Vulnerabilities > Information Exposure

DATE CVE VULNERABILITY TITLE RISK
2019-05-06 CVE-2018-18977 Information Exposure vulnerability in Ascensia Contour Diabetes
An issue was discovered in the Ascensia Contour NEXT ONE application for Android before 2019-01-15.
network
low complexity
ascensia CWE-200
7.5
2019-05-06 CVE-2018-18975 Information Exposure vulnerability in Ascensia Contour Diabetes
An issue was discovered in the Ascensia Contour NEXT ONE app for iOS before 2019-01-15.
network
low complexity
ascensia CWE-200
7.5
2019-05-06 CVE-2018-4071 Information Exposure vulnerability in Sierrawireless Airlink Es450 Firmware 4.9.3
An exploitable Information Disclosure vulnerability exists in the ACEManager EmbeddedAceGet_Task.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3.
network
low complexity
sierrawireless CWE-200
8.8
2019-05-06 CVE-2018-4070 Information Exposure vulnerability in Sierrawireless Airlink Es450 Firmware 4.9.3
An exploitable Information Disclosure vulnerability exists in the ACEManager EmbeddedAceGet_Task.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3.
network
low complexity
sierrawireless CWE-200
8.8
2019-05-06 CVE-2018-4067 Information Exposure vulnerability in Sierrawireless Airlink Es450 Firmware 4.9.3
An exploitable information disclosure vulnerability exists in the ACEManager template_load.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3.
network
low complexity
sierrawireless CWE-200
6.5
2019-05-06 CVE-2018-4069 Information Exposure vulnerability in Sierrawireless Airlink Es450 Firmware 4.9.3
An information disclosure vulnerability exists in the ACEManager authentication functionality of Sierra Wireless AirLink ES450 FW 4.9.3.
network
low complexity
sierrawireless CWE-200
7.5
2019-05-06 CVE-2018-4068 Information Exposure vulnerability in Sierrawireless Airlink Es450 Firmware 4.9.3
An exploitable information disclosure vulnerability exists in the ACEManager functionality of Sierra Wireless AirLink ES450 FW 4.9.3.
network
low complexity
sierrawireless CWE-200
5.3
2019-05-06 CVE-2019-3797 Information Exposure vulnerability in Pivotal Software Spring Data Java Persistence API
This affects Spring Data JPA in versions up to and including 2.1.5, 2.0.13 and 1.11.19.
network
low complexity
pivotal-software CWE-200
5.3
2019-05-01 CVE-2019-11633 Information Exposure vulnerability in Honeypress Project Honeypress 20160927
HoneyPress through 2016-09-27 can be fingerprinted by attackers because of the ingrained unique www.atxsec.com and ayylmao.wpengine.com hostnames within the fake WordPress templates.
network
low complexity
honeypress-project CWE-200
7.5
2019-04-30 CVE-2018-20510 Information Exposure vulnerability in Linux Kernel 4.14.90
The print_binder_transaction_ilocked function in drivers/android/binder.c in the Linux kernel 4.14.90 allows local users to obtain sensitive address information by reading "*from *code *flags" lines in a debugfs file.
local
low complexity
linux CWE-200
5.5