Vulnerabilities > Information Exposure

DATE CVE VULNERABILITY TITLE RISK
2019-04-17 CVE-2019-9179 Information Exposure vulnerability in Gitlab
An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1.
network
high complexity
gitlab CWE-200
3.7
2019-04-17 CVE-2019-9175 Information Exposure vulnerability in Gitlab
An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1.
network
low complexity
gitlab CWE-200
5.3
2019-04-17 CVE-2018-13378 Information Exposure vulnerability in Fortinet Fortisiem
An information disclosure vulnerability in Fortinet FortiSIEM 5.2.0 and below versions exposes the LDAP server plaintext password via the HTML source code.
network
low complexity
fortinet CWE-200
7.2
2019-04-17 CVE-2018-13808 Information Exposure vulnerability in Siemens CP 1604 Firmware and CP 1616 Firmware
A vulnerability has been identified in CP 1604 (All versions), CP 1616 (All versions).
network
low complexity
siemens CWE-200
critical
9.1
2019-04-12 CVE-2018-6239 Information Exposure vulnerability in Nvidia Jetson TX2 R28.1/R28.2.1
NVIDIA Jetson TX2 contains a vulnerability by means of speculative execution where local and unprivileged code may access the contents of cached information in an unauthorized manner, which may lead to information disclosure.
local
low complexity
nvidia CWE-200
5.5
2019-04-10 CVE-2019-0040 Information Exposure vulnerability in Juniper Junos
On Junos OS, rpcbind should only be listening to port 111 on the internal routing instance (IRI).
network
low complexity
juniper CWE-200
critical
9.1
2019-04-09 CVE-2018-13366 Information Exposure vulnerability in Fortinet Fortios
An information disclosure vulnerability in Fortinet FortiOS 6.0.1, 5.6.7 and below allows attacker to reveals serial number of FortiGate via hostname field defined in connection control setup packets of PPTP protocol.
network
low complexity
fortinet CWE-200
5.3
2019-04-09 CVE-2019-10243 Information Exposure vulnerability in Eclipse Kura
In Eclipse Kura versions up to 4.0.0, Kura exposes the underlying Ui Web server version in its replies.
network
low complexity
eclipse CWE-200
5.3
2019-04-08 CVE-2019-4051 Information Exposure vulnerability in IBM API Connect
Some URIs in IBM API Connect 2018.1 and 2018.4.1.3 disclose system specification information like the machine id, system uuid, filesystem paths, network interface names along with their mac addresses.
network
low complexity
ibm CWE-200
5.3
2019-04-08 CVE-2018-1999 Information Exposure vulnerability in IBM products
IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, and 18.0.0.2 could reveal sensitive version information about the server from error pages that could aid an attacker in further attacks against the system.
network
low complexity
ibm CWE-200
4.3