Vulnerabilities > Information Exposure
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2018-12-04 | CVE-2018-18644 | Information Exposure vulnerability in Gitlab An issue was discovered in GitLab Community and Enterprise Edition 11.x before 11.2.7, 11.3.x before 11.3.8, and 11.4.x before 11.4.3. | 6.5 |
| 2018-12-04 | CVE-2018-18640 | Information Exposure vulnerability in Gitlab An issue was discovered in GitLab Community and Enterprise Edition before 11.2.7, 11.3.x before 11.3.8, and 11.4.x before 11.4.3. | 6.5 |
| 2018-12-04 | CVE-2018-17976 | Information Exposure vulnerability in Gitlab An issue was discovered in GitLab Community Edition 11.x before 11.1.8, 11.2.x before 11.2.5, and 11.3.x before 11.3.2. | 6.5 |
| 2018-12-04 | CVE-2018-17975 | Information Exposure vulnerability in Gitlab An issue was discovered in GitLab Community Edition 11.x before 11.1.8, 11.2.x before 11.2.5, and 11.3.x before 11.3.2. | 5.3 |
| 2018-12-04 | CVE-2018-17939 | Information Exposure vulnerability in Gitlab An issue was discovered in GitLab Community and Enterprise Edition 11.1.x before 11.1.8, 11.2.x before 11.2.5, and 11.3.x before 11.3.2. | 7.5 |
| 2018-12-04 | CVE-2018-5496 | Information Exposure vulnerability in Netapp Data Ontap Data ONTAP operating in 7-Mode versions prior to 8.2.5P2 are susceptible to a vulnerability which discloses sensitive information to an unauthorized user. | 4.4 |
| 2018-12-04 | CVE-2018-6099 | Information Exposure vulnerability in multiple products A lack of CORS checks in Blink in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to leak limited cross-origin data via a crafted HTML page. | 6.5 |
| 2018-12-04 | CVE-2018-6095 | Information Exposure vulnerability in multiple products Inappropriate dismissal of file picker on keyboard events in Blink in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to read local files via a crafted HTML page. | 6.5 |
| 2018-12-04 | CVE-2018-12318 | Information Exposure vulnerability in Asustor Data Master 3.1.1 Information disclosure in the SNMP settings page in ASUSTOR ADM version 3.1.1 allows attackers to obtain the SNMP password in cleartext. | 8.8 |
| 2018-12-04 | CVE-2018-12308 | Information Exposure vulnerability in Asustor Data Master 3.1.1 Encryption key disclosure in share.cgi in ASUSTOR ADM version 3.1.1 allows attackers to obtain the encryption key via the "encrypt_key" URL parameter. | 6.5 |