Vulnerabilities > Information Exposure

DATE CVE VULNERABILITY TITLE RISK
2019-03-14 CVE-2018-12224 Information Exposure vulnerability in Intel Graphics Driver
Buffer leakage in igdkm64.sys in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 may allow an authenticated user to potentially enable information disclosure via local access.
local
low complexity
intel CWE-200
3.3
2019-03-13 CVE-2015-2254 Information Exposure vulnerability in Huawei Oceanstor UDS Firmware
Huawei OceanStor UDS devices with software before V100R002C01SPC102 might allow remote attackers to capture and change patch loading information resulting in the deletion of directory files and compromise of system functions when loading a patch.
network
low complexity
huawei CWE-200
critical
9.1
2019-03-12 CVE-2019-3615 Information Exposure vulnerability in Mcafee Database Security 4.6.6
Data Leakage Attacks vulnerability in the web interface in McAfee Database Security prior to the 4.6.6 March 2019 update allows local users to expose passwords via incorrectly auto completing password fields in the admin browser login screen.
low complexity
mcafee CWE-200
6.8
2019-03-12 CVE-2018-17944 Information Exposure vulnerability in Lexmark products
On certain Lexmark devices that communicate with an LDAP or SMTP server, a malicious administrator can discover LDAP or SMTP credentials by changing that server's hostname to one that they control, and then capturing the credentials that are sent there.
network
low complexity
lexmark CWE-200
4.9
2019-03-11 CVE-2018-2009 Information Exposure vulnerability in IBM API Connect
IBM API Connect v2018.1 and 2018.4.1 is affected by an information disclosure vulnerability in the consumer API.
network
low complexity
ibm CWE-200
6.5
2019-03-11 CVE-2018-1902 Information Exposure vulnerability in IBM Websphere Application Server
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to spoof connection information which could be used to launch further attacks against the system.
network
low complexity
ibm CWE-200
4.3
2019-03-07 CVE-2019-3781 Information Exposure vulnerability in Cloudfoundry Command Line Interface
Cloud Foundry CLI, versions prior to v6.43.0, improperly exposes passwords when verbose/trace/debugging is turned on.
network
low complexity
cloudfoundry CWE-200
8.8
2019-03-07 CVE-2018-11783 Information Exposure vulnerability in Apache Traffic Server
sslheaders plugin extracts information from the client certificate and sets headers in the request based on the configuration of the plugin.
network
low complexity
apache CWE-200
7.5
2019-03-04 CVE-2019-6206 Information Exposure vulnerability in Apple Iphone OS
An issue existed with autofill resuming after it was canceled.
network
low complexity
apple CWE-200
critical
9.8
2019-02-28 CVE-2018-12400 Information Exposure vulnerability in Mozilla Firefox
In private browsing mode on Firefox for Android, favicons are cached in the cache/icons folder as they are in non-private mode.
network
low complexity
mozilla CWE-200
5.3