Vulnerabilities > Information Exposure
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2018-11-26 | CVE-2018-16862 | Information Exposure vulnerability in multiple products A security flaw was found in the Linux kernel in a way that the cleancache subsystem clears an inode after the final file truncation (removal). | 5.5 |
| 2018-11-21 | CVE-2018-1843 | Information Exposure vulnerability in IBM Cloud Private 3.1.0 The Identity and Access Management (IAM) services (IBM Cloud Private 3.1.0) do not use a secure channel, such as SSL, to exchange information only when accessed internally from within the cluster. | 4.1 |
| 2018-11-20 | CVE-2018-18865 | Information Exposure vulnerability in Royalapplications Royal TS The Royal browser extensions TS before 4.3.60728 (Release Date 2018-07-28) and TSX before 3.3.1 (Release Date 2018-09-13) allow Credentials Disclosure. | 8.1 |
| 2018-11-20 | CVE-2018-16224 | Information Exposure vulnerability in Ismartalarm Cubeone Firmware Incorrect access control for the diagnostic files of the iSmartAlarm Cube One through 2.2.4.10 allows an attacker to retrieve them via a specifically crafted TCP request to port 12345 and 22306, and access sensitive information from the device. | 5.3 |
| 2018-11-19 | CVE-2018-1841 | Information Exposure vulnerability in IBM Cloud Private 2.1.0 IBM Cloud Private 2.1.0 could allow a local user to obtain the CA Private Key due to it being world readable in boot/master node. | 5.5 |
| 2018-11-16 | CVE-2018-7360 | Information Exposure vulnerability in ZTE Zxhn F670 Firmware All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by information exposure vulnerability, which may allow an unauthenticated attacker to get the GPON SN information via appviahttp service. | 6.5 |
| 2018-11-16 | CVE-2018-1639 | Information Exposure vulnerability in IBM Jazz Reporting Service The Report Builder of Jazz Reporting Service 5.0 through 5.0.2 and 6.0 through 6.0.6 could allow an authenticated user to obtain sensitive information beyond its assigned privileges. | 6.5 |
| 2018-11-16 | CVE-2018-9071 | Information Exposure vulnerability in Lenovo Chassis Management Module Firmware Lenovo Chassis Management Module (CMM) prior to version 2.0.0 allows unauthenticated users to retrieve information related to the current authentication configuration settings. | 5.3 |
| 2018-11-14 | CVE-2018-9543 | Information Exposure vulnerability in Google Android In trim_device of f2fs_format_utils.c, it is possible that the data partition is not wiped during a factory reset. | 5.5 |
| 2018-11-14 | CVE-2018-9526 | Information Exposure vulnerability in Google Android 9.0 In device configuration data, there is an improperly configured setting. | 7.5 |