Vulnerabilities > Information Exposure

DATE CVE VULNERABILITY TITLE RISK
2018-10-10 CVE-2018-17917 Information Exposure vulnerability in Xiongmaitech Xmeye P2P Cloud Server
All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server may allow an attacker to use MAC addresses to enumerate potential Cloud IDs.
network
low complexity
xiongmaitech CWE-200
5.3
2018-10-10 CVE-2018-8472 Information Exposure vulnerability in Microsoft products
An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, allowing an attacker to retrieve information from a targeted system, aka "Windows GDI Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.
local
low complexity
microsoft CWE-200
5.5
2018-10-10 CVE-2018-8427 Information Exposure vulnerability in Microsoft products
An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka "Microsoft Graphics Components Information Disclosure Vulnerability." This affects Microsoft Office, Microsoft Office Word Viewer, Office 365 ProPlus, Windows Server 2008, Microsoft PowerPoint Viewer, Microsoft Excel Viewer.
local
low complexity
microsoft CWE-200
5.5
2018-10-10 CVE-2018-8330 Information Exposure vulnerability in Microsoft products
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.
local
low complexity
microsoft CWE-200
5.5
2018-10-10 CVE-2018-8292 Information Exposure vulnerability in Microsoft Asp.Net Core and Powershell Core
An information disclosure vulnerability exists in .NET Core when authentication information is inadvertently exposed in a redirect, aka ".NET Core Information Disclosure Vulnerability." This affects .NET Core 2.1, .NET Core 1.0, .NET Core 1.1, PowerShell Core 6.0.
network
low complexity
microsoft CWE-200
7.5
2018-10-08 CVE-2018-1753 Information Exposure vulnerability in IBM Security KEY Lifecycle Manager
IBM Tivoli Key Lifecycle Manager 2.6, 2.7, and 3.0 generates an error message that includes sensitive information about its environment, users, or associated data.
network
low complexity
ibm CWE-200
4.3
2018-10-08 CVE-2018-1743 Information Exposure vulnerability in IBM Security KEY Lifecycle Manager
IBM Tivoli Key Lifecycle Manager 2.6, 2.7, and 3.0 discloses sensitive information to unauthorized users.
network
low complexity
ibm CWE-200
5.3
2018-10-08 CVE-2018-1000803 Information Exposure vulnerability in Gitea
Gitea version prior to version 1.5.1 contains a CWE-200 vulnerability that can result in Exposure of users private email addresses.
network
low complexity
gitea CWE-200
5.3
2018-10-05 CVE-2018-15433 Information Exposure vulnerability in Cisco Prime Infrastructure 3.2
A vulnerability in the server backup function of Cisco Prime Infrastructure could allow an authenticated, remote attacker to view sensitive information.
network
low complexity
cisco CWE-200
4.3
2018-10-05 CVE-2018-15432 Information Exposure vulnerability in Cisco Prime Infrastructure 3.2
A vulnerability in the server backup function of Cisco Prime Infrastructure could allow an authenticated, remote attacker to view sensitive information.
network
low complexity
cisco CWE-200
4.3