CWE-200
High likelihoodExposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
10,153 vulnerabilities with CWE-200
CVE-2019-13313
HIGH
libosinfo 1.5.0 - Local Credential Exposure via Command-Line Argument
CVSS 7.8
CVE-2019-5601
MEDIUM
FreeBSD FFS Directory Entry Padding Uninitialized Kernel Stack Memory Exposure
CVSS 6.5
CVE-2019-10183
LOW
Virt-install <v2.2.0 - Info Disclosure
CVSS 3.2
CVE-2019-7259
HIGH
Linear eMerge E3-Series - Info Disclosure
CVSS 8.8
CVE-2019-4140
HIGH
IBM Spectrum Protect 7.1.0.0-7.1.9.299 - Unauthorized Database Replacement via Restore Function
CVSS 7.1
CVE-2019-13075
MEDIUM
Tor Browser < 8.5.3 - Language Detection via IFRAME LINK Title Attribute
CVSS 5.3
CVE-2019-13055
MEDIUM
Logitech Unifying Receiver Firmware - Exposure of Sensitive Information via AES Key Dump
CVSS 6.5
CVE-2019-10175
MEDIUM
virt-cdi-cloner 1.4 - Privilege Escalation
CVSS 6.5
CVE-2019-11648
HIGH
Micro Focus NetIQ Self Service Password Reset <4.4 - Info Disclosure
CVSS 7.5
CVE-2019-11233
HIGH
BiYan 1.57-2.8 - Unauthenticated Exposure of Sensitive Information via Login Info Endpoint
CVSS 7.5
CVE-2019-5017
MEDIUM
NETGEAR Nighthawk - Info Disclosure
CVSS 5.3
CVE-2019-5016
CRITICAL
NETGEAR R8000 and R7900 Firmware - Unauthenticated Arbitrary Memory Read via ReadySHARE Printer NetUSB Module
CVSS 9.1
CVE-2019-11407
HIGH
FusionPBX 4.4.3 - Authenticated Sensitive Information Exposure via Operator Panel Debug Information
CVSS 7.2
CVE-2019-12497
MEDIUM
OTRS 5.0.0-5.0.35 - Exposure of Sensitive Agent Information in External Notes
CVSS 5.3
CVE-2019-4173
MEDIUM
IBM Cognos Controller 10.2.0, 10.2.1, 10.3.0, 10.3.1, 10.4.0 - Exposure of Sensitive Information via HTTP OPTIONS Method
CVSS 6.5
CVE-2019-1081
MEDIUM
Microsoft Edge - Information Disclosure via Memory Object Handling
CVSS 4.2
CVE-2019-1050
MEDIUM
Windows GDI - Information Disclosure via Memory Handling
CVSS 4.7
CVE-2019-1049
MEDIUM
Windows 7 and Windows Server 2008 - Information Disclosure in GDI Component
CVSS 4.7
CVE-2019-1048
MEDIUM
Windows 7 and Windows Server 2008 - Information Disclosure in GDI Component
CVSS 4.7
CVE-2019-1047
MEDIUM
Windows 7 and Windows Server 2008 - Information Disclosure in GDI Component
CVSS 4.7
CVE-2019-1046
MEDIUM
Windows GDI - Information Disclosure via Memory Handling
CVSS 4.7
CVE-2019-1023
MEDIUM
ChakraCore < 1.11.10 - Information Disclosure via Memory Object Handling
CVSS 6.5
CVE-2019-1019
HIGH
Windows - Security Feature Bypass via NETLOGON Message Session Key Exposure
CVSS 8.5
CVE-2019-1016
MEDIUM
Windows 7 and Windows Server 2008 - Information Disclosure in GDI Component
CVSS 4.7
CVE-2019-1015
MEDIUM
Windows 7 and Windows Server 2008/2012 - Information Disclosure in GDI Component
CVSS 4.7
Details
Vulnerabilities
10,153
Exploit Likelihood
High