Vulnerabilities > Improper Cross-boundary Removal of Sensitive Data

DATE CVE VULNERABILITY TITLE RISK
2020-01-28 CVE-2020-1940 Improper Cross-boundary Removal of Sensitive Data vulnerability in Apache Jackrabbit OAK
The optional initial password change and password expiration features present in Apache Jackrabbit Oak 1.2.0 to 1.22.0 are prone to a sensitive information disclosure vulnerability.
network
low complexity
apache CWE-212
7.5
2019-12-02 CVE-2019-19362 Improper Cross-boundary Removal of Sensitive Data vulnerability in Teamviewer 14.3.4730
An issue was discovered in the Chat functionality of the TeamViewer desktop application 14.3.4730 on Windows.
network
low complexity
teamviewer CWE-212
6.5
2019-07-08 CVE-2019-13402 Improper Cross-boundary Removal of Sensitive Data vulnerability in Fortinet Fcm-Mb40 Firmware 1.2.0.0
/usr/sbin/default.sh and /usr/apache/htdocs/cgi-bin/admin/hardfactorydefault.cgi on Dynacolor FCM-MB40 v1.2.0.0 devices implement an incomplete factory-reset process.
network
low complexity
fortinet CWE-212
6.5
2018-03-06 CVE-2018-1062 Improper Cross-boundary Removal of Sensitive Data vulnerability in Redhat Ovirt-Engine
A vulnerability was discovered in oVirt 4.1.x before 4.1.9, where the combination of Enable Discard and Wipe After Delete flags for VM disks managed by oVirt, could cause a disk to be incompletely zeroed when removed from a VM.
network
redhat CWE-212
3.5
2005-02-14 CVE-2005-0406 Improper Cross-boundary Removal of Sensitive Data vulnerability in Image Processing Project Image Processing
A design flaw in image processing software that modifies JPEG images might not modify the original EXIF thumbnail, which could lead to an information leak of potentially sensitive visual information that had been removed from the main JPEG image.
local
low complexity
image-processing-project CWE-212
5.5
2002-07-26 CVE-2002-0704 Improper Cross-boundary Removal of Sensitive Data vulnerability in Linux Kernel
The Network Address Translation (NAT) capability for Netfilter ("iptables") 1.2.6a and earlier leaks translated IP addresses in ICMP error messages.
network
low complexity
linux CWE-212
7.5