CWE-200
High likelihoodExposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
10,153 vulnerabilities with CWE-200
CVE-2019-1283
MEDIUM
Windows 7 and Windows Server 2008 - Information Disclosure in Graphics Components
CVSS 5.5
CVE-2019-1263
MEDIUM
Microsoft Excel - Information Disclosure via Memory Exposure
CVSS 5.5
CVE-2019-1252
MEDIUM
Windows GDI - Information Disclosure via Memory Handling
CVSS 6.5
CVE-2019-1251
MEDIUM
Windows 10 and Windows Server 2016/2019 - Information Disclosure in DirectWrite
CVSS 5.5
CVE-2019-1245
MEDIUM
Windows DirectWrite - Information Disclosure via Memory Exposure
CVSS 6.5
CVE-2019-1244
MEDIUM
Windows 10 - Information Disclosure via DirectWrite Memory Handling
CVSS 6.5
CVE-2019-1219
MEDIUM
Windows Transaction Manager - Information Disclosure via Improper Memory Handling
CVSS 5.5
CVE-2019-1216
MEDIUM
Windows 10, 7, 8.1, RT 8.1, Server 2008, 2012, 2016 - Information Disclosure in DirectX Memory Handling
CVSS 5.5
CVE-2019-1209
MEDIUM
Lync 2013 - Exposure of Sensitive Information
CVSS 6.5
CVE-2019-0352
HIGH
SAP BusinessObjects Business Intelligence Platform - Exposure of Sensitive Information via Cached Dynamic Pages
CVSS 7.5
CVE-2019-16177
HIGH
Limesurvey <3.17.14 - Info Disclosure
CVSS 7.5
CVE-2019-11605
HIGH
GitLab <11.8.10-11.10.3 - Info Disclosure
CVSS 7.5
CVE-2019-11545
MEDIUM
GitLab CE <11.9.10, <11.10.2 - Info Disclosure
CVSS 4.3
CVE-2019-5463
MEDIUM
GitLab 11.11.0-11.11.6 - Missing Authorization in CI Badge Images Endpoint
CVSS 5.3
CVE-2019-10667
MEDIUM
LibreNMS < 1.50.1 - Information Disclosure via Version Fingerprinting
CVSS 5.3
CVE-2019-9444
MEDIUM
Android Kernel - Kernel Pointer Leak in Sync Debug FS Driver
CVSS 4.4
CVE-2019-2103
MEDIUM
Android 9 - Unauthorized Screenshot Capture via Google Assistant
CVSS 5.5
CVE-2019-1976
CRITICAL
Cisco Industrial Network Director < 1.6.0 - Unauthenticated Sensitive Information Exposure via Plug-and-Play Services
CVSS 9.8
CVE-2019-15902
MEDIUM
Linux Kernel 4.4-5.2 Spectre-v1 Exposure via Incorrect ptrace Backport
CVSS 5.6
CVE-2019-11658
MEDIUM
Micro Focus Content Manager <9.4 - Info Disclosure
CVSS 4.3
CVE-2019-11064
CRITICAL
androvideo vd_1_firmware < 230 - Unauthenticated Remote Credential Disclosure via ExportSettings.cgi
CVSS 9.8
CVE-2019-13421
MEDIUM
search-guard < 23.1 - Authenticated Insufficiently Protected Credentials
CVSS 4.9
CVE-2019-6177
CRITICAL
Lenovo Solution Center 03.12.003 - Exposure of Sensitive Information via Log File Misplacement
CVSS 9.8
CVE-2019-1908
HIGH
Cisco IMC Supervisor 2.0(13o) - Unauthenticated Sensitive Info Exposure via IPMI
CVSS 7.5
CVE-2019-15045
MEDIUM
Zoho ManageEngine ServiceDesk Plus 10-10509 - User Enumeration via AjaxDomainServlet
CVSS 5.3
Details
Vulnerabilities
10,153
Exploit Likelihood
High