Vulnerabilities > Information Exposure

DATE CVE VULNERABILITY TITLE RISK
2018-11-09 CVE-2017-1119 Information Exposure vulnerability in IBM Marketing Operations
IBM Marketing Operations 9.1.0, 9.1.2, and 10.1 could allow a remote attacker to obtain sensitive information.
network
low complexity
ibm CWE-200
4.3
2018-11-08 CVE-2018-19046 Information Exposure vulnerability in Keepalived 2.0.8
keepalived 2.0.8 didn't check for existing plain files when writing data to a temporary file upon a call to PrintData or PrintStats.
local
high complexity
keepalived CWE-200
4.7
2018-11-08 CVE-2018-19045 Information Exposure vulnerability in Keepalived 2.0.8
keepalived 2.0.8 used mode 0666 when creating new temporary files upon a call to PrintData or PrintStats, potentially leaking sensitive information.
network
low complexity
keepalived CWE-200
7.5
2018-11-08 CVE-2018-15446 Information Exposure vulnerability in Cisco Meeting Server
A vulnerability in Cisco Meeting Server could allow an unauthenticated, remote attacker to gain access to sensitive information.
network
low complexity
cisco CWE-200
7.5
2018-11-07 CVE-2018-19075 Information Exposure vulnerability in multiple products
An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128.
network
low complexity
opticam foscam CWE-200
5.3
2018-11-07 CVE-2018-18590 Information Exposure vulnerability in Microfocus Operations Bridge
A potential remote code execution and information disclosure vulnerability exists in Micro Focus Operations Bridge containerized suite versions 2017.11, 2018.02, 2018.05, 2018.08.
low complexity
microfocus CWE-200
8.8
2018-11-06 CVE-2018-9489 Information Exposure vulnerability in Google Android
When wifi is switched, function sendNetworkStateChangeBroadcast of WifiStateMachine.java broadcasts an intent including detailed wifi network information.
network
low complexity
google CWE-200
7.5
2018-11-06 CVE-2018-1606 Information Exposure vulnerability in IBM products
IBM Jazz based applications (IBM Rational Collaborative Lifecycle Management 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational DOORS Next Generation 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational Engineering Lifecycle Manager 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational Quality Manager 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational Rhapsody Design Manager 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational Software Architect Design Manager 5.0 through 5.02 and 6.0 through 6.0.1, IBM Rational Team Concert 5.0 through 5.02 and 6.0 through 6.0.6) could allow an authenticated user to obtain sensitive information from an error message that could be used in further attacks against the system.
network
low complexity
ibm CWE-200
4.3
2018-11-05 CVE-2018-17907 Information Exposure vulnerability in Omron Cx-Supervisor
When processing project files in Omron CX-Supervisor Versions 3.4.1.0 and prior and tampering with the value of an offset, an attacker can force the application to read a value outside of an array.
local
low complexity
omron CWE-200
3.3
2018-11-02 CVE-2018-16849 Information Exposure vulnerability in Redhat Openstack-Mistral 7.0.0
A flaw was found in openstack-mistral.
network
low complexity
redhat CWE-200
7.5