Vulnerabilities > Information Exposure

DATE CVE VULNERABILITY TITLE RISK
2023-04-08 CVE-2013-10024 Information Exposure vulnerability in Exit Strategy Project Exit Strategy 1.55
A vulnerability has been found in Exit Strategy Plugin 1.55 on WordPress and classified as problematic.
network
low complexity
exit-strategy-project CWE-200
7.5
2023-03-31 CVE-2023-1258 Information Exposure vulnerability in ABB products
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in ABB Flow-X firmware on Flow-X embedded hardware (web service modules) allows Footprinting.This issue affects Flow-X: before 4.0.
network
low complexity
abb CWE-200
5.3
2023-03-27 CVE-2023-24838 Information Exposure vulnerability in Hgiga Powerstation Firmware
HGiga PowerStation has a vulnerability of Information Leakage.
network
low complexity
hgiga CWE-200
critical
9.8
2023-03-24 CVE-2023-28444 Information Exposure vulnerability in Angular-Server-Side-Configuration Project Angular-Server-Side-Configuration 15.0.0/15.0.1/15.0.2
angular-server-side-configuration helps configure an angular application at runtime on the server or in a docker container via environment variables.
7.5
2023-03-24 CVE-2023-28442 Information Exposure vulnerability in Geosolutionsgroup Geonode
GeoNode is an open source platform that facilitates the creation, sharing, and collaborative use of geospatial data.
network
low complexity
geosolutionsgroup CWE-200
5.3
2023-03-17 CVE-2023-0027 Information Exposure vulnerability in Rockwellautomation Modbus TCP Server ADD on Instructions 2.00.00/2.00.03
Rockwell Automation Modbus TCP Server AOI prior to 2.04.00 is vulnerable to an unauthorized user sending a malformed message that could cause the controller to respond with a copy of the most recent response to the last valid request.
network
low complexity
rockwellautomation CWE-200
4.3
2023-03-15 CVE-2022-38456 Information Exposure vulnerability in Ajax Search Project Ajax Search
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Ernest Marcinko Ajax Search Lite plugin <= 4.10.3 versions.
network
low complexity
ajax-search-project CWE-200
7.5
2023-03-14 CVE-2023-27894 Information Exposure vulnerability in SAP Businessobjects Business Intelligence 420/430
SAP BusinessObjects Business Intelligence Platform (Web Services) - versions 420, 430, allows an attacker to inject arbitrary values as CMS parameters to perform lookups on the internal network which is otherwise not accessible externally.
network
low complexity
sap CWE-200
5.3
2023-03-10 CVE-2023-23327 Information Exposure vulnerability in Avantfax 3.3.7
An Information Disclosure vulnerability exists in AvantFAX 3.3.7.
network
low complexity
avantfax CWE-200
4.9
2023-03-07 CVE-2023-1263 Information Exposure vulnerability in Niteothemes Coming Soon & Maintenance
The CMP – Coming Soon & Maintenance plugin for WordPress is vulnerable to Information Exposure in versions up to, and including, 4.1.6 via the cmp_get_post_detail function.
network
low complexity
niteothemes CWE-200
5.3