Information disclosure.

Windows Installer Information Disclosure Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• Information disclosure

Windows Kernel Information Disclosure Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• Information disclosure

Windows Kernel Information Disclosure Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• Information disclosure

Windows Cryptographic Services Information Disclosure Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• Information disclosure

Microsoft Office SharePoint Tampering Vulnerability

• Microsoft SharePoint Server Subscription Edition
• Information disclosure

Microsoft Office Excel Information Disclosure Vulnerability

• Microsoft 365 Apps for Enterprise
• Microsoft Office 365 for Mac
• Information disclosure

Windows NTFS Information Disclosure Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• Information disclosure

Windows Secure Kernel Mode Information Disclosure Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• Information disclosure

Windows Projected File System Information Disclosure Vulnerability

• Microsoft Windows 10 Version 1809
• Microsoft Windows 10 Version 21H2
• Information disclosure

WebDAV Information Disclosure Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• Information disclosure

Azure Active Directory Information Disclosure Vulnerability

• Microsoft Windows 11 version 23H2
• Microsoft Windows 11 Version 24H2
• Information disclosure

Azure HDInsight Information Disclosure Vulnerability

• Microsoft Azure HDInsight
• Information disclosure

Windows Kernel-Mode Drivers Information Disclosure Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• Information disclosure

Windows Event Viewer Information Disclosure Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• Information disclosure

Windows Bind Filter Driver Information Disclosure Vulnerability

• Microsoft Windows 10 Version 21H2
• Microsoft Windows 10 Version 22H2
• Information disclosure

Windows Sysmain Service Information Disclosure Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• Information disclosure

Windows Win32 Kernel Subsystem Information Disclosure Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• Information disclosure

Windows Clipboard User Service Information Disclosure Vulnerability

• Microsoft Windows 10 Version 1809
• Microsoft Windows 10 Version 21H2
• Information disclosure

Windows Universal Disk Format File System Driver (UDFS) Information Disclosure Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• Information disclosure

HTTP.sys Information Disclosure Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• Information disclosure

Windows iSCSI Information Disclosure Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• Information disclosure

Windows Kernel Information Disclosure Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• Information disclosure

vhr through commit 03abbd3 Information Disclosure of Operator Password Hashes via GET /chat/hrs

• lenve vhr
• Information disclosure

Busybox: busybox: httpd user existence oracle in non-default shadow-disabled builds

• Red Hat Hardened Images
• Information disclosure

Dio: Cross-origin redirect leaks sensitive request headers in `dio_http2_adapter`

• cfug dio
• Information disclosure

FrankenPHP: Docker images serve phpinfo() as the default index.php, leaking environment variables

• frankenphp
• Information disclosure

Sensitive information in log files in Ivanti Xtraction

• Ivanti Xtraction
• Information disclosure

Plane: Unauthenticated Workspace Invitation Token Leakage

• plane
• Information disclosure
• Broken access control

HBAI-Ltd Toonflow-app exportData Endpoint information disclosure

• HBAI-Ltd Toonflow-app
• Information disclosure
• Broken access control

Wazuh 4.0.0 before 4.14.8 authd.pass Disclosure via Agent 000 Config Endpoint

• wazuh-manager
• Information disclosure

EspoCRM 4.0.0 before 10.0.7 Field-Level Security Bypass via Note Read Endpoint

• espocrm
• Information disclosure

EspoCRM 4.0.0 before 10.0.7 Field-Level Access Bypass via Address-Book Search

• espocrm
• Information disclosure

FreeRDP 3.0.0 before 3.32.0 Memory Disclosure via SCardTransmit Smartcard Redirection

• FreeRDP
• Information disclosure

Information disclosure in the Storage: IndexedDB component

• Mozilla Firefox
• Mozilla Thunderbird
• Information disclosure

Information disclosure in the WebRTC: Networking component

• Mozilla Firefox
• Mozilla Thunderbird
• Information disclosure

Information disclosure in the Networking: Cache component

• Mozilla Firefox
• Mozilla Thunderbird
• Information disclosure

Information disclosure in the Networking component

• Mozilla Firefox
• Mozilla Thunderbird
• Information disclosure

Information disclosure in the Networking component

• Mozilla Firefox
• Mozilla Thunderbird
• Information disclosure

Information disclosure in the PDF Viewer component

• Mozilla Firefox
• Mozilla Thunderbird
• Information disclosure

Information disclosure, privilege escalation in the Security: Process Sandboxing component

• Mozilla Firefox
• Mozilla Thunderbird
• Information disclosure

Information disclosure in Siemens RUGGEDCOM CROSSBOW

• Siemens RUGGEDCOM CROSSBOW
• Information disclosure

Sensitive information in error messages in Siemens .NET Client Library for SIMATIC S7 Webserver API

• Siemens .NET Client Library for SIMATIC S7 Webserver API
• Information disclosure

TYPO3-CORE-SA-2026-024: Security Misconfiguration in Form Framework

• Information disclosure
• CWE-696

>=14.0.0, <14.3.9 · fixed in 14.3.9

WordPress Active Products Tables for WooCommerce plugin <= 2.1.3 - Sensitive Data Exposure vulnerability

• PluginUs.Net Active Products Tables for WooCommerce
• Information disclosure

Ad Inserter <= 2.8.18 - Authenticated (Subscriber+) Sensitive Information Disclosure in 'ai-debug-processing-fe' & 'ai-debug-meta' URL Parameters

• spacetime Ad Inserter – Ad Manager & AdSense Ads
• Information disclosure

Insertion of Sensitive Information into Log File in GitLab

• GitLab
• Information disclosure

Information Disclosure vulnerability in SAP NetWeaver Enterprise Portal

• SAP_SE SAP NetWeaver Enterprise Portal
• Information disclosure

DeepSeek V4 is vulnerable to Incorrect Access Control via a crafted input.

• Information disclosure

IBM i is Information Disclosure

• i
• Information disclosure

IBM i is Information Disclosure

• i
• Information disclosure

code-projects Matrimonial System matrimony.sql file access

• code-projects Matrimonial System
• Broken access control
• Information disclosure

IBM Aspera Enterprise Webapps Information Disclosure

• IBM Aspera Enterprise WebApps
• Information disclosure

Security Vulnerability identified in IBM TRIRIGA - Information Disclosure in Admin Console

• IBM TRIRIGA Application Platform
• Information disclosure

code-projects Online Ticket Reservation System medallion.sql file information disclosure

• code-projects Online Ticket Reservation System
• Information disclosure

DataStage on Cloud Pak for Data Information Disclosure

• IBM DataStage on Cloud Pak for Data
• Information disclosure

Frappe 14.x before 14.45.0 Information Disclosure via Error Log Tracebacks

• frappe
• Information disclosure

Qexo initialization endpoint can reset setup state and expose stored credentials

• Qexo
• Information disclosure

Super Productivity: SuperSync E2EE setup uploads and stores all user operations in plaintext before password is set

• super-productivity
• Information disclosure
• CWE-693

Netcore NR268 DDNS ddns_wan_list_show.cgi ddns_wan_list_show information disclosure

• Netcore NR268
• Information disclosure
• Broken access control

Telegram-Stremio 5.1.0 Insecure Session Storage via encode_string

• weebzone Telegram-Stremio
• Information disclosure