Vulnerabilities > Information Exposure

DATE CVE VULNERABILITY TITLE RISK
2017-06-07 CVE-2017-7313 Information Exposure vulnerability in Personify Personify360 E-Business
An issue was discovered in Personify360 e-Business 7.5.2 through 7.6.1.
network
low complexity
personify CWE-200
7.5
2017-06-06 CVE-2016-3066 Information Exposure vulnerability in Spice-Gtk Project Spice-Gtk
The spice-gtk widget allows remote authenticated users to obtain information from the host clipboard.
network
low complexity
spice-gtk-project CWE-200
6.5
2017-06-06 CVE-2014-9951 Information Exposure vulnerability in Google Android
In TrustZone in all Android releases from CAF using the Linux kernel, an Information Exposure Through Timing Discrepancy vulnerability could potentially exist.
local
low complexity
google CWE-200
5.5
2017-06-06 CVE-2014-9947 Information Exposure vulnerability in Google Android
In TrustZone in all Android releases from CAF using the Linux kernel, an Information Exposure vulnerability could potentially exist.
local
low complexity
google CWE-200
5.5
2017-06-05 CVE-2017-8840 Information Exposure vulnerability in Peplink products
Debug information disclosure exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2_380hw6_580hw2_710hw3_1350hw2_2500-7.0.1-build2093.
network
low complexity
peplink CWE-200
5.3
2017-06-05 CVE-2017-8441 Information Exposure vulnerability in Elastic X-Pack
Elastic X-Pack Security versions prior to 5.4.1 and 5.3.3 did not always correctly apply Document Level Security to index aliases.
network
low complexity
elastic CWE-200
4.3
2017-06-04 CVE-2016-8230 Information Exposure vulnerability in Lenovo Service Bridge
In Lenovo Service Bridge before version 4, an insecure HTTP connection is used by LSB to send system serial number, machine type and model and product name to Lenovo's servers.
network
low complexity
lenovo CWE-200
7.5
2017-05-30 CVE-2017-2309 Information Exposure vulnerability in Juniper Junos Space
On Juniper Networks Junos Space versions prior to 16.1R1 when certificate based authentication is enabled for the Junos Space cluster, some restricted web services are accessible over the network.
network
high complexity
juniper CWE-200
5.9
2017-05-30 CVE-2017-2304 Information Exposure vulnerability in Juniper Junos 14.1X53/15.1/15.1X53
Juniper Networks QFX3500, QFX3600, QFX5100, QFX5200, EX4300 and EX4600 devices running Junos OS 14.1X53 prior to 14.1X53-D40, 15.1X53 prior to 15.1X53-D40, 15.1 prior to 15.1R2, do not pad Ethernet packets with zeros, and thus some packets can contain fragments of system memory or data from previous packets.
network
low complexity
juniper CWE-200
7.5
2017-05-27 CVE-2017-7338 Information Exposure vulnerability in Fortinet Fortiportal
A password management vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows an attacker to carry out information disclosure via the FortiAnalyzer Management View.
network
low complexity
fortinet CWE-200
7.5