CWE-200

High likelihood

Exposure of Sensitive Information to an Unauthorized Actor

Parent: CWE-668 - Exposure of Resource to Wrong Sphere

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

10,209 vulnerabilities with CWE-200
CVE-2010-3851
libguestfs < 1.5.23 - Exposure of Sensitive Information via Raw Disk Image Header
CVE-2010-4046
Opera < 10.63 - Unauthorized Sensitive Information Exposure via HTML5 Canvas Video Stream
CVE-2010-3982
SAP BusinessObjects Enterprise XI 3.2 - Exposure of Sensitive Information via CrystalReports apstoken Parameter
CVE-2010-3979
SAP BusinessObjects Enterprise XI 3.2 - Unauthenticated Username Enumeration via Login SOAPAction Error Messages
CVE-2010-3902
OpenConnect < 2.26 - Exposure of Sensitive Information via Debugging Output
CVE-2010-3192
glibc < 2.26 - Exposure of Sensitive Information via __fortify_fail and __stack_chk_fail
CVE-2010-3330 MEDIUM
Microsoft Internet Explorer <9 - Info Disclosure
CVSS 6.5
CVE-2010-3327
Microsoft Internet Explorer <9 - Info Disclosure
CVE-2010-3325
Microsoft Internet Explorer 6-8 - Info Disclosure
CVE-2010-0808
Microsoft Internet Explorer <7 - Info Disclosure
CVE-2010-3886
Internet Explorer - Exposure of Sensitive Information via Timer ID Heap Address Leak
CVE-2010-3298
Linux kernel <2.6.36-rc5 - Info Disclosure
CVE-2010-3296
Linux kernel <2.6.36-rc5 - Info Disclosure
CVE-2010-2943 HIGH
Linux kernel <2.6.35 - Info Disclosure
CVSS 8.1
CVE-2010-2538 MEDIUM
Linux Kernel < 2.6.35 - Local Information Disclosure via BTRFS_IOC_CLONE_RANGE Integer Overflow
CVSS 5.5
CVE-2010-3284
HP System Management Homepage <6.2 - Info Disclosure
CVE-2010-3280
Alcatel-Lucent OmniTouch Contact Center <9.0.8.4 - Info Disclosure
CVE-2010-3078 MEDIUM
Linux <2.6.36-rc4 - Info Disclosure
CVSS 5.5
CVE-2010-3417
Google Chrome <6.0.472.59 - Info Disclosure
CVE-2010-3018
RSA Access Manager Server <5.5.3.172-6.1.2.01 - Info Disclosure
CVE-2010-2803
Linux Kernel < 2.6.27.53 - Information Exposure via DRM IOCTL Memory Allocation
CVE-2010-3259
WebKit - Info Disclosure
CVE-2010-3245
Blackboard Transact Suite - Info Disclosure
CVE-2010-3244
Blackboard Transact Suite <3.6.0.2 - Info Disclosure
CVE-2010-2226
Linux Kernel < 2.6.35 - Unauthorized File Read Access via xfs_swapext Ioctl
Details
Vulnerabilities 10,209
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits