Vulnerabilities > Information Exposure

DATE CVE VULNERABILITY TITLE RISK
2018-02-15 CVE-2018-0761 Information Exposure vulnerability in Microsoft Windows 7 and Windows Server 2008
The Microsoft Windows Embedded OpenType (EOT) font engine in Microsoft Windows 7 SP1 and Windows Server 2008 R2 allows information disclosure, due to how the Windows EOT font engine handles embedded fonts, aka "Windows EOT Font Engine Information Disclosure Vulnerability".
local
low complexity
microsoft CWE-200
5.5
2018-02-15 CVE-2018-0760 Information Exposure vulnerability in Microsoft Windows 7, Windows Server 2008 and Windows Server 2012
The Microsoft Windows Embedded OpenType (EOT) font engine in Microsoft Windows 7 SP1, Windows Server 2008 R2, and Windows Server 2012 allows information disclosure, due to how the Windows EOT font engine handles embedded fonts, aka "Windows EOT Font Engine Information Disclosure Vulnerability".
local
low complexity
microsoft CWE-200
5.5
2018-02-15 CVE-2018-0755 Information Exposure vulnerability in Microsoft Windows 7 and Windows Server 2008
The Microsoft Windows Embedded OpenType (EOT) font engine in Microsoft Windows 7 SP1 and Windows Server 2008 R2 allows information disclosure, due to how the Windows EOT font engine handles embedded fonts, aka "Windows EOT Font Engine Information Disclosure Vulnerability".
local
low complexity
microsoft CWE-200
5.5
2018-02-13 CVE-2017-15709 Information Exposure vulnerability in Apache Activemq
When using the OpenWire protocol in ActiveMQ versions 5.14.0 to 5.15.2 it was found that certain system details (such as the OS and kernel version) are exposed as plain text.
network
high complexity
apache CWE-200
3.7
2018-02-13 CVE-2018-6293 Information Exposure vulnerability in Hyland Saperion web Client 7.5.2
Arbitrary File Read in Saperion Web Client version 7.5.2 83166.
network
low complexity
hyland CWE-200
7.5
2018-02-12 CVE-2017-13246 Information Exposure vulnerability in Google Android
A information disclosure vulnerability in the Upstream kernel network driver.
network
low complexity
google CWE-200
7.5
2018-02-12 CVE-2017-13243 Information Exposure vulnerability in Google Android
A information disclosure vulnerability in the Android system (ui).
network
low complexity
google CWE-200
7.5
2018-02-12 CVE-2017-13242 Information Exposure vulnerability in Google Android
A information disclosure vulnerability in the Android system (bluetooth).
network
low complexity
google CWE-200
7.5
2018-02-12 CVE-2017-13241 Information Exposure vulnerability in Google Android
A information disclosure vulnerability in the Android media framework (libstagefright_soft_avcenc).
network
low complexity
google CWE-200
7.5
2018-02-12 CVE-2017-13240 Information Exposure vulnerability in Google Android 8.0/8.1
A information disclosure vulnerability in the Android framework (crypto framework).
network
low complexity
google CWE-200
7.5