In llcp_link_proc_agf_pdu of llcp_link.cc in Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 and Android-9 there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure over NFC with no additional execution privileges needed. User interaction is not needed for exploitation. Android ID: A-116791157.


In readBytes of xltdecwbxml.c there is a possible out of bounds read due to an integer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-9. Android ID: A-16680558.


Improper input validation together with an integer overflow in the EAP-TLS protocol implementation in PPPD may cause a crash information disclosure or authentication bypass. This implementation is distributed as a patch for PPPD 0.91 and includes the affected eap.c and eap-tls.c files. Configurations that use the `refuse-app` option are unaffected.


Adobe Acrobat and Reader versions 2019.008.20081 and earlier 2019.008.20080 and earlier 2019.008.20081 and earlier 2017.011.30106 and earlier version 2017.011.30105 and earlier version 2015.006.30457 and earlier and 2015.006.30456 and earlier have an integer overflow vulnerability. Successful exploitation could lead to information disclosure.


In NDEF_MsgValidate of ndef_utils.c there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure if a malformed NFC tag is provided by the firmware. System execution privileges are needed and user interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-145520471


In crus_afe_get_param of msm-cirrus-playback.c there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: Android. Versions: Android kernel. Android ID: A-139354541


In addPacket of AMPEG4ElementaryAssembler there is an out of bounds read due to an integer overflow. This could lead to remote information disclosure with no additional execution privileges required. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-123940919


In load of ResourceTypes.cpp there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-129475100


In the camera there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-150156131


In decode_Huffman of JBig2_SddProc.cpp there is a possible out of bounds write due to an integer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-155473137


In Parse_wave of eas_mdls.c there is a possible out of bounds write due to an integer overflow. This could lead to remote information disclosure in a highly constrained process with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10 Android-11Android ID: A-150159669


A vulnerability was found in libexif. An integer overflow when parsing the MNOTE entry data of the input file. This can cause Denial-of-Service (DoS) and Information Disclosure (disclosing some critical heap chunk metadata even other applications' private data).

information disclosure
integer overflow
dos


An integer overflow in the search_in_range function in regexec.c in Oniguruma 6.x before 6.9.4_rc2 leads to an out-of-bounds read in which the offset of this read is under the control of an attacker. (This only affects the 32-bit compiled version). Remote attackers can cause a denial-of-service or information disclosure or possibly have unspecified other impact via a crafted regular expression.

information disclosure
integer overflow
out of bound read


Adobe Bridge CC versions 9.1 and earlier have a memory corruption vulnerability. Successful exploitation could lead to information disclosure.

information disclosure
memory corruption


In (TBD) of (TBD) there is a possible out of bounds read due to memory corruption. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-182950799References: N/A


In ged there is a possible memory corruption due to an incorrect error handling. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05838808; Issue ID: ALPS05839556.


Ruby before 2.4.2 2.3.5 and 2.2.8 is vulnerable to a malicious format string which contains a precious specifier (*) with a huge minus value. Such situation can lead to a buffer overrun resulting in a heap memory corruption or an information disclosure from the heap.


This document describes a security vulnerability in Blade Maintenance Entity Integrated Maintenance Entity and Maintenance Entity products. All J/H-series NonStop systems have a security vulnerability associated with an open UDP port 17185 on the Maintenance LAN which could result in information disclosure denial-of-service attacks or local memory corruption against the affected system and a complete control of the system may also be possible. This vulnerability exists only if one gains access to the Maintenance LAN to which Blade Maintenance Entity Integrated Maintenance Entity or Maintenance Entity product is connected. **Workaround:** Block the UDP port 17185(In the Maintenance LAN Network Switch/Firewall). Fix: Install following SPRs which are already available: * T1805A01^AAI (Integrated Maintenance Entity) * T4805A01^AAZ (Blade Maintenance Entity). These SPRs are also usable with the following RVUs: * J06.19.00 ? J06.23.01. No fix planned for the following RVUs: J06.04.00 ? J06.18.01. No fix planned for H-Series NonStop systems. No fix planned for the product T2805 (Maintenance Entity).


In CPDF_RenderStatus::LoadSMask of cpdf_renderstatus.cpp there is a possible memory corruption due to a use-after free. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-149481220


An issue was discovered in Foxit Reader and PhantomPDF before 9.4 on Windows. It is an Out-of-Bounds Read Information Disclosure and crash due to a NULL pointer dereference when reading TIFF data during TIFF parsing.

information disclosure
null pointer dereference
out of bound read


Adobe Acrobat and Reader versions 2018.011.20063 and earlier 2017.011.30102 and earlier and 2015.006.30452 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.

information disclosure
out of bound read


Adobe Acrobat and Reader 2018.011.20040 and earlier 2017.011.30080 and earlier and 2015.006.30418 and earlier versions have an Out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.


Adobe Acrobat and Reader versions 2018.011.20058 and earlier 2017.011.30099 and earlier and 2015.006.30448 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.


Adobe Acrobat and Reader versions 2018.011.20038 and earlier 2017.011.30079 and earlier and 2015.006.30417 and earlier have an Out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.


Adobe Acrobat and Reader versions 2020.006.20042 and earlier 2017.011.30166 and earlier 2017.011.30166 and earlier and 2015.006.30518 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.


Adobe Acrobat and Reader versions 2020.009.20074 and earlier 2020.001.30002 2017.011.30171 and earlier and 2015.006.30523 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.


Adobe Acrobat and Reader versions 2019.021.20061 and earlier 2017.011.30156 and earlier 2017.011.30156 and earlier and 2015.006.30508 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure .


Adobe After Effects versions 17.0.1 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure .


Adobe Bridge CC versions 9.0.2 have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.


Adobe Bridge versions 10.0.1 and earlier version have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.


Adobe Digital Editions versions 4.5.7 and below have an exploitable Out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.


Adobe DNG Software Development Kit (SDK) 1.5 and earlier versions have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.


Adobe Flash Player versions 32.0.0.156 and earlier 32.0.0.156 and earlier and 32.0.0.156 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure .


Adobe Flash Player versions 29.0.0.171 and earlier have an Out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.


Adobe Flash Player versions 29.0.0.113 and earlier have an exploitable out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.


Adobe Acrobat and Reader versions 2019.010.20069 and earlier 2019.010.20069 and earlier 2017.011.30113 and earlier version and 2015.006.30464 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.


Adobe Acrobat and Reader versions 2019.010.20100 and earlier 2019.010.20099 and earlier 2017.011.30140 and earlier 2017.011.30138 and earlier 2015.006.30495 and earlier and 2015.006.30493 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.


Adobe Acrobat and Reader versions 2019.010.20098 and earlier 2019.010.20098 and earlier 2017.011.30127 and earlier version and 2015.006.30482 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure .


Adobe Acrobat and Reader versions 2019.010.20100 and earlier 2019.010.20099 and earlier 2017.011.30140 and earlier version 2017.011.30138 and earlier version 2015.006.30495 and earlier and 2015.006.30493 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure .


Adobe Acrobat and Reader versions 2019.010.20100 and earlier 2019.010.20099 and earlier 2017.011.30140 and earlier 2017.011.30138 and earlier 2015.006.30495 and earlier and 2015.006.30493 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure .


Adobe Media Encoder version 13.0.2 has an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.


Adobe Acrobat and Reader versions 2019.010.20100 and earlier 2019.010.20099 and earlier 2017.011.30140 and earlier version 2017.011.30138 and earlier version 2015.006.30495 and earlier and 2015.006.30493 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.


Flash Player Desktop Runtime versions 32.0.0.114 and earlier Flash Player for Google Chrome versions 32.0.0.114 and earlier and Flash Player for Microsoft Edge and Internet Explorer 11 versions 32.0.0.114 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.


Adobe Acrobat and Reader versions 2019.010.20100 and earlier 2019.010.20099 and earlier 2017.011.30140 and earlier version 2017.011.30138 and earlier 2015.006.30495 and earlier and 2015.006.30493 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.


VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001) Workstation (15.x before 15.0.3 and 14.x before 14.1.6) and Fusion (11.x before 11.0.3 and 10.x before 10.1.6) contain an out-of-bounds read vulnerability in the pixel shader functionality. Successful exploitation of this issue may lead to information disclosure or may allow attackers with normal user privileges to create a denial-of-service condition on the host. Exploitation of this issue require an attacker to have access to a virtual machine with 3D graphics enabled. It is not enabled by default on ESXi and is enabled by default on Workstation and Fusion.


VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001) Workstation (15.x before 15.0.3 and 14.x before 14.1.6) Fusion (11.x before 11.0.3 and 10.x before 10.1.6) updates address an out-of-bounds read vulnerability. Exploitation of this issue requires an attacker to have access to a virtual machine with 3D graphics enabled. Successful exploitation of this issue may lead to information disclosure.The workaround for this issue involves disabling the 3D-acceleration feature. This feature is not enabled by default on ESXi and is enabled by default on Workstation and Fusion.


VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001) Workstation (15.x before 15.0.3 and 14.x before 14.1.6) Fusion (11.x before 11.0.3 and 10.x before 10.1.6) contain multiple out-of-bounds read vulnerabilities in the shader translator. Exploitation of these issues requires an attacker to have access to a virtual machine with 3D graphics enabled. Successful exploitation of these issues may lead to information disclosure or may allow attackers with normal user privileges to create a denial-of-service condition on their own VM. The workaround for these issues involves disabling the 3D-acceleration feature. This feature is not enabled by default on ESXi and is enabled by default on Workstation and Fusion.


In Xpdf 4.01.01 there is an out-of-bounds read vulnerability in the function SplashXPath::strokeAdjust() located at splash/SplashXPath.cc. It can for example be triggered by sending a crafted PDF document to the pdftoppm tool. It might allow an attacker to cause Information Disclosure. This is related to CVE-2018-16368.


Delta Industrial Automation CNCSoft CNCSoft ScreenEditor Version 1.00.88 and prior. Multiple out-of-bounds read vulnerabilities may be exploited allowing information disclosure due to a lack of user input validation for processing specially crafted project files.


Delta Electronics CNCSoft ScreenEditor Versions 1.00.89 and prior. Multiple out-of-bounds read vulnerabilities may cause information disclosure due to lacking user input validation for processing project files.


When importing a curve25519 private key in PKCS#8format with leading 0x00 bytes it is possible to trigger an out-of-bounds read in the Network Security Services (NSS) library. This could lead to information disclosure. This vulnerability affects Firefox ESR < 60.8 Firefox < 68 and Thunderbird < 60.8.


Adobe Acrobat and Reader versions 2019.021.20056 and earlier 2017.011.30152 and earlier 2017.011.30155 and earlier version 2017.011.30152 and earlier and 2015.006.30505 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure .


Adobe Acrobat and Reader versions 2019.012.20040 and earlier 2017.011.30148 and earlier 2017.011.30148 and earlier 2015.006.30503 and earlier and 2015.006.30503 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure .


Adobe Acrobat and Reader versions 2019.012.20035 and earlier 2019.012.20035 and earlier 2017.011.30142 and earlier 2017.011.30143 and earlier 2015.006.30497 and earlier and 2015.006.30498 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure .


The bpf verifier in the Linux kernel did not properly handle mod32 destination register truncation when the source register was known to be 0. A local attacker with the ability to load bpf programs could use this gain out-of-bounds reads in kernel memory leading to information disclosure (kernel memory) and possibly out-of-bounds writes that could potentially lead to code execution. This issue was addressed in the upstream kernel in commit 9b00f1b78809 (\bpf: Fix truncation handling for mod32 dst reg wrt zero\) and in Linux stable kernels 5.11.2 5.10.19 and 5.4.101.


In pfkey_dump of af_key.c there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure in the kernel with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-110373476


An out-of-bounds read vulnerability exists in the GCode::extrude() functionality of Slic3r libslic3r 1.3.0 and Master Commit b1a5500. A specially crafted stl file could lead to information disclosure. An attacker can provide a malicious file to trigger this vulnerability.


Node.js before 16.4.1 14.17.2 12.22.2 is vulnerable to an out-of-bounds read when uv__idna_toascii() is used to convert strings to ASCII. The pointer p is read and increased without checking whether it is beyond pe with the latter holding a pointer to the end of the buffer. This can lead to information disclosures or crashes. This function can be triggered via uv_getaddrinfo().


VMware Workstation (16.x prior to 16.1.2) and Horizon Client for Windows (5.x prior to 5.5.2) contain out-of-bounds read vulnerability in the Cortado ThinPrint component (TTC Parser). A malicious actor with access to a virtual machine or remote desktop may be able to exploit these issues leading to information disclosure from the TPView process running on the system where Workstation or Horizon Client for Windows is installed.


VMware Workstation (16.x prior to 16.1.2) and Horizon Client for Windows (5.x prior to 5.5.2) contain out-of-bounds read vulnerability in the Cortado ThinPrint component (JPEG2000 Parser). A malicious actor with access to a virtual machine or remote desktop may be able to exploit these issues leading to information disclosure from the TPView process running on the system where Workstation or Horizon Client for Windows is installed.


An Out-Of-Bounds Read Vulnerability in Autodesk FBX Review version 1.5.0 and prior may lead to code execution through maliciously crafted DLL files or information disclosure.


An out-of-bounds read vulnerability exists in the RS-274X aperture macro multiple outline primitives functionality of Gerbv 2.7.0 and dev (commit b5f1eacd) and Gerbv forked 2.7.1 and 2.8.0. A specially-crafted Gerber file can lead to information disclosure. An attacker can provide a malicious file to trigger this vulnerability.


An out-of-bounds read vulnerability exists in the RS-274X aperture macro outline primitive functionality of Gerbv 2.7.0 and dev (commit b5f1eacd) and the forked version of Gerbv (commit d7f42a9a). A specially-crafted Gerber file can lead to information disclosure. An attacker can provide a malicious file to trigger this vulnerability.


NVIDIA driver contains a possible out-of-bounds read vulnerability due to a leak which may lead to information disclosure. This issue is rated as moderate. Android: A-63851980.


Adobe Acrobat and Reader versions 2019.008.20081 and earlier 2019.008.20080 and earlier 2019.008.20081 and earlier 2017.011.30106 and earlier version 2017.011.30105 and earlier version 2015.006.30457 and earlier and 2015.006.30456 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.


Adobe Acrobat and Reader versions 2018.011.20058 and earlier 2017.011.30099 and earlier and 2015.006.30448 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure. Note: A different vulnerability than CVE-2018-19721.


Adobe Acrobat and Reader versions 2018.011.20058 and earlier 2017.011.30099 and earlier and 2015.006.30448 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure. Note: A different vulnerability than CVE-2018-19723.


In rfc_process_mx_message of rfc_ts_frames.cc there is a possible out-of-bounds read due to a missing bounds check. This could lead to remote information disclosure in the Bluetooth service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9.0 Android ID: A-111936792


In avrc_pars_vendor_rsp of avcr_pars_ct.cc there is a possible out-of-bounds read due to a missing bounds check. This could lead to remote information disclosure in the Bluetooth service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-111450531


In register_app of btif_hd.cc there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure in the Bluetooth service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-9. Android ID: A-113037220


An exploitable information vulnerability exists in the XCF image rendering functionality of Simple DirectMedia Layer SDL2_image-2.0.2. A specially crafted XCF image can cause an out-of-bounds read on the heap resulting in information disclosure. An attacker can display a specially crafted image to trigger this vulnerability.


Adobe Flash Player 30.0.0.134 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.


Adobe Flash Player 30.0.0.113 and earlier versions have an Out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.


Flash Player versions 31.0.0.122 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.


In Android before the 2018-05-05 security patch level NVIDIA Media Server contains an out-of-bounds read (due to improper input validation) vulnerability which could lead to local information disclosure. This issue is rated as moderate. Android: A-64340684. Reference: N-CVE-2018-6254.


VMware ESXi (6.7 before ESXi670-201806401-BG) Workstation (14.x before 14.1.2) and Fusion (10.x before 10.1.2) contain an out-of-bounds read vulnerability in the shader translator. Successful exploitation of this issue may lead to information disclosure or may allow attackers with normal user privileges to crash their VMs a different vulnerability than CVE-2018-6966 and CVE-2018-6967.


VMware Tools (10.x and prior before 10.3.0) contains an out-of-bounds read vulnerability in HGFS. Successful exploitation of this issue may lead to information disclosure or may allow attackers to escalate their privileges on the guest VMs. In order to be able to exploit this issue file sharing must be enabled.


VMware ESXi (6.7 before ESXi670-201806401-BG) Workstation (14.x before 14.1.2) and Fusion (10.x before 10.1.2) contain an out-of-bounds read vulnerability in the shader translator. Successful exploitation of this issue may lead to information disclosure or may allow attackers with normal user privileges to crash their VMs a different vulnerability than CVE-2018-6965 and CVE-2018-6966.


VMware ESXi (6.7 before ESXi670-201806401-BG) Workstation (14.x before 14.1.2) and Fusion (10.x before 10.1.2) contain an out-of-bounds read vulnerability in the shader translator. Successful exploitation of this issue may lead to information disclosure or may allow attackers with normal user privileges to crash their VMs a different vulnerability than CVE-2018-6965 and CVE-2018-6967.


Adobe Acrobat and Reader versions 2019.008.20081 and earlier 2019.008.20080 and earlier 2019.008.20081 and earlier 2017.011.30106 and earlier version 2017.011.30105 and earlier version 2015.006.30457 and earlier and 2015.006.30456 and earlier have a out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.


Adobe Campaign Classic before 20.2 have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.


Adobe Audition versions 13.0.5 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.


Adobe Premiere Rush versions 1.5.8 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.


Adobe Premiere Pro versions 14.1 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.


An out-of-bounds read information disclosure vulnerabilities in Trend Micro Apex One may allow a local attacker to disclose sensitive information to an unprivileged account on vulnerable installations of the product. An attacker must first obtain the ability to execute low-privileged code on the target in order to exploit these vulnerabilities. The subs affected in this vulnerability makes it unique compared to similar CVEs such as CVE-2020-24565 and CVE-2020-25770.


An out-of-bounds read information disclosure vulnerabilities in Trend Micro Apex One may allow a local attacker to disclose sensitive information to an unprivileged account on vulnerable installations of the product. An attacker must first obtain the ability to execute low-privileged code on the target in order to exploit these vulnerabilities. The subs affected in this vulnerability makes it unique compared to similar CVEs such as CVE-2020-24564 and CVE-2020-25770.


An out-of-bounds read information disclosure vulnerabilities in Trend Micro Apex One may allow a local attacker to disclose sensitive information to an unprivileged account on vulnerable installations of the product. An attacker must first obtain the ability to execute low-privileged code on the target in order to exploit these vulnerabilities. The subs affected in this vulnerability makes it unique compared to similar CVEs such as CVE-2020-24564 and CVE-2020-25771.


An issue was discovered in picoTCP 1.7.0. The code for processing the IPv6 headers does not validate whether the IPv6 payload length field is equal to the actual size of the payload which leads to an Out-of-Bounds read during the ICMPv6 checksum calculation resulting in either Denial-of-Service or Information Disclosure. This affects pico_ipv6_extension_headers and pico_checksum_adder (in pico_ipv6.c and pico_frame.c).


GoPro gpmf-parser 1.5 has a heap out-of-bounds read and segfault in GPMF_ScaledData(). Parsing malicious input can result in a crash or information disclosure.


In avdt_msg_prs_rej of avdt_msg.cc there is a possible out-of-bounds read due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-79702484


In A2DP_GetCodecType of a2dp_codec_config there is a possible out-of-bounds read due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10 Android ID: A-79703353.


An out-of-bounds read vulnerability exists in the Obj File TriangleMesh::TriangleMesh() functionality of Slic3r libslic3r 1.3.0 and Master Commit 92abbc42. A specially crafted obj file could lead to information disclosure. An attacker can provide a malicious file to trigger this vulnerability.


An out-of-bounds read vulnerability exists in the AMF File AMFParserContext::endElement() functionality of Slic3r libslic3r 1.3.0 and Master Commit 92abbc42. A specially crafted AMF file can lead to information disclosure. An attacker can provide a malicious file to trigger this vulnerability.


An out-of-bounds read vulnerability was found in the SLiRP networking implementation of the QEMU emulator. This flaw occurs in the icmp6_send_echoreply() routine while replying to an ICMP echo request also known as ping. This flaw allows a malicious guest to leak the contents of the host memory resulting in possible information disclosure. This flaw affects versions of libslirp before 4.3.1.


Adobe Acrobat and Reader versions 2020.006.20034 and earlier 2017.011.30158 and earlier 2017.011.30158 and earlier 2015.006.30510 and earlier and 2015.006.30510 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure .


A large out-of-bounds read on the heap vulnerability in Foxit PDF Reader can potentially be abused for information disclosure. Combined with another vulnerability it can be used to leak heap memory layout and in bypassing ASLR.


There is an Information Disclosure Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cause out-of-bounds read.


Adobe Media Encoder versions 13.1 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.


Adobe Media Encoder versions 14.2 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.


Out-of-bounds read vulnerability in CX-Supervisor v4.0.0.13 and v4.0.0.16 allows an attacker with administrative privileges to cause information disclosure and/or arbitrary code execution by opening a specially crafted SCS project files.


Out-of-bounds read in some Intel(R) Core(TM) processors with Radeon(TM) RX Vega M GL integrated graphics before version 21.10 may allow an authenticated user to potentially enable information disclosure via local access.


Out-of-bounds read in the Intel(R) Trace Analyzer and Collector before version 2021.5 may allow an authenticated user to potentially enable information disclosure via local access.


Out-of-bounds read vulnerability in CX-Programmer v9.76.1 and earlier which is a part of CX-One (v4.60) suite allows an attacker to cause information disclosure and/or arbitrary code execution by having a user to open a specially crafted CXP file.


Out-of-bounds read in DHCP subsystem for Intel(R) AMT Intel(R) ISM versions before 11.8.80 11.12.80 11.22.80 12.0.70 and 14.0.45 may allow an unauthenticated user to potentially enable information disclosure via network access.


Out-of-bounds read in DHCPv6 subsystem in Intel(R) AMT and Intel(R)ISM versions before 11.8.77 11.12.77 11.22.77 12.0.64 and 14.0.33 may allow an unauthenticated user to potentially enable information disclosure via network access.


Out-of-bounds read in subsystem for Intel(R) AMT Intel(R) ISM versions before 11.8.80 11.12.80 11.22.80 12.0.70 and 14.0.45 may allow an unauthenticated user to potentially enable information disclosure via network access.


Out-of-bounds read in kernel mode driver for some Intel(R) Wireless Bluetooth(R) products on Windows* 10 may allow a privileged user to potentially enable information disclosure via local access.


Out-of-bounds read in subsystem in Intel(R) AMT versions before 11.8.80 11.12.80 11.22.80 12.0.70 and 14.0.45 may allow a privileged user to potentially enable information disclosure via local access.


Adobe Photoshop CC 2019 versions 20.0.8 and earlier and Photoshop 2020 versions 21.1 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.


Adobe Photoshop CC versions 19.1.6 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.


Adobe Photoshop versions Photoshop CC 2019 and Photoshop 2020 have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.


In gadget_dev_desc_UDC_show of configfs.c there is a possible disclosure of kernel heap memory due to a race condition. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-160822094References: Upstream kernel


In usb_gadget_giveback_request of core.c there is a possible use after free out of bounds read due to a race condition. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-161010552References: Upstream kernel


In

eicPresentationRetrieveEntryValue

of

there

is

a

possible

information

disclosure

due

to

a

race

condition.

This

could

lead

to

local

information

disclosure

with

System

execution

privileges

needed.

User

interaction

is

not

needed

for

exploitation.Product:

AndroidVersions:

Android

kernelAndroid

ID:


In several functions of ScreenshotHelper.java and related files there is a possible incorrectly saved screenshot due to a race condition. This could lead to local information disclosure across user profiles with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-170474245


In is_device_locked and set_device_locked of keystore_keymaster_enforcement.h there is a possible bypass of lockscreen requirements for keyguard bound keys due to a race condition. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10 Android-11; Android ID: A-169933423.


In aee daemon there is a possible information disclosure due to a race condition. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06383944; Issue ID: ALPS06383944.


In SoundTriggerHwService there is a possible out of bounds read due to a race condition. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-146894086


In OutputBuffersArray::realloc of CCodecBuffers.cpp there is a possible heap disclosure due to a race condition. This could lead to remote information disclosure with System execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-142544793


In TimeCheck::TimeCheckThread::threadLoop of TimeCheck.cpp there is a possible use-after-free due to a race condition. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-142142406


In LowEnergyClient::MtuChangedCallback of low_energy_client.cc there is a possible out of bounds read due to a race condition. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-8.0 Android-8.1 Android-9 and Android-10 Android ID: A-142558228


A race condition in specific microprocessors using Intel (R) DDIO cache allocation and RDMA may allow an authenticated user to potentially enable partial information disclosure via adjacent access.


In vow driver there is a possible memory corruption due to a race condition. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05852822; Issue ID: ALPS05852822.

information disclosure
race condition
memory corruption


In all android releases(Android for MSM Firefox OS for MSM QRD Android) from CAF using the linux kernel Uninitialized data for socket address leads to information exposure.


In Android for MSM Firefox OS for MSM QRD Android with all Android releases from CAF using the Linux kernel untrusted pointer dereference in update_userspace_power() function in power leads to information exposure.


OX App Suite through 7.10.3 allows Information Exposure because a user can obtain the IP address and User-Agent string of a different user (via the session API during shared Drive access).


In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.840 File and Directory Information Exposure in filemanager allows attackers to enumerate users and check for active users of the application by reading /tmp/login.log.


A CWE-200: Information Exposure vulnerability exists in all versions of the Modicon M580 Modicon M340 Modicon Quantum and Modicon Premium which could cause the disclosure of SNMP information when reading variables in the controller using Modbus.


A CWE-200: Information Exposure vulnerability exists in Easergy T300 with firmware V2.7.1 and older that exposes sensitive information to an actor not explicitly authorized to have access to that information.


A CWE-200: Information Exposure vulnerability exists which could allow a session hijack when the door panel is communicating with the door. Affected Product: Ritto Wiser Door (All versions)


A CWE-200: Information Exposure vulnerability exists in all versions of the Modicon M580 Modicon M340 Modicon Quantum and Modicon Premium which could cause the disclosure of SNMP information when reading files from the controller over Modbus


A CWE-200: Information Exposure vulnerability exists in all versions of the Modicon M580 Modicon M340 Modicon Quantum and Modicon Premium which could cause the disclosure of SNMP information when reading memory blocks from the controller over Modbus.


A CWE-200: Information Exposure vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which could allow attacker to obtain private keys.


Information Exposure vulnerability in Samsung Notes prior to version 4.2.04.27 allows attacker to access s pen latency information.


Information exposure vulnerability in Gear S Plugin prior to version 2.2.05.20122441 allows unstrusted applications to access connected BT device information.


Information exposure vulnerability in Samsung Members prior to versions 2.4.85.11 in Android O(8.1) and below and 3.9.10.11 in Android P(9.0) and above allows untrusted applications to access chat data.


Information Exposure vulnerability in SmartThings prior to version 1.7.64.21 allows attacker to access user information via log.


Information Exposure vulnerability in Samsung Account prior to version 12.1.1.3 allows physically proximate attackers to access user information via log.


Information Exposure vulnerability in Galaxy Watch3 Plugin prior to version 2.2.09.22012751 allows attacker to access password information of connected WiFiAp in the log


Information Exposure vulnerability in Watch Active Plugin prior to version 2.2.07.22012751 allows attacker to access password information of connected WiFiAp in the log


Information Exposure vulnerability in Watch Active2 Plugin prior to version 2.2.08.22012751 allows attacker to access password information of connected WiFiAp in the log


Information Exposure vulnerability in Galaxy Watch Plugin prior to version 2.2.05.22012751 allows attacker to access password information of connected WiFiAp in the log


Information Exposure vulnerability in Galaxy Watch Plugin prior to version 2.2.05.220126741 allows attackers to access user information in log.


Information Exposure vulnerability in Galaxy S3 Plugin prior to version 2.2.03.22012751 allows attacker to access password information of connected WiFiAp in the log


Information Exposure vulnerability in web UI of Secomea GateManager allows logged in user to query devices outside own scope.


Information exposure vulnerability in Samsung DeX Home prior to SMR April-2022 Release 1 allows to access currently launched foreground app information without permission


Information exposure vulnerability in ril property setting prior to SMR April-2022 Release 1 allows access to EF_RUIMID value without permission.


Information exposure vulnerability in One UI Home prior to SMR April-2022 Release 1 allows to access currently launched foreground app information without permission.


Information exposure vulnerability in SYNO.Core.Desktop.SessionData in Synology DiskStation Manager (DSM) before 6.1.6-15266 allows remote attackers to steal credentials via unspecified vectors.


Information exposure vulnerability in SYNO.Core.ACL in Synology DiskStation Manager (DSM) before 6.2-23739-2 allows remote authenticated users to determine the existence and obtain the metadata of arbitrary files via the file_path parameter.


Information exposure vulnerability in /usr/syno/etc/mount.conf in Synology DiskStation Manager (DSM) before 6.2.1-23824 allows remote authenticated users to obtain sensitive information via the world readable configuration.


Information exposure vulnerability in SYNO.FolderSharing.List in Synology Router Manager (SRM) before 1.1.7-6941-2 allows remote attackers to obtain sensitive information via the (1) folder_path or (2) real_path parameter.


Information exposure vulnerability in SYNO.Personal.Application.Info in Synology Application Service before 1.5.4-0320 allows remote authenticated users to obtain sensitive system information via the version parameter.


Information exposure vulnerability in SYNO.Core.ACL in Synology Router Manager (SRM) before 1.1.7-6941-2 allows remote authenticated users to determine the existence of files or obtain sensitive information of files via the file_path parameter.


Information exposure vulnerability in SYNO.FolderSharing.List in Synology File Station before 1.2.3-0252 and before 1.1.5-0125 allows remote attackers to obtain sensitive information via the (1) folder_path or (2) real_path parameter.


Information exposure vulnerability in SYNO.Personal.Profile in Synology Application Service before 1.5.4-0320 allows remote authenticated users to obtain sensitive system information via the uid parameter.


Information exposure vulnerability in /usr/syno/etc/mount.conf in Synology Router Manager (SRM) before 1.1.7-6941-2 allows remote authenticated users to obtain sensitive information via the world readable configuration.


Information exposure vulnerability in SYNO.SynologyDrive.Files in Synology Drive before 1.1.2-10562 allows remote attackers to obtain sensitive system information via the dsm_path parameter.


A flaw was found in KeePass. The vulnerability occurs due to logging the plain text passwords in the system log and leads to an Information Exposure vulnerability. This flaw allows an attacker to interact and read sensitive passwords and logs.


RSA BSAFE Crypto-C Micro Edition versions prior to 4.1.4 and RSA Micro Edition Suite versions prior to 4.4 are vulnerable to an Information Exposure Through Timing Discrepancy. A malicious remote user could potentially exploit this vulnerability to extract information leaving data at risk of exposure.


A

vulnerability

was

found

in

Undertow

web

server

before

An

information

exposure

of

plain

text

credentials

through

log

files

because

logs

the

HttpServerExchange

object

at

ERROR

level

using

UndertowLogger.REQUEST_LOGGER.undertowRequestFailed(t

exchange)


RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to an Information Exposure Through Timing Discrepancy vulnerabilities during DSA key generation. A malicious remote attacker could potentially exploit those vulnerabilities to recover DSA keys.


OX App Suite 7.10.1 and earlier allows Information Exposure.


Barco ClickShare Button R9861500D01 devices before 1.9.0 allow Information Exposure. The encrypted ClickShare Button firmware contains the private key of a test device-certificate.


A CWE-200: Information Exposure vulnerability exists in Modicon Controllers (M340 CPUs M340 communication modules Premium CPUs Premium communication modules Quantum CPUs Quantum communication modules - see security notification for specific versions) which could cause the disclosure of FTP hardcoded credentials when using the Web server of the controller on an unsecure network.


A CWE-200: Information Exposure vulnerability exists in Modicon M580 Modicon BMENOC 0311 and Modicon BMENOC 0321 which could cause the disclosure of sensitive information when reading specific registers with the REST API of the controller/communication module.


A CWE-538: File and Directory Information Exposure vulnerability exists in Modicon M580 Modicon M340 Modicon Premium Modicon Quantum (all firmware versions) which could cause the disclosure of information from the controller when using TFTP protocol.


A CWE-200: Information Exposure vulnerability exists in Modicon M580 Modicon BMENOC 0311 and Modicon BMENOC 0321 which could cause the disclosure of sensitive information when using specific Modbus services provided by the REST API of the controller/communication module.


Information exposure through the directory listing in npm's harp module allows to access files that are supposed to be ignored according to the harp server rules.Vulnerable versions are <= 0.29.0 and no fix was applied to our knowledge.


Rapid7 Nexpose versions prior to 6.6.114 suffer from an information exposure issue whereby when the user's session has ended due to inactivity an attacker can use the inspect element browser feature to remove the login panel and view the details available in the last webpage visited by previous user


An exploitable information exposure vulnerability exists in the iocheckd service \I/O-Check\ functionality of WAGO PFC200 Firmware versions 03.01.07(13) and 03.00.39(12) and WAGO PFC100 Firmware version 03.00.39(12). A specially crafted set of packets can cause an external tool to fail resulting in uninitialized stack data to be copied to the response packet buffer. An attacker can send unauthenticated packets to trigger this vulnerability.


Rockwell Automation Arena Simulation Software versions 16.00.00 and earlier contain an INFORMATION EXPOSURE CWE-200. A maliciously crafted Arena file opened by an unsuspecting user may result in the limited exposure of information related to the targeted workstation.


Tor Browser through 8.5.3 has an information exposure vulnerability. It allows remote attackers to detect the browser's language via vectors involving an IFRAME element because text in that language is included in the title attribute of a LINK element for a non-HTML page. This is related to a behavior of Firefox before 68.


In Tasy EMR Tasy WebPortal Versions 3.02.1757 and prior there is an information exposure vulnerability which may allow a remote attacker to access system and configuration information.


HumHub Social Network Kit Enterprise v1.3.13 allows remote attackers to find the user accounts existing on any Social Network Kits (including self-hosted ones) by brute-forcing the username after the /u/ initial URI substring aka Response Discrepancy Information Exposure.


Tor Browser before 8.0.1 has an information exposure vulnerability. It allows remote attackers to detect the browser's UI locale by measuring a button width even if the user has a \Don't send my language\ setting.


An issue was discovered in GitLab Community and Enterprise Edition 8.3 through 11.11. It allows Information Exposure through an Error Message.


An Information Exposure issue (issue 1 of 2) was discovered in GitLab Community and Enterprise Edition before 11.7.8 11.8.x before 11.8.4 and 11.9.x before 11.9.2. EXIF geolocation data were not removed from images when uploaded to GitLab. As a result anyone with access to the uploaded image could obtain its geolocation device and software version data (if present).


An Information Exposure issue (issue 2 of 2) was discovered in GitLab Community and Enterprise Edition before 11.7.8 11.8.x before 11.8.4 and 11.9.x before 11.9.2. During the OAuth authentication process the application attempts to validate a parameter in an insecure way potentially exposing data.


Target

specific

data

is

being

sent

to

remote

server

and

leads

to

information

exposure

in

Snapdragon

Auto

Snapdragon

Compute

Snapdragon

Consumer

IOT

Snapdragon

Industrial

IOT

Snapdragon

IoT

Snapdragon

Mobile

Snapdragon

Wearables

in

Rennell


The Linux kernel 4.x (starting from 4.1) and 5.x before 5.0.8 allows Information Exposure (partial kernel address disclosure) leading to a KASLR bypass. Specifically it is possible to extract the KASLR kernel image offset using the IP ID values the kernel produces for connection-less protocols (e.g. UDP and ICMP). When such traffic is sent to multiple destination IP addresses it is possible to obtain hash collisions (of indices to the counter array) and thereby obtain the hashing key (via enumeration). This key contains enough bits from a kernel address (of a static variable) so when the key is extracted (via enumeration) the offset of the kernel image is exposed. This attack can be carried out remotely by the attacker forcing the target device to send UDP or ICMP (or certain other) traffic to attacker-controlled IP addresses. Forcing a server to send UDP traffic is trivial if the server is a DNS server. ICMP traffic is trivial if the server answers ICMP Echo requests (ping). For client targets if the target visits the attacker's web page then WebRTC or gQUIC can be used to force UDP traffic to attacker-controlled IP addresses. NOTE: this attack against KASLR became viable in 4.1 because IP ID generation was changed to have a dependency on an address associated with a network namespace.


The

Rust

Programming

Language

Standard

Library

and

later

is

affected

by:

Information

Exposure.

The

impact

is:

Contents

of

uninitialized

memory

could

be

printed

to

string

or

to

log

file.

The

component

is:

Debug

trait

implementation

for

The

attack

vector

is:

The

program

needs

to

invoke

debug

printing

for

iterator

over

an

empty

VecDeque.

The

fixed

version

is:

nightly

versions

after

commit


Univention Corporate Server univention-directory-notifier 12.0.1-3 and earlier is affected by: CWE-213: Intentional Information Exposure. The impact is: Loss of Confidentiality. The component is: function data_on_connection() in src/callback.c. The attack vector is: network connectivity. The fixed version is: 12.0.1-4 and later.


Navigation events were not fully adhering to the W3C's \Navigation-Timing Level 2\ draft specification in some instances for the unload event which restricts access to detailed timing attributes to only be same-origin. This resulted in potential cross-origin information exposure of history through timing side-channel attacks. This vulnerability affects Firefox < 69 Thunderbird < 68.1 Thunderbird < 60.9 Firefox ESR < 60.9 and Firefox ESR < 68.1.


Information exposure through process environment vulnerability in Synology Calendar before 2.3.3-0620 allows local users to obtain credentials via cmdline.


Information exposure in Micro Focus Content Manager versions 9.1 9.2 and 9.3. This vulnerability when configured to use an Oracle database allows valid system users to gain access to a limited subset of records they would not normally be able to access when the system is in an undisclosed abnormal state.


Class and method names in error message in Micro Focus Service Manager product versions 9.30 9.31 9.32 9.33 9.34 9.35 9.40 9.41 9.50 9.51 9.52 9.60 9.61 9.62. This vulnerability could be exploited in some special cases to allow information exposure through an error message.


An information exposure vulnerability exists in gitlab.com <v12.3.2 <v12.2.6 and <v12.1.10 when using the blocking merge request feature it was possible for an unauthenticated user to see the head pipeline data of a public project even though pipeline visibility was restricted.


An

information

exposure

vulnerability

exists

in

Jenkins

Azure

VM

Agents

Plugin

and

earlier

in

that

allows

attackers

with

Overall/Read

permission

to

perform

the

'verify

configuration'

form

validation

action

thereby

obtaining

limited

information

about

the

Azure

configuration.


An

information

exposure

vulnerability

exists

in

Jenkins

Azure

VM

Agents

Plugin

and

earlier

in

that

allows

attackers

with

Overall/Read

permission

to

enumerate

credentials

IDs

of

credentials

stored

in

Jenkins.


System Services exports services without permission protect and can lead to information exposure in Snapdragon Industrial IOT Snapdragon Mobile in MDM9206 MDM9207C MDM9607 Rennell Saipan SM8150 SM8250 SXR2130


An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10 11.7.x before 11.7.6 and 11.8.x before 11.8.1. It allows Information Exposure.


aquaverde Aquarius CMS through 4.3.5 allows Information Exposure through Log Files because of an error in the Log-File writer component.


An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10 11.7.x before 11.7.6 and 11.8.x before 11.8.1. It allows Information Exposure (issue 2 of 5).


An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10 11.7.x before 11.7.6 and 11.8.x before 11.8.1. It allows Information Exposure (issue 3 of 5).


An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10 11.7.x before 11.7.6 and 11.8.x before 11.8.1. It allows Information Exposure (issue 1 of 5).


An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10 11.7.x before 11.7.6 and 11.8.x before 11.8.1. It allows Information Exposure (issue 5 of 5).


: Information Exposure vulnerability in itemlookup.asp of Telos Automated Message Handling System allows a remote attacker to inject arbitrary script into an AMHS session. This issue affects: Telos Automated Message Handling System versions prior to 4.1.5.5.


An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10 11.7.x before 11.7.6 and 11.8.x before 11.8.1. It allows Information Exposure (issue 4 of 5).


EnterpriseDT CompleteFTP Server prior to version 12.1.3 is vulnerable to information exposure in the Bootstrap.log file. This allows an attacker to obtain the administrator password hash.


hw/ppc/spapr.c in QEMU through 3.1.0 allows Information Exposure because the hypervisor shares the /proc/device-tree/system-id and /proc/device-tree/model system attributes with a guest.


An information exposure flaw in openstack-tripleo-heat-templates allows an external user to discover the internal IP or hostname. An attacker could exploit this by checking the www_authenticate_uri parameter (which is visible to all end users) in configuration files. This would give sensitive information which may aid in additional system exploitation. This flaw affects openstack-tripleo-heat-templates versions prior to 11.6.1.


OX App Suite 7.10.5 allows Information Exposure because a caching mechanism can caused a Modified By response to show a person's name.


OCI OpenDDS versions prior to 3.18.1 are vulnerable when an attacker sends a specially crafted packet to flood target devices with unwanted traffic which may result in a denial-of-service condition and information exposure.


eProsima Fast DDS versions prior to 2.4.0 (#2269) are susceptible to exploitation when an attacker sends a specially crafted packet to flood a target device with unwanted traffic which may result in a denial-of-service condition and information exposure.


RTI Connext DDS Professional Connext DDS Secure versions 4.2x to 6.1.0 and Connext DDS Micro versions 2.4 and later are vulnerable when an attacker sends a specially crafted packet to flood target devices with unwanted traffic. This may result in a denial-of-service condition and information exposure.


Acrobat Reader DC versions versions 2021.001.20150 (and earlier) 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by an Information Exposure vulnerability. An unauthenticated attacker could leverage this vulnerability to get access to restricted data stored within global variables and objects.


An information exposure through log file vulnerability exists in the Palo Alto Networks Prisma Cloud Compute Console where a secret used to authorize the role of the authenticated user is logged to a debug log file. Authenticated Operator role and Auditor role users with access to the debug log files can use this secret to gain Administrator role access for their active session in Prisma Cloud Compute. Prisma Cloud Compute SaaS versions were automatically upgraded to the fixed release. This issue impacts all Prisma Cloud Compute versions earlier than Prisma Cloud Compute 21.04.412.


An information exposure through log file vulnerability exists in Cortex XSOAR software where the secrets configured for the SAML single sign-on (SSO) integration can be logged to the '/var/log/demisto/' server logs when testing the integration during setup. This logged information includes the private key and identity provider certificate used to configure the SAML SSO integration. This issue impacts: Cortex XSOAR 5.5.0 builds earlier than 98622; Cortex XSOAR 6.0.1 builds earlier than 830029; Cortex XSOAR 6.0.2 builds earlier than 98623; Cortex XSOAR 6.1.0 builds earlier than 848144.


An information exposure through log file vulnerability exists in Palo Alto Networks PAN-OS software where secrets in PAN-OS XML API requests are logged in cleartext to the web server logs when the API is used incorrectly. This vulnerability applies only to PAN-OS appliances that are configured to use the PAN-OS XML API and exists only when a client includes a duplicate API parameter in API requests. Logged information includes the cleartext username password and API key of the administrator making the PAN-OS XML API request.


An information exposure through log file vulnerability exists in Palo Alto Networks PAN-OS software where the connection details for a scheduled configuration export are logged in system logs. Logged information includes the cleartext username password and IP address used to export the PAN-OS configuration to the destination server.


Improper handling of resource allocation in virtual machines can lead to information exposure in Snapdragon Consumer IOT Snapdragon Industrial IOT Snapdragon Mobile


Improper validation of kernel buffer address while copying information back to user buffer can lead to kernel memory information exposure to user space in Snapdragon Auto Snapdragon Compute Snapdragon Consumer IOT Snapdragon Industrial IOT Snapdragon Mobile Snapdragon Voice & Music Snapdragon Wearables


An Information Exposure vulnerability in J-Web of Juniper Networks Junos OS allows an unauthenticated attacker to elevate their privileges over the target system through opportunistic use of an authenticated users session. This issue affects: Juniper Networks Junos OS 12.3 versions prior to 12.3R12-S17; 17.3 versions prior to 17.3R3-S10; 17.4 versions prior to 17.4R2-S12 17.4R3-S3; 18.1 versions prior to 18.1R3-S11; 18.2 versions prior to 18.2R3-S6; 18.3 versions prior to 18.3R2-S4 18.3R3-S4; 18.4 versions prior to 18.4R2-S5 18.4R3-S5; 19.1 versions prior to 19.1R1-S6 19.1R2-S2 19.1R3-S3; 19.2 versions prior to 19.2R1-S5 19.2R3 19.2R3-S1; 19.3 versions prior to 19.3R2-S4 19.3R3; 19.4 versions prior to 19.4R1-S3 19.4R2-S2 19.4R3; 20.1 versions prior to 20.1R1-S4 20.1R2; 20.2 versions prior to 20.2R1-S1 20.2R2.


An Information Exposure vulnerability in Juniper Networks Contrail Networking allows a locally authenticated attacker able to read files to retrieve administrator credentials stored in plaintext thereby elevating their privileges over the system. This issue affects: Juniper Networks Contrail Networking versions prior to 1911.31.


The package nanoid from 3.0.0 and before 3.1.31 are vulnerable to Information Exposure via the valueOf() function which allows to reproduce the last id generated.


An information exposure issue has been discovered in Opmantek Open-AudIT 4.2.0. The vulnerability allows an authenticated attacker to read file outside of the restricted directory.


Dalmark Systems Systeam 2.22.8 build 1724 is vulnerable to Incorrect Access Control. The Systeam application is an ERP system that uses a mixed architecture based on SaaS tenant and user management and on-premise database and web application counterparts. A broken access control vulnerability has been found while using a temporary generated token in order to consume api resources. The vulnerability allows an unauthenticated attacker to use an api endpoint to generate a temporary JWT token that is designed to reference the correct tenant prior to authentication to request system configuration parameters using direct api requests. The correct exploitation of this vulnerability causes sensitive information exposure. In case the tenant has an smtp credential set the full credential information is disclosed.


In Kaden PICOFLUX Air in all known versions an information exposure through observable discrepancy exists. This may give sensitive information (water consumption without distinct values) to third parties.


Information Exposure vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior which could cause information to be exposed when an unauthorized file is uploaded.


A CWE-200: Information Exposure vulnerability exists that could cause sensitive information of files located in the web root directory to leak when an attacker sends a HTTP request to the web server of the device. Affected Product: Modicon M340 CPUs: BMXP34 (Versions prior to V3.40) Modicon M340 X80 Ethernet Communication Modules: BMXNOE0100 (H) BMXNOE0110 (H) BMXNOC0401 BMXNOR0200H RTU (All Versions) Modicon Premium Processors with integrated Ethernet (Copro): TSXP574634 TSXP575634 TSXP576634 (All Versions) Modicon Quantum Processors with Integrated Ethernet (Copro): 140CPU65xxxxx (All Versions) Modicon Quantum Communication Modules: 140NOE771x1 140NOC78x00 140NOC77101 (All Versions) Modicon Premium Communication Modules: TSXETY4103 TSXETY5103 (All Versions)


A CWE-200: Information Exposure vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1) EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1) and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 ) that could allow an attacker to get limited knowledge of javascript code when crafted malicious parameters are submitted to the charging station web server.


Information Exposure vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior which could cause a device to be compromised when it is first configured.


A

Information

Exposure

vulnerability

exists

which

could

cause

the

troubleshooting

archive

to

be

accessed.

Affected

Products:

Uninterruptible

Power

Supply

(UPS)

using

including

Smart-UPS

Symmetra

and

Galaxy

with

Network

Management

Card

AOS

and

earlier)

Uninterruptible

Power

Supply

(UPS)

using

including

Symmetra

PX

(SYPX)

Network

Management

Card

AOS

and

earlier)

Uninterruptible

Power

Supply

(UPS)

using

including

Symmetra

PX

kW

UPS

Symmetra

PX

kW

UPS

Gutor

(SXW

GVX)

and

Galaxy

(GVMTS

GVMSA

GVXTS

GVXSA

GFC

AOS

and

earlier)

Uninterruptible

Power

Supply

(UPS)

using

including

Smart-UPS

Symmetra

and

Galaxy

with

Network

Management

Card

AOS

and

earlier)

APC

Rack

Power

Distribution

Units

(PDU)

using

Metered/Switched

Rack

PDUs

with

embedded

AOS

and

earlier)

APC

Rack

Power

Distribution

Units

(PDU)

using

Metered/Switched

Rack

PDUs

with

embedded

AOS

and

earlier)

APC

Power

Distribution

Products

using

Galaxy

RPP:

AOS

and

earlier)

Network

Management

Card

for

InfraStruxure

kVA

PDU

with

Poles

AOS

and

earlier)

Network

Management

Card

for

InfraStruxure

PDU

(XPDU)

M

AOS

and

earlier)

Network

Management

Card

for

Modular

PDU

(XRDP):

AOS

and

earlier)

Network

Management

Card

for

and

kVA

(PMM):

AOS

and

earlier)

Network

Management

Card

for

Modular

PDU

AOS

and

earlier)

Rack

Automatic

Transfer

Switches

(ATS)

Embedded

Rack

Automatic

Transfer

Switches

AOS

and

earlier)

Network

Management

Card

Cooling

Products:

InRow

Cooling

for

series

and

SKUs

InRow

Cooling

for

series

SKUs

InRow

Cooling

for

series

and

SKUs

InRow

Cooling

Display

for

series

InRow

Cooling

for

series

SKUs

InRow

Cooling

for

series

and

Ecoflair

Air

Economizer

Display

Uniflair

SP

(UNFLRSP)

Uniflair

LE

DX

Perimeter

Cooling

Display

for

SKUs:

IDAV

IDEV

IDWV

IUAV

IUEV

IUWV

IXAV

IXEV

IXWV

LDAV

LDEV

and

LDWV

Refrigerant

Distribution

Unit:

(RDU)

AOS

and

earlier)

Environmental

Monitoring

Unit

with

embedded

NetBotz

AOS

and

earlier)

and

Network

Management

Card

Battery

Management

System

AOS

and

earlier)


A CWE-200: Information Exposure vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1) EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1) and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 ) that could cause disclosure of encrypted credentials when consulting the maintenance report.


Dell Networking OS10 versions 10.4.3.x 10.5.0.x and 10.5.1.x contain an information exposure vulnerability. A low privileged authenticated malicious user can gain access to SNMP authentication failure messages.


Magento Commerce versions 2.4.2 (and earlier) 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an improper input validation vulnerability. An authenticated attacker can trigger an insecure direct object reference in the `V1/customers/me` endpoint to achieve information exposure and privilege escalation.


Dell EMC PowerScale OneFS versions 8.2.x 9.1.0.x and 9.1.1.1 contain a sensitive information exposure vulnerability in log files. A local malicious user with ISI_PRIV_LOGIN_SSH ISI_PRIV_LOGIN_CONSOLE or ISI_PRIV_SYS_SUPPORT privileges may exploit this vulnerability to access sensitive information. If any third-party consumes those logs the same sensitive information is available to those systems as well.


OMERO.web is open source Django-based software for managing microscopy imaging. OMERO.web before version 5.9.0 loads various information about the current user such as their id name and the groups they are in and these are available on the main webclient pages. This represents an information exposure vulnerability. Some additional information being loaded is not used by the webclient and is being removed in this release. This is fixed in version 5.9.0.


Dell Hybrid Client versions prior to 1.5 contain an information exposure vulnerability. A local unauthenticated attacker may exploit this vulnerability in order to gain access to sensitive information via the local API.


Dell EMC Data Protection Search 19.4 and prior and IDPA 2.6.1 and prior contain an Information Exposure in Log File Vulnerability in CIS. A local low privileged attacker could potentially exploit this vulnerability leading to the disclosure of certain user credentials. The attacker may be able to use the exposed credentials to access the vulnerable application with the privileges of the compromised account.


Dell Hybrid Client versions prior to 1.5 contain an information exposure vulnerability. A local unauthenticated attacker may exploit this vulnerability in order to register the client to a server in order to view sensitive information.


Dell PowerScale OneFS version 8.1.2 contains a sensitive information exposure vulnerability. This would allow a malicious user with ISI_PRIV_LOGIN_SSH and/or ISI_PRIV_LOGIN_CONSOLE privileges to gain access to sensitive information in the log files.


Dell Hybrid Client versions prior to 1.5 contain an information exposure vulnerability. A local unauthenticated attacker may exploit this vulnerability in order to view and exfiltrate sensitive information on the system.


Express-handlebars is a Handlebars view engine for Express. Express-handlebars mixes pure template data with engine configuration options through the Express render API. More specifically the layout parameter may trigger file disclosure vulnerabilities in downstream applications. This potential vulnerability is somewhat restricted in that only files with existing extentions (i.e. file.extension) can be included files that lack an extension will have .handlebars appended to them. For complete details refer to the referenced GHSL-2021-018 report. Notes in documentation have been added to help users avoid this potential information exposure vulnerability.


express-hbs is an Express handlebars template engine. express-hbs mixes pure template data with engine configuration options through the Express render API. More specifically the layout parameter may trigger file disclosure vulnerabilities in downstream applications. This potential vulnerability is somewhat restricted in that only files with existing extentions (i.e. file.extension) can be included files that lack an extension will have .hbs appended to them. For complete details refer to the referenced GHSL-2021-019 report. Notes in documentation have been added to help users of express-hbs avoid this potential information exposure vulnerability.


TwinOaks Computing CoreDX DDS versions prior to 5.9.1 are susceptible to exploitation when an attacker sends a specially crafted packet to flood target devices with unwanted traffic. This may result in a denial-of-service condition and information exposure.


Datalust Seq before 2021.2.6259 allows users (with view filters applied to their accounts) to see query results not constrained by their view filter. This information exposure caused by an internal cache key collision occurs when the user's view filter includes an array or IN clause and when another user has recently executed an identical query differing only by the array elements.


sylius/paypal-plugin

is

a

paypal

plugin

for

the

Sylius

development

platform.

In

affected

versions

the

URL

to

the

payment

page

done

after

checkout

was

created

with

autoincremented

payment

id

(/pay-with-paypal/{id})

and

therefore

it

was

easy

to

predict.

The

problem

is

that

the

Credit

card

form

has

prefilled

\credit

card

holder\

field

with

the

Customer's

first

and

last

name

and

hence

this

can

lead

to

personally

identifiable

information

exposure.

Additionally

the

mentioned

form

did

not

require

authentication.

The

problem

has

been

patched

in

Sylius/PayPalPlugin

and

If

users

are

unable

to

update

they

can

override

a

sylius_paypal_plugin_pay_with_paypal_form

route

and

change

its

URL

parameters

to

(for

example)

{orderToken}/{paymentId}

then

override

the

Sylius\\PayPalPlugin\\Controller\\PayWithPayPalFormAction

service

to

operate

on

the

payment

taken

from

the

repository

by

these

values.

It

would

also

require

usage

of

custom

repository

method.

Additionally

one

could

override

the

@SyliusPayPalPlugin/payWithPaypal.html.twig

template

to

add

contingencies:

line

in

hostedFields.submit(...)

function

call

(line

It

would

then

have

to

be

handled

in

the

function

callback.


Juniper Networks Junos OS uses the 128.0.0.0/2 subnet for internal communications between the RE and PFEs. It was discovered that packets utilizing these IP addresses may egress an QFX5000 Series switch leaking configuration information such as heartbeats kernel versions etc. out to the Internet leading to an information exposure vulnerability. This issue affects Juniper Networks Junos OS on QFX5110 QFX5120 QFX5200 QFX5210 Series and QFX5100 with QFX 5e Series image installed: All versions prior to 17.3R3-S12; 18.1 versions prior to 18.1R3-S13; 18.3 versions prior to 18.3R3-S5; 19.1 versions prior to 19.1R3-S6; 19.2 versions prior to 19.2R1-S7 19.2R3-S3; 19.3 versions prior to 19.3R2-S6 19.3R3-S3; 19.4 versions prior to 19.4R1-S4 19.4R3-S5; 20.1 versions prior to 20.1R2-S2 20.1R3-S1; 20.2 versions prior to 20.2R3-S2; 20.3 versions prior to 20.3R3-S1; 20.4 versions prior to 20.4R2-S1 20.4R3; 21.1 versions prior to 21.1R1-S1 21.1R2;


An Information Exposure vulnerability in Juniper Networks SRC Series devices configured for NETCONF over SSH permits the negotiation of weak ciphers which could allow a remote attacker to obtain sensitive information. A remote attacker with read and write access to network data could exploit this vulnerability to display plaintext bits from a block of ciphertext and obtain sensitive information. This issue affects all Juniper Networks SRC Series versions prior to 4.13.0-R6.


Real-time image information exposure is caused by insufficient authentication for activated RTSP port. This vulnerability could allow to remote attackers to send the RTSP requests using ffplay command and lead to leakage a live image.


Information Exposure vulnerability in Hitachi ABB Power Grids eSOMS allows unauthorized user to gain access to report data if the URL used to access the report is discovered. This issue affects: Hitachi ABB Power Grids eSOMS 6.0 versions prior to 6.0.4.2.2; 6.1 versions prior to 6.1.4; 6.3 versions prior to 6.3.


GE UR firmware versions prior to version 8.1x web server interface is supported on UR over HTTP protocol. It allows sensitive information exposure without authentication.


Information Exposure vulnerability in context asset handling of Apache Tapestry allows an attacker to download files inside WEB-INF if using a specially-constructed URL. This was caused by an incomplete fix for CVE-2020-13953. This issue affects Apache Tapestry Apache Tapestry 5.4.0 version to Apache Tapestry 5.6.3; Apache Tapestry 5.7.0 version and Apache Tapestry 5.7.1.


Information Exposure vulnerability in Hitachi Energy LinkOne application due to a misconfiguration in the ASP server exposes server and ASP.net information an attacker that manages to exploit this vulnerability can use the exposed information as a reconnaissance for further exploitation. This issue affects: Hitachi Energy LinkOne 3.20; 3.22; 3.23; 3.24; 3.25; 3.26.


An information exposure vulnerability exists in the Palo Alto Networks GlobalProtect app on Windows and MacOS where the credentials of the local user account are sent to the GlobalProtect portal when the Single Sign-On feature is enabled in the GlobalProtect portal configuration. This product behavior is intentional and poses no security risk when connecting to trusted GlobalProtect portals configured to use the same Single Sign-On credentials both for the local user account as well as the GlobalProtect login. However when the credentials are different the local account credentials are inadvertently sent to the GlobalProtect portal for authentication. A third party MITM type of attacker cannot see these credentials in transit. This vulnerability is a concern where the GlobalProtect app is deployed on Bring-your-Own-Device (BYOD) type of clients with private local user accounts or GlobalProtect app is used to connect to different organizations. Fixed versions of GlobalProtect app have an app setting to prevent the transmission of the user's local user credentials to the target GlobalProtect portal regardless of the portal configuration. This issue impacts: GlobalProtect app 5.1 versions earlier than GlobalProtect app 5.1.10 on Windows and MacOS; GlobalProtect app 5.2 versions earlier than GlobalProtect app 5.2.9 on Windows and MacOS This issue does not affect GlobalProtect app on other platforms.


An information exposure through log file vulnerability exists in the Palo Alto Networks GlobalProtect app on Windows that logs the cleartext credentials of the connecting GlobalProtect user when authenticating using Connect Before Logon feature. This issue impacts GlobalProtect App 5.2 versions earlier than 5.2.9 on Windows. This issue does not affect the GlobalProtect app on other platforms.


A file information exposure vulnerability exists in the Palo Alto Networks Cortex XDR agent that enables a local attacker to read the contents of arbitrary files on the system with elevated privileges when generating a support file. This issue impacts: Cortex XDR agent 5.0 versions earlier than Cortex XDR agent 5.0.12; Cortex XDR agent 6.1 versions earlier than Cortex XDR agent 6.1.9; Cortex XDR agent 7.2 versions earlier than Cortex XDR agent 7.2.4; Cortex XDR agent 7.3 versions earlier than Cortex XDR agent 7.3.2.


Exposure of Private Personal Information to an Unauthorized Actor in GitHub repository gnuboard/gnuboard5 prior to and including 5.5.5. A vulnerability in gnuboard v5.5.5 and below uses weak encryption algorithms leading to sensitive information exposure. This allows an attacker to derive the email address of any user including when the 'Let others see my information.' box is ticked off. Or to send emails to any email address with full control of its contents


An information exposure through log file vulnerability in Brocade SANNav versions before Brocade SANnav 2.2.0 could allow an authenticated local attacker to view sensitive information such as ssh passwords in filetansfer.log in debug mode. To exploit this vulnerability the attacker would need to have valid user credentials and turn on debug mode.


A CWE-862: Missing Authorization vulnerability exists that could cause information exposure when an attacker sends a specific message. Affected Product: Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior)


A CWE-665: Improper Initialization vulnerability exists that could cause information exposure when an attacker sends a specially crafted message. Affected Product: Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior)


Information Exposure Through Query Strings in GET Request vulnerability in LMM API of Secomea GateManager allows system administrator to hijack connection. This issue affects: Secomea GateManager all versions prior to 9.7.


Sensitive Information Exposure in E4J s.r.l. VikBooking Hotel Booking Engine & PMS plugin <= 1.5.3 on WordPress allows attackers to get the booking data by guessing / brute-forcing easy predictable booking IDs via search POST requests.


The vulnerability discovered in WordPress Perfect Brands for WooCommerce plugin (versions <= 2.0.4) allows server information exposure.


OX Software GmbH App Suite 7.8.4 and earlier is affected by: Information Exposure.


Smarthome 1.0.2.364 and earlier versions HiAPP 7.3.0.303 and earlier versions HwParentControl 2.0.0 and earlier versions HwParentControlParent 5.1.0.12 and earlier versions Crowdtest 1.5.3 and earlier versions HiWallet 8.0.0.301 and earlier versions Huawei Pay 8.0.0.300 and earlier versions Skytone 8.1.2.300 and earlier versions HwCloudDrive(EMUI6.0) 8.0.0.307 and earlier versions HwPhoneFinder(EMUI6.0) 9.3.0.310 and earlier versions HwPhoneFinder(EMUI5.1) 9.2.2.303 and earlier versions HiCinema 8.0.2.300 and earlier versions HuaweiWear 21.0.0.360 and earlier versions HiHealthApp 3.0.3.300 and earlier versions have an information exposure vulnerability. Encryption keys are stored in the system. The attacker can implement reverse engineering to obtain the encryption keys causing information exposure.


Jenkins before versions 2.44 2.32.2 is vulnerable to an information exposure in the internal API that allows access to item names that should not be visible (SECURITY-380). This only affects anonymous users (other users legitimately have access) that were able to get a list of items via an UnprotectedRootAction.


jenkins-email-ext before version 2.57.1 is vulnerable to an Information Exposure. The Email Extension Plugins is able to send emails to a dynamically created list of users based on the changelogs like authors of SCM changes since the last successful build. This could in some cases result in emails being sent to people who have no user account in Jenkins and in rare cases even people who were not involved in whatever project was being built due to some mapping based on the local-part of email addresses.


FusionSphere OpenStack V100R006C00 has an information exposure vulnerability. The software uses hard-coded cryptographic key to encrypt messages between certain components which significantly increases the possibility that encrypted data may be recovered and results in information exposure.


An Information Exposure issue was discovered in ProMinent MultiFLEX M10a Controller web interface. When an authenticated user uses the Change Password feature on the application the current password for the user is specified in plaintext. This may allow an attacker who has been authenticated to gain access to the password.


An Information Exposure issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 programmable-logic controllers 1763-L16AWA Series A and B Version 16.00 and prior versions; 1763-L16BBB Series A and B Version 16.00 and prior versions; 1763-L16BWA Series A and B Version 16.00 and prior versions; and 1763-L16DWD Series A and B Version 16.00 and prior versions and Allen-Bradley MicroLogix 1400 programmable logic controllers 1766-L32AWA Series A and B Version 16.00 and prior versions; 1766-L32BWA Series A and B Version 16.00 and prior versions; 1766-L32BWAA Series A and B Version 16.00 and prior versions; 1766-L32BXB Series A and B Version 16.00 and prior versions; 1766-L32BXBA Series A and B Version 16.00 and prior versions; and 1766-L32AWAA Series A and B Version 16.00 and prior versions. User credentials are sent to the web server using the HTTP GET method which may result in the credentials being logged. This could make user credentials available for unauthorized retrieval.


Authconfig version 6.2.8 is vulnerable to an Information exposure while using SSSD to authenticate against remote server resulting in the leak of information about existing usernames.


File

and

directory

information

exposure

vulnerability

in

SYNO.SurveillanceStation.PersonalSettings.Photo

in

Synology

Surveillance

Station

before

allows

remote

authenticated

users

to

obtain

other

user's

sensitive

files

via

the

filename

parameter.


An Information Exposure issue was discovered in PHOENIX CONTACT FL SWITCH 3xxx 4xxx and 48xxx Series products running firmware Version 1.0 to 1.32. A remote unauthenticated attacker may be able to use Monitor Mode on the device to read diagnostic information.


An Information Exposure issue was discovered in Moxa NPort 5110 Version 2.2 NPort 5110 Version 2.4 NPort 5110 Version 2.6 NPort 5110 Version 2.7 NPort 5130 Version 3.7 and prior and NPort 5150 Version 3.7 and prior. An attacker may be able to exploit a flaw in the handling of Ethernet frame padding that may allow for information exposure.


An Information Exposure issue was discovered in Schneider Electric Wonderware InTouch Access Anywhere version 11.5.2 and prior. Credentials may be exposed to external systems via specific URL parameters as arbitrary destination addresses may be specified.


EMC RSA Archer 5.4.1.3 5.5.3.1 5.5.2.3 5.5.2 5.5.1.3.1 5.5.1.1 is affected by an information exposure through an error message vulnerability. A remote low privileged attacker may potentially exploit this vulnerability to use information disclosed in an error message to launch another more focused attack.


An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter. An INFORMATION EXPOSURE flaw can be used to gain privileged access to the device.


An issue was discovered in OSIsoft PI Coresight 2016 R2 and earlier versions and PI Web API 2016 R2 when deployed using the PI AF Services 2016 R2 integrated install kit. An information exposure through server log files vulnerability has been identified which may allow service account passwords to become exposed for the affected services potentially leading to unauthorized shutdown of the affected PI services as well as potential reuse of domain credentials.


Information Exposure vulnerability in Unity8 as used on the Ubuntu phone and possibly also in Unity8 shipped elsewhere. This allows an attacker to enable the MTP service by opening the emergency dialer. Fixed in 8.11+16.04.20160111.1-0ubuntu1 and 8.11+15.04.20160122-0ubuntu1.


In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 210/SD 212/SD 205 SD 400 SD 425 SD 427 SD 430 SD 435 SD 450 SD 617 SD 625 SD 650/52 SD 800 SD 845 and Snapdragon_High_Med_2016 during module load at TZ Startup memory statically allocated by modules was not being properly set to zero first. Allowing the module to execute without reset gives it access to information from previous app thus leading to information exposure.


In TrustZone an information exposure vulnerability can potentially occur in all Android releases from CAF using the Linux kernel.


In

Android

before

or

earlier

security

patch

level

on

Qualcomm

Snapdragon

Automobile

Snapdragon

Mobile

and

Snapdragon

Wear

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

and

SD

in

a

PlayReady

function

information

exposure

can

occur.


The vulnerability have been reported to affect earlier versions of Helpdesk. If exploited this information exposure vulnerability could disclose sensitive information. QNAP has already fixed the issue in Helpdesk 3.0.3 and later.


An information exposure issue where IPv6 DNS traffic would be sent outside of the VPN tunnel (when Traffic Enforcement was enabled) exists in Pulse Secure Pulse Secure Desktop 9.0R1 and below. This is applicable only to dual-stack (IPv4/IPv6) endpoints.


An issue was discovered in GitLab Community and Enterprise Edition 11.3.x and 11.4.x before 11.4.13 11.5.x before 11.5.6 and 11.6.x before 11.6.1. It allows Information Exposure.


An issue was discovered in GitLab Community and Enterprise Edition before 11.4.13 11.5.x before 11.5.6 and 11.6.x before 11.6.1. It allows Information Exposure.


An issue was discovered in GitLab Community and Enterprise Edition 11.x before 11.2.7 11.3.x before 11.3.8 and 11.4.x before 11.4.3. It allows Information Exposure via a Gitlab Prometheus integration.


An issue was discovered in GitLab Community and Enterprise Edition before 11.2.7 11.3.x before 11.3.8 and 11.4.x before 11.4.3. It has Information Exposure Through Browser Caching.


An issue was discovered in GitLab Community and Enterprise Edition before 11.2.7 11.3.x before 11.3.8 and 11.4.x before 11.4.3. It has Information Exposure Through an Error Message.


An issue was discovered in GitLab Community and Enterprise Edition before 11.2.7 11.3.x before 11.3.8 and 11.4.x before 11.4.3. It allows for Information Exposure via unsubscribe links in email replies.


Elastic Cloud Enterprise (ECE) versions prior to 1.1.4 contain an information exposure vulnerability. It was discovered that certain exception conditions would result in encryption keys passwords and other security sensitive headers being leaked to the allocator logs. An attacker with access to the logging cluster may obtain leaked credentials and perform authenticated actions using these credentials.


Information exposure through directory listings in serve 6.5.3 allows directory listing and file access even when they have been set to be ignored.


OX App Suite 7.8.4 and earlier allows Information Exposure.


Clients

hostname

gets

added

to

DNS

record

on

device

which

is

running

dnsmasq

resulting

in

an

information

exposure

in

Snapdragon

Auto

Snapdragon

Connectivity

Snapdragon

Consumer

IOT

Snapdragon

Industrial

IOT

Snapdragon

IoT

Snapdragon

Mobile

Snapdragon

Wearables

in

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD


An Information Exposure vulnerability in Fortinet FortiOS 6.0.1 5.6.5 and below allow attackers to learn private IP as well as the hostname of FortiGate via Application Control Block page.


The forgotten-password feature in index.php/member/reset/reset_email.html in YzmCMS v3.2 through v3.7 has a Response Discrepancy Information Exposure issue and an unexpectedly long lifetime for a verification code which makes it easier for remote attackers to hijack accounts via a brute-force approach.


Dell EMC Avamar Server versions 7.2.0 7.2.1 7.3.0 7.3.1 7.4.0 and 7.4.1 and Dell EMC Integrated Data Protection Appliance (IDPA) 2.0 are affected by an information exposure vulnerability. Avamar Java management console's SSL/TLS private key may be leaked in the Avamar Java management client package. The private key could potentially be used by an unauthenticated attacker on the same data-link layer to initiate a MITM attack on management console users.


In Advantech WebAccess versions V8.2_20170817 and prior WebAccess versions V8.3.0 and prior WebAccess Dashboard versions V.2.0.15 and prior WebAccess Scada Node versions prior to 8.3.1 and WebAccess/NMS 2.0.3 and prior an information exposure vulnerability through directory listing has been identified which may allow an attacker to find important files that are not normally visible.


git-annex is vulnerable to an Information Exposure when decrypting files. A malicious server for a special remote could trick git-annex into decrypting a file that was encrypted to the user's gpg key. This attack could be used to expose encrypted data that was never stored in git-annex


mailboxd in Zimbra Collaboration Suite 8.8 before 8.8.8; 8.7 before 8.7.11.Patch3; and 8.6 before 8.6.0.Patch10 allows Information Exposure through Verbose Error Messages containing a stack dump tracing data or full user-context dump.


ovirt-engine before version ovirt 4.2.2 is vulnerable to an information exposure through log files. When engine-backup was run with one of the options \--provision*db\ the database username and password were logged in cleartext. Sharing the provisioning log might inadvertently leak database passwords.


Cloud Foundry Garden-runC versions prior to 1.11.0 contains an information exposure vulnerability. A user with access to Garden logs may be able to obtain leaked credentials and perform authenticated actions using those credentials.


Windows 2012R2 stemcells versions prior to 1200.17 contain an information exposure vulnerability on vSphere. A remote user with the ability to push apps can execute crafted commands to read the IaaS metadata from the VM which may contain BOSH credentials.


GNOME

NetworkManager

version

and

earlier

contains

a

Information

Exposure

vulnerability

in

DNS

resolver

that

can

result

in

Private

DNS

queries

leaked

to

local

network's

DNS

servers

while

on

VPN.

This

vulnerability

appears

to

have

been

fixed

in

Some

Ubuntu

packages

were

fixed

but

later

updates

removed

the

fix.

cf.

an

upstream

fix

does

not

appear

to

be

available

at

this

time.


The Open Microscopy Environment OMERO.web version prior to 5.4.7 contains an Information Exposure Through Log Files vulnerability in the login form and change password form that can result in User's password being revealed. Attacker can log in as that user. This attack appear to be exploitable via an attacker reading the web server log. This vulnerability appears to have been fixed in 5.4.7.


Jenkins project Jenkins AWS CodeDeploy Plugin version 1.19 and earlier contains a File and Directory Information Exposure vulnerability in AWSCodeDeployPublisher.java that can result in Disclosure of environment variables. This vulnerability appears to have been fixed in 1.20 and later.


An information exposure vulnerability exists in Jenkins 2.153 and earlier LTS 2.138.3 and earlier in DirectoryBrowserSupport.java that allows attackers with the ability to control build output to browse the file system on agents running builds beyond the duration of the build using the workspace browser.


An

information

exposure

vulnerability

exists

in

Jenkins

and

earlier

LTS

and

earlier

and

the

Stapler

framework

used

by

these

releases

in

that

allows

attackers

with

Overall/Administer

permission

or

access

to

the

local

file

system

to

obtain

credentials

entered

by

users

if

the

form

submission

could

not

be

successfully

processed.


The Open Microscopy Environment OMERO.server version 5.4.0 to 5.4.6 contains a Information Exposure Through Sent Data vulnerability in OMERO.server that can result in an Attacker gaining full administrative access to server and may be able to disable it. This vulnerability appears to have been fixed in 5.4.7.


Ionic

Team

Cordova

plugin

iOS

Keychain

version

before

commit

contains

an

Information

Exposure

Through

Log

Files

vulnerability

in

CDVKeychain.m

that

can

result

in

login

password

and

other

sensitive

data

leakage.

This

attack

appear

to

be

exploitable

via

Attacker

must

have

access

to

victim's

iOS

logs.

This

vulnerability

appears

to

have

been

fixed

in

after

commit


Vesta

CP

version

Prior

to

commit

any

release

prior

to

contains

a

Information

Exposure

Through

Timing

Discrepancy

vulnerability

in

Password

reset

code

line

that

can

result

in

Possible

to

determine

password

reset

codes

attacker

is

able

to

change

administrator

password.

This

attack

appear

to

be

exploitable

via

Unauthenticated

network

connectivity.

This

vulnerability

appears

to

have

been

fixed

in

After

commit

release

version


An Information Exposure issue was discovered in ABB netCADOPS Web Application Version 3.4 and prior netCADOPS Web Application Version 7.1 and prior netCADOPS Web Application Version 7.2x and prior netCADOPS Web Application Version 8.0 and prior and netCADOPS Web Application Version 8.1 and prior. A vulnerability exists in the password entry section of netCADOPS Web Application that may expose critical database information.


An Information Exposure Through Query Strings in GET Request issue was discovered in Belden Hirschmann RS RSR RSB MACH100 MACH1000 MACH4000 MS and OCTOPUS Classic Platform Switches. An information exposure through query strings vulnerability in the web interface has been identified which may allow an attacker to impersonate a legitimate user.


Dell EMC Secure Remote Services versions prior to 3.32.00.08 contains an Information Exposure vulnerability. The log file contents store sensitive data including executed commands to generate authentication tokens which may prove useful to an attacker for crafting malicious authentication tokens for querying the application and subsequent attacks.


An issue was discovered in GitLab Community and Enterprise Edition 11.1.x before 11.1.8 11.2.x before 11.2.5 and 11.3.x before 11.3.2. There is Information Exposure via the merge request JSON endpoint.


An Information Exposure Through Log Files issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4.


An issue was discovered in GitLab Community Edition 11.x before 11.1.8 11.2.x before 11.2.5 and 11.3.x before 11.3.2. There is Information Exposure via Epic change descriptions.


An issue was discovered in GitLab Community Edition 11.x before 11.1.8 11.2.x before 11.2.5 and 11.3.x before 11.3.2. There is Information Exposure via the GFM markdown API.


MagniComp SysInfo before 10-H81 as shipped with BMC BladeLogic Automation and other products contains an information exposure vulnerability in which a local unprivileged user is able to read any root (uid 0) owned file on the system regardless of the file permissions. Confidential information such as password hashes (/etc/shadow) or other secrets (such as log files or private keys) can be leaked to the attacker. The vulnerability has a confidentiality impact but has no direct impact on system integrity or availability.


An Information Exposure through Discrepancy vulnerability exists in the embedded web servers in all Modicon M340 Premium Quantum PLCs and BMXNOR0200 where the web server sends different responses in a way that exposes security-relevant information about the state of the product such as whether a particular operation was successful or not.


In

a

default

Red

Hat

Openstack

Platform

Director

installation

openstack-octavia

before

versions

openstack-octavia

and

openstack-octavia-3.0.1-0.20181009115732

creates

log

files

that

are

readable

by

all

users.

Sensitive

information

such

as

private

keys

can

appear

in

these

log

files

allowing

for

information

exposure.


Citrix ShareFile StorageZones Controller before 5.4.2 has Information Exposure Through an Error Message.


CS2 Network P2P through 3.x as used in millions of Internet of Things devices suffers from an information exposure flaw that exposes user session data to supernodes in the network as demonstrated by passively eavesdropping on user video/audio streams capturing credentials and compromising devices.


There is a missing authentication vulnerability in some Huawei smartphone.Successful exploitation of this vulnerability may lead to low-sensitive information exposure.


ARC Informatique PcVue prior to version 12.0.17 is vulnerable to information exposure allowing unauthorized users to access session data of legitimate users. This issue also affects third-party systems based on the Web Services Toolkit.


The Synergy Systems & Solutions (SSS) HUSKY RTU 6049-E70 with firmware Versions 5.0 and prior has an Exposure of Sensitive Information to an Unauthorized Actor (CWE-200) vulnerability. The affected product is vulnerable to information exposure over the SNMP protocol. This is a different issue than CVE-2019-16879 CVE-2019-20045 CVE-2019-20046 CVE-2020-7800 and CVE-2020-7802.


All versions of snyk-broker before 4.73.1 are vulnerable to Information Exposure. It logs private keys if logging level is set to DEBUG.


A CWE-200: Information Exposure vulnerability exists in Easergy T300 Firmware V1.5.2 and prior which could allow an attacker to pack or unpack the archive with the firmware for the controller and modules using the usual tar archiver resulting in an information exposure.


Versions

of

the

npm

CLI

prior

to

are

vulnerable

to

an

information

exposure

vulnerability

through

log

files.

The

CLI

supports

URLs

like

The

password

value

is

not

redacted

and

is

printed

to

stdout

and

also

to

any

generated

log

files.


u'Information

exposure

issues

while

processing

IE

header

due

to

improper

check

of

beacon

IE

frame'

in

Snapdragon

Auto

Snapdragon

Compute

Snapdragon

Consumer

Electronics

Connectivity

Snapdragon

Consumer

IOT

Snapdragon

Industrial

IOT

Snapdragon

Mobile

Snapdragon

Voice

Music

Snapdragon

Wearables

in

Bitra

Kamorta

Nicobar

Rennell

Saipan