Vulnerabilities > Information Exposure Through an Error Message

DATE CVE VULNERABILITY TITLE RISK
2020-10-14 CVE-2020-25778 Information Exposure Through an Error Message vulnerability in Trendmicro Antivirus 2019/2020
Trend Micro Antivirus for Mac 2020 (Consumer) has a vulnerability in a specific kernel extension where an attacker could supply a kernel pointer and leak several bytes of memory.
local
low complexity
trendmicro CWE-209
6.0
2020-10-01 CVE-2020-15666 Information Exposure Through an Error Message vulnerability in Mozilla Firefox
When trying to load a non-video in an audio/video context the exact status code (200, 302, 404, 500, 412, 403, etc.) was disclosed via the MediaError Message.
network
low complexity
mozilla CWE-209
6.5
2020-09-30 CVE-2020-4629 Information Exposure Through an Error Message vulnerability in IBM Websphere Application Server
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a local user with specialized access to obtain sensitive information from a detailed technical error message.
local
low complexity
ibm CWE-209
3.3
2020-09-18 CVE-2020-25633 Information Exposure Through an Error Message vulnerability in multiple products
A flaw was found in RESTEasy client in all versions of RESTEasy up to 4.5.6.Final.
network
low complexity
redhat quarkus CWE-209
5.3
2020-09-15 CVE-2020-24925 Information Exposure Through an Error Message vulnerability in Elkarbackup 1.3.3
A Sensitive Source Code Path Disclosure vulnerability is found in ElkarBackup v1.3.3.
network
low complexity
elkarbackup CWE-209
7.5
2020-09-11 CVE-2018-19947 Information Exposure Through an Error Message vulnerability in Qnap Helpdesk
The vulnerability have been reported to affect earlier versions of Helpdesk.
network
low complexity
qnap CWE-209
6.5
2020-08-27 CVE-2020-4166 Information Exposure Through an Error Message vulnerability in IBM Security Guardium Insights 2.0.1
IBM Security Guardium Insights 2.0.1 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser.
network
low complexity
ibm CWE-209
5.3
2020-08-26 CVE-2019-4699 Information Exposure Through an Error Message vulnerability in IBM products
IBM Security Guardium Data Encryption (GDE) 3.0.0.2 generates an error message that includes sensitive information about its environment, users, or associated data.
network
low complexity
ibm CWE-209
2.7
2020-08-05 CVE-2020-15132 Information Exposure Through an Error Message vulnerability in Sulu
In Sulu before versions 1.6.35, 2.0.10, and 2.1.1, when the "Forget password" feature on the login screen is used, Sulu asks the user for a username or email address.
network
low complexity
sulu CWE-209
5.3
2020-07-31 CVE-2020-14337 Information Exposure Through an Error Message vulnerability in Redhat Ansible Tower 3.0.0
A data exposure flaw was found in Tower, where sensitive data was revealed from the HTTP return error codes.
network
low complexity
redhat CWE-209
5.8