Vulnerabilities > Information Exposure

DATE CVE VULNERABILITY TITLE RISK
2017-02-24 CVE-2016-4042 Information Exposure vulnerability in Plone
Plone 3.3 through 5.1a1 allows remote attackers to obtain information about the ID of sensitive content via unspecified vectors.
network
low complexity
plone CWE-200
5.3
2017-02-24 CVE-2017-6076 Information Exposure vulnerability in Wolfssl
In versions of wolfSSL before 3.10.2 the function fp_mul_comba makes it easier to extract RSA key information for a malicious user who has access to view cache on a machine.
local
low complexity
wolfssl CWE-200
5.5
2017-02-23 CVE-2017-6206 Information Exposure vulnerability in Dlink Websmart Dgs-1510 Series Firmware 1.31.B001
D-Link DGS-1510-28XMP, DGS-1510-28X, DGS-1510-52X, DGS-1510-52, DGS-1510-28P, DGS-1510-28, and DGS-1510-20 Websmart devices with firmware before 1.31.B003 allow attackers to conduct Unauthenticated Information Disclosure attacks via unspecified vectors.
network
low complexity
dlink CWE-200
7.5
2017-02-22 CVE-2016-3052 Information Exposure vulnerability in IBM Websphere MQ
Under non-standard configurations, IBM WebSphere MQ might send password data in clear text over the network.
network
high complexity
ibm CWE-200
5.9
2017-02-22 CVE-2016-9384 Information Exposure vulnerability in XEN 4.7.0/4.7.1
Xen 4.7 allows local guest OS users to obtain sensitive host information by loading a 32-bit ELF symbol table.
local
low complexity
xen CWE-200
6.5
2017-02-22 CVE-2017-3842 Information Exposure vulnerability in Cisco Intrusion Prevention System Device Manager 7.2(1)V7
A vulnerability in the web-based management interface of the Cisco Intrusion Prevention System Device Manager (IDM) could allow an unauthenticated, remote attacker to view sensitive information stored in certain HTML comments.
network
low complexity
cisco CWE-200
5.3
2017-02-22 CVE-2017-3841 Information Exposure vulnerability in Cisco Secure Access Control System 5.8(2.5)
A vulnerability in the web interface of the Cisco Secure Access Control System (ACS) could allow an unauthenticated, remote attacker to disclose sensitive information.
network
low complexity
cisco CWE-200
7.5
2017-02-22 CVE-2017-3836 Information Exposure vulnerability in Cisco Unified Communications Manager 11.5(1.11007.2)
A vulnerability in the web framework Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to view sensitive data.
network
low complexity
cisco CWE-200
4.3
2017-02-21 CVE-2015-4057 Information Exposure vulnerability in Dell VCE Vision Intelligent Operations 2.5/2.6/2.6.4
The "Plug-in for VMware vCenter" in VCE Vision Intelligent Operations before 2.6.5 sends a cleartext HTTP response upon a request for the Settings screen, which allows remote attackers to discover the admin user password by sniffing the network.
network
low complexity
dell CWE-200
7.5
2017-02-21 CVE-2017-6072 Information Exposure vulnerability in Cmsmadesimple CMS Made Simple and Form Builder
CMS Made Simple version 1.x Form Builder before version 0.8.1.6 allows remote attackers to conduct information-disclosure attacks via defaultadmin.
network
low complexity
cmsmadesimple CWE-200
5.3