Vulnerabilities > Information Exposure

DATE CVE VULNERABILITY TITLE RISK
2019-04-01 CVE-2018-13292 Information Exposure vulnerability in Synology Router Manager
Information exposure vulnerability in /usr/syno/etc/mount.conf in Synology Router Manager (SRM) before 1.1.7-6941-2 allows remote authenticated users to obtain sensitive information via the world readable configuration.
network
low complexity
synology CWE-200
4.3
2019-04-01 CVE-2018-13291 Information Exposure vulnerability in Synology Diskstation Manager
Information exposure vulnerability in /usr/syno/etc/mount.conf in Synology DiskStation Manager (DSM) before 6.2.1-23824 allows remote authenticated users to obtain sensitive information via the world readable configuration.
network
low complexity
synology CWE-200
4.3
2019-04-01 CVE-2018-13290 Information Exposure vulnerability in Synology Router Manager
Information exposure vulnerability in SYNO.Core.ACL in Synology Router Manager (SRM) before 1.1.7-6941-2 allows remote authenticated users to determine the existence of files or obtain sensitive information of files via the file_path parameter.
network
low complexity
synology CWE-200
4.3
2019-04-01 CVE-2018-13289 Information Exposure vulnerability in Synology Router Manager
Information exposure vulnerability in SYNO.FolderSharing.List in Synology Router Manager (SRM) before 1.1.7-6941-2 allows remote attackers to obtain sensitive information via the (1) folder_path or (2) real_path parameter.
network
low complexity
synology CWE-200
5.3
2019-04-01 CVE-2018-13288 Information Exposure vulnerability in Synology File Station
Information exposure vulnerability in SYNO.FolderSharing.List in Synology File Station before 1.2.3-0252 and before 1.1.5-0125 allows remote attackers to obtain sensitive information via the (1) folder_path or (2) real_path parameter.
network
low complexity
synology CWE-200
5.3
2019-03-28 CVE-2019-3869 Information Exposure vulnerability in Redhat Ansible Tower
When running Tower before 3.4.3 on OpenShift or Kubernetes, application credentials are exposed to playbook job runs via environment variables.
network
low complexity
redhat CWE-200
7.2
2019-03-28 CVE-2019-1762 Information Exposure vulnerability in Cisco IOS and IOS XE
A vulnerability in the Secure Storage feature of Cisco IOS and IOS XE Software could allow an authenticated, local attacker to access sensitive system information on an affected device.
local
low complexity
cisco CWE-200
4.4
2019-03-27 CVE-2018-19643 Information Exposure vulnerability in Microfocus Solutions Business Manager
Information leakage issue in Micro Focus Solutions Business Manager (SBM) (formerly Serena Business Manager (SBM)) versions prior to 11.5.
network
low complexity
microfocus CWE-200
7.5
2019-03-25 CVE-2015-1012 Information Exposure vulnerability in Pfizer Lifecare PCA Infusion System Firmware 3.0/5.0
Wireless keys are stored in plain text on version 5 of the Hospira LifeCare PCA Infusion System.
network
low complexity
pfizer CWE-200
7.5
2019-03-25 CVE-2015-3952 Information Exposure vulnerability in Pifzer products
Wireless keys are stored in plain text on Hospira Plum A+ Infusion System version 13.4 and prior, Plum A+3 Infusion System version 13.6 and prior, and Symbiq Infusion System, version 3.13 and prior.
network
low complexity
pifzer CWE-200
7.5