Vulnerabilities > Information Exposure

DATE CVE VULNERABILITY TITLE RISK
2020-03-10 CVE-2019-13457 Information Exposure vulnerability in Otrs
An issue was discovered in Open Ticket Request System (OTRS) 7.0.x through 7.0.8.
network
low complexity
otrs CWE-200
4.3
2020-03-10 CVE-2012-1094 Information Exposure vulnerability in Redhat Jboss Application Server
JBoss AS 7 prior to 7.1.1 and mod_cluster do not handle default hostname in the same way, which can cause the excluded-contexts list to be mismatched and the root context to be exposed.
network
low complexity
redhat CWE-200
7.5
2020-03-10 CVE-2019-12432 Information Exposure vulnerability in Gitlab
An issue was discovered in GitLab Community and Enterprise Edition 8.13 through 11.11.
network
low complexity
gitlab CWE-200
4.3
2020-03-09 CVE-2011-4538 Information Exposure vulnerability in Lexmark products
Lexmark X, W, T, E, and C devices before 2012-02-09 allow attackers to obtain sensitive information by reading passwords within exported settings.
network
low complexity
lexmark CWE-200
5.3
2020-03-09 CVE-2011-3269 Information Exposure vulnerability in Lexmark products
Lexmark X, W, T, E, C, 6500e, and 25xxN devices before 2011-11-15 allow attackers to obtain sensitive information via a hidden email address in a Scan To Email shortcut.
network
low complexity
lexmark CWE-200
7.5
2020-03-09 CVE-2016-1159 Information Exposure vulnerability in Zohocorp Manageengine Password Manager PRO 8.3/8.4
In ZOHO Password Manager Pro (PMP) 8.3.0 (Build 8303) and 8.4.0 (Build 8400,8401,8402), underprivileged users can obtain sensitive information (entry password history) via a vulnerable hidden service.
network
low complexity
zohocorp CWE-200
6.5
2020-03-09 CVE-2020-9386 Information Exposure vulnerability in Mahara
In Mahara 18.10 before 18.10.5, 19.04 before 19.04.4, and 19.10 before 19.10.2, file metadata information is disclosed to group members in the Elasticsearch result list despite them not having access to that artefact anymore.
network
low complexity
mahara CWE-200
4.3
2020-03-09 CVE-2020-9282 Information Exposure vulnerability in Mahara
In Mahara 18.10 before 18.10.5, 19.04 before 19.04.4, and 19.10 before 19.10.2, certain personal information is discoverable inspecting network responses on the 'Edit access' screen when sharing portfolios.
network
low complexity
mahara CWE-200
6.5
2020-03-05 CVE-2020-10104 Information Exposure vulnerability in Zammad
An issue was discovered in Zammad 3.0 through 3.2.
network
low complexity
zammad CWE-200
4.3
2020-03-05 CVE-2020-10096 Information Exposure vulnerability in Zammad
An issue was discovered in Zammad 3.0 through 3.2.
network
low complexity
zammad CWE-200
7.5