Advisories · Weakness
Information disclosure.
Sensitive data exposed to people who shouldn’t see it. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.
- CVSS 5.5 Medium
Information disclosure in Oracle Corporation Oracle Agile PLM MCAD Connector
- Oracle Corporation Oracle Agile PLM MCAD Connector
- Information disclosure
- CVSS 7.3 High
Information disclosure in Oracle Corporation Oracle Agile PLM MCAD Connector
- Oracle Corporation Oracle Agile PLM MCAD Connector
- Information disclosure
- CVSS 5.5 Medium
Information disclosure in Oracle Corporation Oracle Agile PLM MCAD Connector
- Oracle Corporation Oracle Agile PLM MCAD Connector
- Information disclosure
- CVSS 7.1 High
Information disclosure in Oracle Corporation Oracle Commerce Guided Search / Oracle Commerce Experience…
- Oracle Corporation Oracle Commerce Guided Search / Oracle Commerce Experience Manager
- Information disclosure
- CVSS 7.1 High
Information disclosure in Oracle Corporation Oracle Commerce Guided Search / Oracle Commerce Experience…
- Oracle Corporation Oracle Commerce Guided Search / Oracle Commerce Experience Manager
- Information disclosure
- CVSS 7.1 High
Information disclosure in Oracle Corporation Oracle Commerce Guided Search / Oracle Commerce Experience…
- Oracle Corporation Oracle Commerce Guided Search / Oracle Commerce Experience Manager
- Information disclosure
- CVSS 6.5 Medium
Information disclosure in Oracle Corporation Oracle Application Object Library
- Oracle Corporation Oracle Application Object Library
- Information disclosure
- CVSS 7.5 High
Information disclosure in Oracle Corporation Oracle Application Object Library
- Oracle Corporation Oracle Application Object Library
- Information disclosure
- CVSS 7.7 High
Information disclosure in Oracle Corporation Oracle Order Management
- Oracle Corporation Oracle Order Management
- Information disclosure
- CVSS 4.3 Medium
Unauthenticated Information Disclosure in HPE Networking EdgeConnect SD-WAN Gateways
- Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- Information disclosure
- CVSS 5.3 Medium
Unauthenticated Information Disclosure in EdgeConnect SD-WAN Orchestrator API allows exposure of sensitive data
- Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- Information disclosure
- CVSS 6.5 Medium
Authenticated Information Disclosure in HPE Networking EdgeConnect Enterprise Web-Based Management Interface
- Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- Information disclosure
- CVSS 7.1 High
Unauthenticated Adjacent Information Disclosure and Denial-of-Service Vulnerability in HPE Networking EdgeConnect SD-WAN Gateways
- Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- Information disclosure
- CVSS 9.9 CriticalCritical · CVSS 9+
Authenticated Sensitive Information Disclosure in HPE Networking EdgeConnect SD-WAN Orchestrator
- Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- Information disclosure
- CVSS 5.9 Medium
Http4s: FollowRedirect middleware leaks credentials over https->http same-authority redirect
- http4s
- Information disclosure
- Weak cryptography or TLS
- CVSS 6.0 Medium
On affected platforms running Arista EOS, under certain circumstances plaintext shared secrets for configured Terminal Access Controller Access-Control System Plus (TACACS+) servers
- Arista Networks EOS
- Information disclosure
- CVSS 6.0 Medium
On affected platforms running Arista EOS, under certain circumstances plaintext user passwords
- Arista Networks EOS
- Information disclosure
- CVSS 6.0 Medium
On affected platforms running Arista EOS, under certain circumstances plaintext private keys
- Arista Networks EOS
- Information disclosure
- CVSS 6.2 Medium
Observable discrepancy in Google Android
- Google Android
- Information disclosure
- CVSS 8.8 High
Information disclosure in Google Android
- Google Android
- Information disclosure
- CVSS 4.4 Medium
Information disclosure in Google Android
- Google Android
- Information disclosure
- CVSS 4.3 Medium
Duplicate Advisory: Vikunja: Link-share token can enumerate users through the v2 API
- Information disclosure
<=2.5.0 · no fixed version yet
GHSA-vcgv-7rvm-m3vp - CVSS 7.5 High
Duplicate Advisory: Vikunja: Read-only project members can obtain any link share's access hash via the single-share read endpoint (v1 and v2) and escalate to the share's permission level
- Information disclosure
<=2.5.0 · no fixed version yet
GHSA-37rx-7pj5-p885 - CVSS 4.3 Medium
Duplicate Advisory: Vikunja: Any user can enumerate every team and its members by attaching arbitrary teams to a throwaway project
- Information disclosure
<=2.5.0 · no fixed version yet
GHSA-2922-qgfj-pr7v - CVSS 5.3 Medium
Insertion of Sensitive Information Into Sent Data in GitLab
- GitLab
- Information disclosure
- CVSS 8.7 High
Multiple authorization bypass in WordPress theme design-scuole-wordpress-theme
- Developers Italia design-scuole-wordpress-theme
- Information disclosure
- Broken access control
- CVSS 8.7 High
WWBN AVideo through 29.0 Broken Access Control via Live Endpoints
- WWBN AVideo
- Information disclosure
- CVSS 4.3 Medium
Information disclosure in the Networking component
- Mozilla Firefox
- Mozilla Thunderbird
- Information disclosure
- CVSS 7.5 High
Information disclosure in the Networking: HTTP component
- Mozilla Firefox
- Mozilla Thunderbird
- Information disclosure
- CVSS 6.5 Medium
Information disclosure in the Graphics: ImageLib component
- Mozilla Firefox
- Mozilla Thunderbird
- Information disclosure
- CVSS 3.7 Low
Username Enumeration via SMS OTP Flow in WSO2 Identity Server Allows User Account Discovery
- WSO2 Identity Server
- Information disclosure
- CVSS 5.3 Medium
Username Enumeration via Self Registration Flow in Multiple WSO2 Products Allows User Account Discovery
- WSO2 API Manager
- WSO2 API Control Plane
- Information disclosure
- CVSS 4.2 Medium
Sealed Secrets: decryption oracle via Go template injection in unauthenticated controller endpoints
- Bitnami sealed-secrets
- Information disclosure
- CVSS 5.3 Medium
WP Directory Kit <= 1.5.7 - Unauthenticated Unpublished Listing Disclosure via map_infowindow
- WP Directory Kit
- Information disclosure
- CVSS 2.7 Low
WP Directory Kit <= 1.5.7 - Contributor+ Non-Public Listing Field Disclosure via Shortcodes
- WP Directory Kit
- Information disclosure
- CVSS 5.5 Medium
Hawtio-operator: hawtio-operator: tls private key written to operator log at debug level
- Red Hat build of Apache Camel - HawtIO 4
- Information disclosure
- CVSS 5.3 Medium
3D FlipBook <= 1.16.20 - Unauthenticated Sensitive Information Exposure in 'id' Parameter
- iberezansky 3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery
- Information disclosure
- CVSS 6.9 Medium
D-Link DIR-882 CGI Binary dllog.cgi main information disclosure
- D-Link DIR-882
- Information disclosure
- Broken access control
- CVSS 2.3 Low
An issue was discovered in Keyfactor SignServer before 7.6.0.
- Information disclosure
- CVSS 4.9 Medium
An issue was discovered in Keyfactor SignServer before 7.6.0.
- Information disclosure
- CVSS 6.3 Medium
PHPGurukul Blood Donor Management System Login_Model.php cleartext storage in file
- PHPGurukul Blood Donor Management System
- Information disclosure
- CWE-313
- CVSS 6.9 Medium
GrowthBook through 5.0.1 Information Disclosure via Public Endpoints
- growthbook
- Information disclosure
- CVSS 5.5 Medium
Information disclosure in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple visionOS
- Information disclosure
- CVSS 7.5 High
Information disclosure in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple tvOS
- Information disclosure
- CVSS 7.5 High
Exposure of personal information in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple watchOS
- Information disclosure
- CVSS 5.5 Medium
Information disclosure in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Information disclosure
- CVSS 7.5 High
Insufficiently random values in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Authentication bypass
- Weak cryptography or TLS
- CVSS 6.5 Medium
Information disclosure in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Information disclosure
- CVSS 7.5 High
Information disclosure in Apple iOS and iPadOS
- Apple iOS and iPadOS
- Information disclosure
- CVSS 3.3 Low
Information disclosure in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Information disclosure
- CVSS 3.3 Low
Information disclosure in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Information disclosure
- CVSS 5.5 Medium
Information disclosure in Apple macOS and others
- Apple macOS
- Apple watchOS
- Information disclosure
- CVSS 5.5 Medium
Sensitive information in log files in Apple macOS
- Apple macOS
- Information disclosure
- CVSS 5.5 Medium
Sensitive information in log files in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Information disclosure
- CVSS 3.3 Low
Information disclosure in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple visionOS
- Information disclosure
- CVSS 3.3 Low
Information disclosure in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Information disclosure
- CVSS 6.1 Medium
Exposure of personal information in Apple macOS
- Apple macOS
- Information disclosure
- CVSS 5.5 Medium
Sensitive information in log files in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Information disclosure
- CVSS 9.1 CriticalCritical · CVSS 9+
Information disclosure in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Information disclosure
- CVSS 5.5 Medium
Information disclosure in Apple iOS and iPadOS
- Apple iOS and iPadOS
- Information disclosure