CWE-200
High likelihoodExposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
10,153 vulnerabilities with CWE-200
CVE-2019-1013
MEDIUM
Windows 7 and Windows Server 2008 - Information Disclosure in GDI Component
CVSS 4.7
CVE-2019-1012
MEDIUM
Windows GDI - Information Disclosure via Memory Handling
CVSS 4.7
CVE-2019-1011
MEDIUM
Windows 7 and Windows Server 2008 - Information Disclosure in GDI Component
CVSS 4.7
CVE-2019-1010
MEDIUM
Windows GDI - Information Disclosure via Memory Handling
CVSS 4.7
CVE-2019-1009
MEDIUM
Windows 7 and Windows Server 2008 - Information Disclosure in GDI Component
CVSS 4.7
CVE-2019-0990
MEDIUM
ChakraCore < 1.11.10 - Remote Code Execution via Memory Corruption
CVSS 6.5
CVE-2019-0977
MEDIUM
Windows 7 and Windows Server 2008 - Information Disclosure in GDI Component
CVSS 4.7
CVE-2019-3579
MEDIUM
MyBB 1.8.19 - Exposure of Sensitive Information via Password Reset Request
CVSS 5.3
CVE-2019-9753
LOW
Open Ticket Request System 7.x < 7.0.5 - Info Disclosure
CVSS 3.5
CVE-2019-9866
MEDIUM
GitLab <11.7.7, <11.8.3 - Info Disclosure
CVSS 6.5
CVE-2019-7353
CRITICAL
GitLab CE/EE <11.7.4 - Info Disclosure
CVSS 9.1
CVE-2019-10109
MEDIUM
GitLab <11.7.8, <11.8.x <11.8.4, <11.9.x <11.9.2 - Info Disclosure
CVSS 5.3
CVE-2019-1731
MEDIUM
Cisco NX-OS < 7.0(3)I4(9) - Authenticated Private SSH Key Exposure via CLI Key Management
CVSS 4.4
CVE-2019-6574
HIGH
SINAMICS PERFECT HARMONY GH180 NXG I/II - Unauthenticated DoS via Parameter Read/Write
CVSS 7.5
CVE-2019-6572
CRITICAL
SIMATIC HMI Panels & WinCC < 15.1 - Unauthenticated Sensitive Information Exposure via SNMP
CVSS 9.1
CVE-2019-5437
MEDIUM
harpjs/harp <= 0.29.0 - Information Exposure Through Directory Listing
CVSS 5.3
CVE-2019-3797
LOW
Spring Data JPA <= 2.1.5, 2.0.13, 1.11.19 - Exposure of Sensitive Information via Derived Query Predicates
CVSS 3.5
CVE-2019-1692
MEDIUM
Cisco Application Policy Infrastructure Controller - Unauthenticated Sensitive Information Exposure via Web Interface
CVSS 5.3
CVE-2019-1589
MEDIUM
Cisco NX-OS - Unauthenticated Exposure of Sensitive Information via TPM Disk Encryption Keys
CVSS 4.6
CVE-2019-11633
HIGH
HoneyPress <2016-09-27 - Info Disclosure
CVSS 7.5
CVE-2019-3868
LOW
Keycloak < 6.0.0 - Session Hijacking via JWT Token
CVSS 3.8
CVE-2019-10247
MEDIUM
Eclipse Jetty <=9.4.16 - Sensitive Information Exposure via 404 Error Handler
CVSS 5.3
CVE-2019-10246
MEDIUM
Eclipse Jetty 9.2.27, 9.3.26, 9.4.16 - Exposure of Sensitive Information via Directory Listing
CVSS 5.3
CVE-2019-11403
CRITICAL
Gradle Enterprise <2018.5.2 - Info Disclosure
CVSS 9.8
CVE-2019-9225
MEDIUM
GitLab < 11.6.10, 11.7.x < 11.7.6, 11.8.x < 11.8.1 - Exposure of Sensitive Information via Incorrect Access Control
CVSS 5.3
Details
Vulnerabilities
10,153
Exploit Likelihood
High