CWE-200
High likelihoodExposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
10,153 vulnerabilities with CWE-200
CVE-2019-9179
LOW
GitLab < 11.6.10, 11.7.x < 11.7.6, 11.8.x < 11.8.1 - Information Exposure
CVSS 3.7
CVE-2019-9175
MEDIUM
GitLab < 11.6.10, 11.7.x < 11.7.6, 11.8.x < 11.8.1 - Information Exposure
CVSS 5.3
CVE-2019-0040
CRITICAL
Junos OS 15.1-17.4 - Information Disclosure and Partial Denial of Service via rpcbind Port 111
CVSS 9.1
CVE-2019-10243
MEDIUM
Eclipse Kura < 4.0.0 - Sensitive Information Exposure via Web Server Version Disclosure
CVSS 5.3
CVE-2019-4051
MEDIUM
IBM API Connect 2018.1-2018.4.1.3 - Exposure of Sensitive System Information via URIs
CVSS 5.3
CVE-2019-3869
HIGH
Ansible Tower < 3.3.5 - Sensitive Information Exposure via Environment Variables
CVSS 7.2
CVE-2019-1762
MEDIUM
Cisco IOS and IOS XE - Exposure of Sensitive System Information via Secure Storage Feature
CVSS 4.4
CVE-2019-7436
MEDIUM
PHP Scripts Mall Opensource Classified Ads Script <3.2.2 - Path Tra...
CVSS 6.5
CVE-2019-7434
MEDIUM
PHP Scripts Mall Rental Bike Script <2.0.3 - Path Traversal
CVSS 6.5
CVE-2019-7431
MEDIUM
PHP Scripts Mall Image Sharing Script <1.3.4 - Path Traversal
CVSS 6.5
CVE-2019-7429
MEDIUM
PHP Scripts Mall Property Rental Software 2.1.4 - Path Traversal
CVSS 6.5
CVE-2019-3615
MEDIUM
McAfee Database Security < 4.6.6 - Password Exposure via Admin Login Autocomplete
CVSS 5.3
CVE-2019-3781
HIGH
Cloud Foundry CLI <6.43.0 - Info Disclosure
CVSS 8.8
CVE-2019-6206
CRITICAL
iPhone OS < 12.1.3 - Password Autofill Information Exposure
CVSS 9.8
CVE-2019-4061
MEDIUM
IBM BigFix Platform 9.2-9.5 < 9.2.16 - Unauthenticated Information Exposure via Relay Query
CVSS 5.3
CVE-2019-9126
HIGH
D-Link DIR-825 Rev.B 2.10 - Unauthenticated Exposure of Sensitive Information via router_info.xml
CVSS 7.5
CVE-2019-1681
HIGH
Cisco IOS XR < 6.5.2 - Unauthenticated Path Traversal via TFTP Service
CVSS 7.5
CVE-2019-3610
MEDIUM
McAfee True Key < 3.1.9211.0 - Unauthorized Data Exposure via Malware
CVSS 5.6
CVE-2019-7628
MEDIUM
Pagure - Exposure of Sensitive Information via API Key Expiration Reminder E-Mail
CVSS 5.9
CVE-2019-7535
MEDIUM
Gurock TestRail <5.3.0.3603 - Info Disclosure
CVSS 5.3
CVE-2019-1003021
MEDIUM
Jenkins OpenId Connect Authentication Plugin <1.4 - Info Disclosure
CVSS 4.3
CVE-2019-1003018
MEDIUM
Jenkins GitHub Auth Plug <0.29 - Info Disclosure
CVSS 4.3
CVE-2019-7388
HIGH
D-Link DIR-823G <1.02B03 - Info Disclosure
CVSS 7.5
CVE-2019-7312
MEDIUM
PRIMX Zed Entreprise <6.1.2240 - Info Disclosure
CVSS 5.3
CVE-2019-1657
MEDIUM
Cisco AMP Threat Grid Appliance < 2.5 and Cloud < 3.5.68 - Authenticated Sensitive Information Exposure via API Key
CVSS 4.3
Details
Vulnerabilities
10,153
Exploit Likelihood
High