Vulnerabilities > Information Exposure

DATE CVE VULNERABILITY TITLE RISK
2018-03-06 CVE-2018-5467 Information Exposure vulnerability in Belden products
An Information Exposure Through Query Strings in GET Request issue was discovered in Belden Hirschmann RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS Classic Platform Switches.
network
low complexity
belden CWE-200
6.5
2018-03-06 CVE-2018-6808 Information Exposure vulnerability in Citrix products
NetScaler ADC 10.5, 11.0, 11.1, and 12.0, and NetScaler Gateway 10.5, 11.0, 11.1, and 12.0 allow remote attackers to download arbitrary files on the target system.
network
low complexity
citrix CWE-200
7.5
2018-03-06 CVE-2017-6283 Information Exposure vulnerability in multiple products
NVIDIA Security Engine contains a vulnerability in the RSA function where the keyslot read/write lock permissions are cleared on a chip reset which may lead to information disclosure.
local
low complexity
nvidia google CWE-200
5.5
2018-03-05 CVE-2017-8165 Information Exposure vulnerability in Huawei Mate 9 Firmware
Mate 9 Huawei smart phones with versions earlier than MHA-AL00BC00B233 have a sensitive information leak vulnerability.
local
low complexity
huawei CWE-200
5.5
2018-03-05 CVE-2017-17140 Information Exposure vulnerability in Huawei Enjoy 5S Firmware and Y6 PRO Firmware
Huawei Enjoy 5s and Y6 Pro smartphones with software the versions before TAG-AL00C92B170; the versions before TIT-L01C576B121 have an information leak vulnerability due to the lack of parameter validation.
local
low complexity
huawei CWE-200
5.5
2018-03-05 CVE-2017-17139 Information Exposure vulnerability in Huawei Mate 9 Firmware and Mate 9 PRO Firmware
Huawei Mate 9 and Mate 9 pro smart phones with software the versions before MHA-AL00B 8.0.0.334(C00); the versions before LON-AL00B 8.0.0.334(C00) have a information leak vulnerability in the date service proxy implementation.
local
low complexity
huawei CWE-200
5.5
2018-03-05 CVE-2017-7633 Information Exposure vulnerability in Qnap Qfinder PRO 6.1.0.0317
QNAP Qfinder Pro 6.1.0.0317 and earlier may expose sensitive information contained in NAS devices.
network
low complexity
qnap CWE-200
7.5
2018-03-05 CVE-2018-7668 Information Exposure vulnerability in Testlink
TestLink through 1.9.16 allows remote attackers to read arbitrary attachments via a modified ID field to /lib/attachments/attachmentdownload.php.
network
low complexity
testlink CWE-200
7.5
2018-03-04 CVE-2018-7662 Information Exposure vulnerability in Couchcms Couch
Couch through 2.0 allows remote attackers to discover the full path via a direct request to includes/mysql2i/mysql2i.func.php or addons/phpmailer/phpmailer.php.
network
low complexity
couchcms CWE-200
5.3
2018-03-04 CVE-2018-7661 Information Exposure vulnerability in Babyphonemobile Wifi Baby Monitor
Papenmeier WiFi Baby Monitor Free & Lite before 2.02.2 allows remote attackers to obtain audio data via certain requests to TCP ports 8258 and 8257.
high complexity
babyphonemobile CWE-200
5.3