 vulnerabilities with CWE-200
CVE-2020-7944
HIGH
Puppet Enterprise <3.4.0 - Info Disclosure
CVSS 7.7
CVE-2020-6812
MEDIUM
Firefox < 74.0 and Firefox ESR < 68.6.0 - Exposure of Sensitive Information via AirPods Device Name Enumeration
CVSS 5.3
CVE-2020-3800
HIGH
Adobe Acrobat and Reader <2020.006.20034 - Info Disclosure
CVSS 7.5
CVE-2020-6993
HIGH
Moxa PT-7528 and PT-7828 Series Firmware < 4.0 - Unauthenticated Exposure of Sensitive Information
CVSS 7.5
CVE-2020-4309
MEDIUM
IBM Content Navigator 3.0CD - Unauthenticated Exposure of Sensitive Information
CVSS 5.3
CVE-2020-10871
MEDIUM
OpenWrt LuCI git-20.x - Info Disclosure
CVSS 5.3
CVE-2020-1740
LOW
Ansible < 2.7.17 - Insecure Temporary File Handling in Vault Edit
CVSS 3.9
CVE-2020-1753
MEDIUM
Ansible Engine <2.7.17, <2.8.11, <2.9.7 - Info Disclosure
CVSS 5.0
CVE-2020-10090
MEDIUM
GitLab 11.7-12.8.1 - Unauthorized Information Disclosure in Group Epic Data
CVSS 5.3
CVE-2020-10195
MEDIUM
popup-builder < 3.64.1 - Authenticated Information Disclosure and Privilege Escalation via admin-post Actions
CVSS 6.3
CVE-2020-1739
LOW
Ansible <2.7.16, <2.8.8, <2.9.5 - Info Disclosure
CVSS 3.9
CVE-2020-6178
MEDIUM
SAP Enable Now <1911 - Info Disclosure
CVSS 5.4
CVE-2020-0062
HIGH
Android - Information Disclosure via Test Certificate in Euicc
CVSS 7.5
CVE-2020-0031
MEDIUM
Android 10 - Unauthorized Sensitive Information Exposure via Augmented Autofill
CVSS 5.0
CVE-2020-0029
LOW
Android 10 - Local Information Disclosure via WifiConfigManager Location History Storage
CVSS 2.3
CVE-2020-9386
MEDIUM
Mahara 18.10.0-18.10.5 - Exposure of Sensitive File Metadata to Unauthorized Group Members via Elasticsearch
CVSS 4.3
CVE-2020-9282
MEDIUM
Mahara 18.10.0-18.10.4, 19.04.0-19.04.3, 19.10.0-19.10.1 - Sensitive Information Exposure via Edit Access
CVSS 6.5
CVE-2020-10104
MEDIUM
Zammad 3.0-3.2 - Authenticated Exposure of Sensitive Information via URL
CVSS 4.3
CVE-2020-10096
HIGH
Zammad 3.0-3.2 - Unauthenticated Exposure of Sensitive Information via Browser Cache
CVSS 7.5
CVE-2020-7130
HIGH
HPE OneView Global Dashboard 1.9 - Exposure of Sensitive Information via Open Firewall Ports
CVSS 7.5
CVE-2020-3193
MEDIUM
Cisco Prime Collaboration Provisioning - Info Disclosure
CVSS 5.3
CVE-2020-3182
MEDIUM
Cisco Webex Meetings Client - Info Disclosure
CVSS 4.3
CVE-2020-9337
MEDIUM
GolfBuddy Course Manager 1.1 - Inadequate Encryption Strength via Base64-Encoded Password Transmission
CVSS 6.5
CVE-2020-5244
HIGH
BuddyPress < 5.1.2 - Unauthenticated Private User Data Exposure via REST API Endpoint
CVSS 8.0
CVE-2020-9043
HIGH
wpCentral < 1.5.1 - Unauthenticated Sensitive Information Exposure via Connection Key Disclosure
CVSS 8.8
Details
Vulnerabilities
10,152
Exploit Likelihood
High