Vulnerabilities > Incomplete Cleanup

DATE CVE VULNERABILITY TITLE RISK
2020-06-15 CVE-2020-0543 Incomplete Cleanup vulnerability in multiple products
Incomplete cleanup from specific special register read operations in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
5.5
2020-06-11 CVE-2020-0183 Incomplete Cleanup vulnerability in Google Android 10.0
In handleMessage of BluetoothManagerService, there is an incomplete reset.
local
low complexity
google CWE-459
7.8
2020-05-18 CVE-2020-12857 Incomplete Cleanup vulnerability in Health Covidsafe 1.0.11/1.0.16/1.0.17
Caching of GATT characteristic values (TempID) in COVIDSafe v1.0.15 and v1.0.16 allows a remote attacker to long-term re-identify an Android device running COVIDSafe.
network
low complexity
health CWE-459
7.5
2020-05-11 CVE-2020-10685 Incomplete Cleanup vulnerability in multiple products
A flaw was found in Ansible Engine affecting Ansible Engine versions 2.7.x before 2.7.17 and 2.8.x before 2.8.11 and 2.9.x before 2.9.7 as well as Ansible Tower before and including versions 3.4.5 and 3.5.5 and 3.6.3 when using modules which decrypts vault files such as assemble, script, unarchive, win_copy, aws_s3 or copy modules.
local
low complexity
redhat debian CWE-459
5.5
2020-05-03 CVE-2020-12624 Incomplete Cleanup vulnerability in Theleague the League
The League application before 2020-05-02 on Android sends a bearer token in an HTTP Authorization header to an arbitrary web site that hosts an external image because an OkHttp object is reused, which allows remote attackers to hijack sessions.
network
low complexity
theleague CWE-459
6.5
2020-03-12 CVE-2020-5961 Incomplete Cleanup vulnerability in Nvidia Virtual GPU Graphics Driver
NVIDIA vGPU graphics driver for guest OS contains a vulnerability in which an incorrect resource clean up on a failure path can impact the guest VM, leading to denial of service.
local
low complexity
nvidia CWE-459
5.5
2019-12-30 CVE-2012-5663 Incomplete Cleanup vulnerability in Openbsd Textproc/Isearch
The isearch package (textproc/isearch) before 1.47.01nb1 uses the tempnam() function to create insecure temporary files into a publicly-writable area (/tmp).
network
low complexity
openbsd CWE-459
7.5
2019-12-18 CVE-2019-8768 Incomplete Cleanup vulnerability in Apple mac OS X
"Clear History and Website Data" did not clear the history.
network
low complexity
apple CWE-459
5.3
2019-12-18 CVE-2019-8730 Incomplete Cleanup vulnerability in Apple mac OS X
The contents of locked notes sometimes appeared in search results.
local
low complexity
apple CWE-459
3.3
2019-12-18 CVE-2019-8550 Incomplete Cleanup vulnerability in Apple mac OS X
An issue existed in the pausing of FaceTime video.
network
low complexity
apple CWE-459
4.3