CWE-201

368 vulnerabilities with CWE-201

CVE-2023-3102 MEDIUM

GitLab EE <16.0.6-16.1.1 - Info Disclosure

CVSS 5.3

CVE-2023-34968 MEDIUM

Samba < 4.16.11 - Path Disclosure via Spotlight Protocol

CVSS 5.3

CVE-2023-3299 LOW

HashiCorp Nomad 1.2.11-1.5.6 and 1.4.10 - Sensitive Information Exposure in ACL Policy Block

CVSS 3.4

CVE-2023-2620 MEDIUM

GitLab CE/EE <15.11.10, <16.0.6, <16.1.1 - Info Disclosure

CVSS 5.5

CVE-2023-1825 LOW

GitLab EE <15.10.8/<15.11.7/<16.0.2 - Info Disclosure

CVSS 3.1

CVE-2023-1975 MEDIUM

GitHub answerdev/answer <1.0.8 - Info Disclosure

CVSS 6.5

CVE-2023-28117 HIGH

Sentry SDK < 1.14.0 - Sensitive Cookie Value Leak via Django Integration

CVSS 7.6

CVE-2022-45428 LOW

Dahua DSS Express and DSS Professional - Sensitive Information Leakage via Debugging Interface

CVSS 2.7

CVE-2022-23488 MEDIUM

BigBlueButton < 2.4-rc-6 - Unauthorized Webcam Stream Access via Lock Setting Bypass

CVSS 6.5

CVE-2022-28224 MEDIUM

Calico < 3.20.5, Calico Enterprise < 3.11.4, Calico 3.22.0-3.22.1 - Route Hijacking via Floating IP Annotation

CVSS 5.5

CVE-2022-27779 MEDIUM

curl 7.82.0-7.83.0 - Cookie Injection for Top-Level Domains via Trailing Dot Bypass

CVSS 5.3

CVE-2022-27671 MEDIUM

SAP BusinessObjects Business Intelligence Platform - Information Disclosure via CSRF Token in URL

CVSS 6.5

CVE-2022-0018 MEDIUM

GlobalProtect 5.1-5.1.9 and 5.2-5.2.8 - Unauthenticated Credential Exposure via Single Sign-On Feature

CVSS 6.1

CVE-2021-1425 MEDIUM

Cisco AsyncOS Software - Info Disclosure

CVSS 4.3

CVE-2021-34771 MEDIUM

Cisco IOS XR < 7.3.2 - Authenticated Information Disclosure via CLI Command

CVSS 5.5

CVE-2021-32653 LOW

Nextcloud Server <19.0.11, 20.0.10, 21.0.2 - Info Disclosure

CVSS 2.7

CVE-2021-23019 HIGH

NGINX Controller <3.15.0 - Info Disclosure

CVSS 7.8

CVE-2021-26566 HIGH

Synology DiskStation Manager < 6.2.3-25426-3 - Remote Code Execution via QuickConnect Traffic

CVSS 8.3

CVE-2021-1128 MEDIUM

Cisco IOS XR - Authenticated Information Disclosure via CLI Command

CVSS 5.5

CVE-2021-1129 MEDIUM

Cisco ESA/SMA/WSA - Info Disclosure

CVSS 5.3

CVE-2020-37150 HIGH

Edimax EW-7438RPn-v3 Mini 1.27 - Info Disclosure

CVSS 7.5

CVE-2020-37093 HIGH

Netis E1+ 1.2.32533 - Info Disclosure

CVSS 7.5

CVE-2020-8975 HIGH

ZGR TPS200 NG Firmware 2.00 - Information Disclosure via Web Application Routes

CVSS 7.5

CVE-2020-27784 MEDIUM

Linux Kernel 4.1-4.4.241 - Use-After-Free in printer_ioctl()

CVSS 5.5

CVE-2020-27748 MEDIUM

xdg-utils >=1.1.0-rc1 - Sensitive Information Disclosure via xdg-email mailto URI Attachment Injection

CVSS 6.5