In (TBD) of (TBD) there is a possible way to decrypt local data encrypted by the GSC due to improperly used crypto. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-217475903References: N/A


In Bluetooth there is a possible information disclosure due to incorrect error handling. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06108487; Issue ID: ALPS06108487.


In kd_camera_hw driver there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05862966; Issue ID: ALPS05862966.


In alac decoder there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06366061; Issue ID: ALPS06366061.


In libMtkOmxGsmDec there is a possible information disclosure due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05917620; Issue ID: ALPS05917620.


In camera there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with System execution privileges needed. User interaction is no needed for exploitation. Patch ID: ALPS06419003; Issue ID: ALPS06419003.


In aee daemon there is a possible information disclosure due to symbolic link following. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06383944; Issue ID: ALPS06282684.


In aee daemon there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06419017; Issue ID: ALPS06419017.


In broadcastServiceStateChanged of TelephonyRegistry.java there is a possible way to learn base station information without location permission due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12LAndroid ID: A-210118427


In ion driver there is a possible information disclosure due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05862991; Issue ID: ALPS05862991.


In vow there is a possible read of uninitialized data due to a improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is no needed for exploitation. Patch ID: ALPS05837742; Issue ID: ALPS05857289.


In private_handle_t of mali_gralloc_buffer.h there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-213170715References: N/A


In ion driver there is a possible information disclosure due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06171689; Issue ID: ALPS06171689.


In aee daemon there is a possible information disclosure due to a path traversal. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06419017; Issue ID: ALPS06270870.


In ccci there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06108658; Issue ID: ALPS06108658.


In camera driver there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05862973; Issue ID: ALPS05862973.


In ion driver there is a possible information disclosure due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06171705; Issue ID: ALPS06171705.


In aee daemon there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06383944; Issue ID: ALPS06270804.


In ccci there is a possible leak of kernel pointer due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06108617; Issue ID: ALPS06108617.


In A-GPS there is a possible man in the middle attack due to improper certificate validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06461919; Issue ID: ALPS06461919.


In getNodeValue of USCCDMPlugin.java there is a possible disclosure of ICCID due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-212573046References: N/A


Microsoft Outlook 2002 does not properly handle requests to encrypt email messages with V1 Exchange Server Security certificates which causes Outlook to send the email in plaintext aka \Flaw in how Outlook 2002 handles V1 Exchange Server Security Certificates could lead to Information Disclosure.\


IBM Tivoli Key Lifecycle Manager 2.5 2.6 and 2.7 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs referrer header or browser history. IBM X-Force ID: 133636.


IBM Security Identity Governance and Intelligence Virtual Appliance 5.2 through 5.2.3.2 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs referrer header or browser history. IBM X-Force ID: 126860.


IBM Jazz Team Server affecting the following IBM Rational Products: Collaborative Lifecycle Management (CLM) Rational DOORS Next Generation (RDNG) Rational Engineering Lifecycle Manager (RELM) Rational Team Concert (RTC) Rational Quality Manager (RQM) Rational Rhapsody Design Manager (Rhapsody DM) and Rational Software Architect (RSA DM) contain an undisclosed vulnerability with the potential for information disclosure. IBM X-Force ID: 134820.


IBM BigFix Compliance 1.7 through 1.9.91 (TEMA SUAv1 SCA SCM) stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs referrer header or browser history. IBM X-Force ID: 123673.


IBM Atlas eDiscovery Process Management 6.0.3 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs referrer header or browser history. IBM X-Force ID: 126682.


IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs referrer header or browser history. IBM X-Force ID: 123904.


IBM iNotes 8.5 and 9.0 could allow a remote attacker to send a malformed email to a victim that when opened could cause an information disclosure. IBM X-Force ID: 123854.


IBM Security Guardium 10.0 and 10.5 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs referrer header or browser history. IBM X-Force ID: 124747. IBM X-Force ID: 124747.


It was found that keycloak before 3.4.2 final would permit misuse of a client-side /etc/hosts entry to spoof a URL in a password reset request. An attacker could use this flaw to craft a malicious password reset request and gain a valid reset token leading to information disclosure or further attacks.


In bta_pan_data_buf_ind_cback of bta_pan_act.cc there is a use after free that can result in an out of bounds read of memory allocated via malloc. This could lead to information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: 5.1.1 6.0 6.0.1 7.0 7.1.1 7.1.2 8.0 8.1. Android ID: A-67110692.


In bnep_data_ind of bnep_main.cc there is a possible out of bounds read due to a missing length decrement operation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 5.1.1 6.0 6.0.1 7.0 7.1.1 7.1.2 8.0 8.1. Android ID: A-69271284.


Access

to

in

Small

Cell

SoC

Snapdragon

Automobile

Snapdragon

Mobile

and

Snapdragon

Wear

could

be

used

for

side

channel

attacks

and

this

could

lead

to

local

information

disclosure

with

no

additional

execution

privileges

needed

in

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD


In XBLRamDump mode there is a debug feature that can be used to dump memory contents if an attacker has physical access to the device. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-64610940.


In getVSCoverage of CmapCoverage.cpp there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional privileges needed. User interaction is needed for exploitation. Product: Android. Versions: 8.0 8.1. Android ID: A-70808908.


In bnep_data_ind of bnep_main.cc there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 5.1.1 6.0 6.0.1 7.0 7.1.1 7.1.2 8.0 8.1. Android ID: A-67863755.


In bnep_process_control_packet of bnep_utils.cc there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 5.1.1 6.0 6.0.1 7.0 7.1.1 7.1.2 8.0 8.1. Android ID: A-69177292.


In audioserver there is an out-of-bounds write due to a log statement using %s with an array that may not be NULL terminated. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 5.1.1 6.0 6.0.1 7.0 7.1.1 7.1.2 8.0 8.1. Android ID: A-68953950.


In sdp_server_handle_client_req of sdp_server.cc there is an out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 6.0 6.0.1 7.0 7.1.1 7.1.2 8.0 8.1. Android ID: A-69384124.


In bnep_data_ind of bnep_main.cc there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 5.1.1 6.0 6.0.1 7.0 7.1.1 7.1.2 8.0 8.1. Android ID: A-69177251.


In functionality implemented in sdp_discovery.cc there are possible out of bounds reads due to missing bounds checks. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 5.1.1 6.0 6.0.1 7.0 7.1.1 7.1.2 8.0 8.1. Android ID: A-68161546.


Gitlab Enterprise Edition version 10.3 is vulnerable to an authorization bypass issue in the GitLab Projects::BoardsController component resulting in an information disclosure on any board object.


Gitlab Enterprise Edition version 10.1.0 is vulnerable to an insufficiently protected credential issue in the project service integration API endpoint resulting in an information disclosure of plaintext password.


Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains an information disclosure flaw where the api.log might contain passwords in plaintext.


Authentication Bypass in Trend Micro Control Manager 6.0 causes Information Disclosure when authentication validation is not done for functionality that can change debug logging level. Formerly ZDI-CAN-4512.


An issue was discovered in Adobe Digital Editions 4.5.6 and earlier versions. Adobe Digital Editions parses crafted XML files in an unsafe manner which could lead to sensitive information disclosure.


libOmxVenc in Android for MSM Firefox OS for MSM and QRD Android copies the output buffer to an application with the \filled length\ which is larger than the output buffer's actual size leading to an information disclosure problem in the context of mediaserver.


jenkins-mailer-plugin before version 1.20 is vulnerable to an information disclosure while using the feature to send emails to a dynamically created list of users based on the changelogs. This could in some cases result in emails being sent to people who have no user account in Jenkins and in rare cases even people who were not involved in whatever project was being built due to some mapping based on the local-part of email addresses.


A firewall bypass vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a network-based malicious attacker to bypass firewall policies leading to authentication bypass methods information disclosure modification of system files and denials of service.


python-oslo-middleware before versions 3.8.1 3.19.1 3.23.1 is vulnerable to an information disclosure. Software using the CatchError class could include sensitive values in a traceback's error message. System users could exploit this flaw to obtain sensitive information from OpenStack component error logs (for example keystone tokens).


Skybox Manager Client Application is prone to information disclosure via a username enumeration attack. A local unauthenticated attacker could exploit the flaw to obtain valid usernames by analyzing error messages upon valid and invalid account login attempts.


An issue was discovered in Squiz Matrix from 5.3 through to 5.3.6.1 and 5.4.1.3. An information disclosure caused by a Path Traversal issue in the 'File Bridge' plugin allowed the existence of files outside of the bridged path to be confirmed.


Information disclosure vulnerabilities in Trend Micro OfficeScan 11.0 and XG may allow unauthenticated users who can access the OfficeScan server to query the network's NT domain or the PHP version and modules.


Pragyan CMS v3.0 is vulnerable to a Boolean-based SQL injection in cms/admin.lib.php via $_GET'forwhat' resulting in Information Disclosure.


Trapeze TransitMaster is vulnerable to information disclosure (emails / hashed passwords) via a modified userID field in JSON data to ManageSubscriber.aspx/GetSubscriber. NOTE: this software is independently deployed at multiple municipal transit systems; it is not found exclusively on the \webwatch.(REDACTED).com\ server mentioned in the reference.


Pragyan CMS v3.0 is vulnerable to an Error-Based SQL injection in cms/admin.lib.php via $_GET'del_black' resulting in Information Disclosure.


libexif through 0.6.21 is vulnerable to out-of-bounds heap read vulnerability in exif_data_save_data_entry function in libexif/exif-data.c caused by improper length computation of the allocated data of an ExifMnote entry which can cause denial-of-service or possibly information disclosure.


Same-origin policy protections can be bypassed on pages with embedded iframes during page reloads allowing the iframes to access content on the top level page leading to information disclosure. This vulnerability affects Thunderbird < 52.3 Firefox ESR < 52.3 and Firefox < 55.


Xen PV guest before Xen 4.3 checked access permissions to MMIO ranges only after accessing them allowing host PCI device space memory reads leading to information disclosure. This is an error in the get_user function. NOTE: the upstream Xen Project considers versions before 4.5.x to be EOL.


A weak password recovery vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows attacker to carry out information disclosure via the Forgotten Password feature.


A password management vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows an attacker to carry out information disclosure via the FortiAnalyzer Management View.


NVIDIA libnvrm contains a possible out of bounds read due to a missing bounds check which could lead to local information disclosure. This issue is rated as moderate. Product: Android. Version: N/A. Android: A-64893156. Reference: N-CVE-2017-6285.


A vulnerability in the web-based GUI of Cisco Wide Area Application Services (WAAS) Central Manager could allow an unauthenticated remote attacker to retrieve completed reports from an affected system aka Information Disclosure. This vulnerability affects the following products if they are running an affected release of Cisco Wide Area Application Services (WAAS) Software and are configured to use the Central Manager function: Cisco Virtual Wide Area Application Services (vWAAS) Cisco Wide Area Application Services (WAAS) Appliances Cisco Wide Area Application Services (WAAS) Modules. Only Cisco WAAS products that are configured with the Central Manager role are affected by this vulnerability. More Information: CSCvd87574. Known Affected Releases: 4.4(7) 6.2(1) 6.2(3). Known Fixed Releases: 6.3(0.228) 6.3(0.226) 6.2(3d)8 5.5(7b)17.


D-Link DGS-1510-28XMP DGS-1510-28X DGS-1510-52X DGS-1510-52 DGS-1510-28P DGS-1510-28 and DGS-1510-20 Websmart devices with firmware before 1.31.B003 allow attackers to conduct Unauthenticated Information Disclosure attacks via unspecified vectors.


NVIDIA libnvrm contains a possible out of bounds read due to a missing bounds check which could lead to local information disclosure. This issue is rated as moderate. Product: Android. Version: N/A. Android: A-65482562. Reference: N-CVE-2017-6288.


NVIDIA Security Engine contains a vulnerability in the Deterministic Random Bit Generator (DRBG) where the DRBG does not properly initialize and store or transmits sensitive data using a weakened encryption scheme that is unable to protect sensitive data which may lead to information disclosure.This issue is rated as moderate.


An Insufficiently Protected Credentials issue was discovered in Sierra Wireless AirLink Raven XE all versions prior to 4.0.14 and AirLink Raven XT all versions prior to 4.0.11. Sensitive information is insufficiently protected during transmission and vulnerable to sniffing which could lead to information disclosure.


NVIDIA Security Engine contains a vulnerability in the RSA function where the keyslot read/write lock permissions are cleared on a chip reset which may lead to information disclosure. This issue is rated as high.


USB Pratirodh is prone to sensitive information disclosure. It stores sensitive information such as username and password in simple usb.xml. An attacker with physical access to the system can modify the file according his own requirements that may aid in further attack.


NVIDIA libnvrm contains a possible out of bounds read due to a missing bounds check which could lead to local information disclosure. This issue is rated as moderate.Product: Android. Version: N/A. Android: A-64893264. Reference: N-CVE-2017-6287.


have

an

improper

authorization

vulnerability

on

Huawei

switch

products.

The

system

incorrectly

performs

an

authorization

check

when

a

normal

user

attempts

to

access

certain

information

which

is

supposed

to

be

accessed

only

by

authenticated

user.

Successful

exploit

could

cause

information

disclosure.


In CPUID CPU-Z through 1.81 there are improper access rights to a kernel-mode driver (e.g. cpuz143_x64.sys for version 1.43) that can result in information disclosure or elevation of privileges because of an arbitrary read of any physical address via ioctl 0x9C402604. Any application running on the system (Windows) including sandboxed users can issue an ioctl to this driver without any validation. Furthermore the driver can map any physical page on the system and returns the allocated map page address to the user: that results in an information leak and EoP. NOTE: the vendor indicates that the arbitrary read itself is intentional behavior (for ACPI scan functionality); the security issue is the lack of an ACL.


Prior to 4.4.1.10 the Norton Family Android App can be susceptible to an Information Disclosure issue. Information disclosure is a very common issue that attackers will attempt to exploit as a first pass across the application. As they probe the application they will take note of anything that may seem out of place or any bit of information they can use to their advantage such as error messages system information user data version numbers component names URL paths or even simple typos and misspellings.


In

Android

for

MSM

Firefox

OS

for

MSM

QRD

Android

with

all

Android

releases

from

CAF

using

the

Linux

kernel

in

of

there

is

a

possible

out

of

bounds

read

if

is

due

to

improper

input

validation.

This

could

lead

to

local

information

disclosure

with

System

execution

privileges

needed.

User

interaction

is

not

needed

for

exploitation.


VMware vCenter Server (6.5 prior to 6.5 U1) contains an information disclosure issue due to the service startup script using world writable directories as temporary storage for critical information. Successful exploitation of this issue may allow unprivileged host users to access certain critical information when the service gets restarted.


VMware Xenon 1.x prior to 1.5.4-CR7_1 1.5.7_7 1.5.4-CR6_2 1.3.7-CR1_2 1.1.0-CR0-3 1.1.0-CR3_1 1.4.2-CR4_1 and 1.5.4_8 contains an authentication bypass vulnerability due to insufficient access controls for utility endpoints. Successful exploitation of this issue may result in information disclosure.


The flash-based vSphere Web Client (6.0 prior to 6.0 U3c and 5.5 prior to 5.5 U3f) i.e. not the new HTML5-based vSphere Client contains SSRF and CRLF injection issues due to improper neutralization of URLs. An attacker may exploit these issues by sending a POST request with modified headers towards internal services leading to information disclosure.


Huawei iBMC V200R002C10; V200R002C20; V200R002C30 have an improper authorization vulnerability. The software incorrectly performs an authorization check when a normal user attempts to access certain information which is supposed to be accessed only by admin user. Successful exploit could cause information disclosure.


An array index error in the fig2dev program in Xfig 3.2.6a allows remote attackers to cause a denial-of-service attack or information disclosure with a maliciously crafted Fig format file related to a negative font value in dev/gentikz.c and the read_textobject functions in read.c and read1_3.c.


V8 in Google Chrome prior to 57.0.2987.98 for Mac Windows and Linux and 57.0.2987.108 for Android had insufficient policy enforcement which allowed a remote attacker to spoof the location object via a crafted HTML page related to Blink information disclosure.


Video files loaded video captions cross-origin without checking for the presence of CORS headers permitting such cross-origin use leading to potential information disclosure for video captions. This vulnerability affects Firefox < 52 Firefox ESR < 45.8 Thunderbird < 52 and Thunderbird < 45.8.


The file picker dialog can choose and display the wrong local default directory when instantiated. On some operating systems this can lead to information disclosure such as the operating system or the local account name. This vulnerability affects Firefox < 52 and Thunderbird < 52.


Data sent with in multipart channels such as the multipart/x-mixed-replace MIME type will ignore the referrer-policy response header leading to potential information disclosure for sites using this header. This vulnerability affects Firefox < 51.


The statistics generator in Apache Pony Mail 0.7 to 0.9 was found to be returning timestamp data without proper authorization checks. This could lead to derived information disclosure on private lists about the timing of specific email subjects or text bodies though without disclosing the content itself. As this was primarily used as a caching feature for faster loading times the caching was disabled by default to prevent this. Users using 0.9 should upgrade to 0.10 to address this issue.


ASUS RT-AC* and RT-N* devices with firmware before 3.0.0.4.380.7378 allow JSONP Information Disclosure such as a network map.


Using SVG filters that don't use the fixed point math implementation on a target iframe a malicious page can extract pixel values from a targeted user. This can be used to extract history information and read text values across domains. This violates same-origin policy and leads to information disclosure. This vulnerability affects Firefox < 52 Firefox ESR < 45.8 Thunderbird < 52 and Thunderbird < 45.8.


txAWS (all current versions) fail to perform complete certificate verification resulting in vulnerability to MitM attacks and information disclosure.


Todd Miller's sudo version 1.8.20 and earlier is vulnerable to an input validation (embedded spaces) in the get_process_ttyname() function resulting in information disclosure and command execution.


MapProxy version 1.10.3 and older is vulnerable to a Cross Site Scripting attack in the demo service resulting in possible information disclosure.


tcmu-runner version 0.91 up to 1.20 is vulnerable to information disclosure in handler_qcow.so resulting in non-privileged users being able to check for existence of any file with root privileges.


Framadate version 1.0 is vulnerable to Formula Injection in the CSV Export resulting possible Information Disclosure and Code Execution


ATutor version 2.2.1 and earlier are vulnerable to a SQL injection in the Assignment Dropbox BasicLTI Blog Post Blog Group Course Email Course Alumni Course Enrolment Group Membership Course unenrolment Course Enrolment List Search Glossary Social Group Member Search Social Friend Search Social Group Search File Comment Gradebook Test Title User Group Membership Inbox/Sent Items Sent Messages Links Photo Album Poll Social Application Social Profile Test Content Menu Auto-Login and Gradebook components resulting in information disclosure database modification or potential code execution.


Todd Miller's sudo version 1.8.20p1 and earlier is vulnerable to an input validation (embedded newlines) in the get_process_ttyname() function resulting in information disclosure and command execution.


kittoframework kitto version 0.5.1 is vulnerable to an XSS in the 404 page resulting in information disclosure


Jenkins Git Client Plugin 2.4.2 and earlier creates temporary file with insecure permissions resulting in information disclosure


Shotwell version 0.24.4 or earlier and 0.25.3 or earlier is vulnerable to an information disclosure in the web publishing plugins resulting in potential password and oauth token plaintext transmission


An issue was discovered on Samsung mobile devices with M(6.x) and N(7.x) software. There is information disclosure of the kbase_context address of a GPU memory node. The Samsung ID is SVE-2017-8907 (December 2017).


An issue was discovered on Samsung mobile devices with L(5.1) M(6.0) and N(7.0) software. There is an information disclosure (of memory locations outside a buffer) via /dev/dsm_ctrl_dev. The Samsung ID is SVE-2016-7340 (January 2017).


** DISPUTED ** An issue was discovered in SMA Solar Technology products. When signed into Sunny Explorer with a wrong password it is possible to create a debug report disclosing information regarding the application and allowing the attacker to create and save a .txt file with contents to his liking. An attacker may use this for information disclosure or to write a file to normally unavailable locations on the local system. NOTE: the vendor reports that \the information contained in the debug report is of marginal significance.\ Also only Sunny Boy TLST-21 and TL-21 and Sunny Tripower TL-10 and TL-30 could potentially be affected.


In Android before 2017-08-05 on Qualcomm MSM Firefox OS for MSM QRD Android and all Android releases from CAF using the Linux kernel if kernel memory address is passed from userspace through iris_vidioc_s_ext_ctrls ioctl it will print kernel address data. A user could set it to an arbitrary kernel address hence information disclosure (for kernel) could occur.


ASUS RT-AC* and RT-N* devices with firmware through 3.0.0.4.380.7378 allow JSONP Information Disclosure such as the SSID.


Information disclosure of .esp source code on the Cohu 3960 allows an attacker to view sensitive information such as application logic with a simple web browser.


Debug

information

disclosure

exists

on

Peplink

Balance

and

devices

with

firmware

before

A

direct

request

to

shows

Master

LAN

Address

Serial

Number

HA

Group

ID

Virtual

IP

and

Submitted

syncid.


Information disclosure through directory listing on the Cohu 3960HD allows an attacker to view and download source code log files and other sensitive device information via a specially crafted web request with an extra / character such as a \GET // HTTP/1.1\ request.


Kernel

can

inject

faults

in

computations

during

the

execution

of

TrustZone

leading

to

information

disclosure

in

Snapdragon

Auto

Snapdragon

Compute

Snapdragon

Connectivity

Snapdragon

Consumer

Electronics

Connectivity

Snapdragon

Consumer

IOT

Snapdragon

Industrial

IOT

Snapdragon

IoT

Snapdragon

Mobile

Snapdragon

Voice

Music

Snapdragon

Wearables

Snapdragon

Wired

Infrastructure

and

Networking

in

Qualcomm

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD


Invision Power Services (IPS) Community Suite 4.1.19.2 and earlier has a composite of Stored XSS and Information Disclosure issues in the attachments feature found in User CP. This can be triggered by any Invision Power Board user and can be used to gain access to moderator/admin accounts. The primary cause is the ability to upload an SVG document with a crafted attribute such an onload; however full path disclosure is required for exploitation.


The importScripts function in the Web Workers API implementation in Mozilla Firefox before 43.0 allows remote attackers to bypass the Same Origin Policy by triggering use of the no-cors mode in the fetch API to attempt resource access that throws an exception leading to information disclosure after a rethrow.


The version checking subroutine in percona-toolkit before 2.2.13 and xtrabackup before 2.2.9 was vulnerable to silent HTTP downgrade attacks and Man In The Middle attacks in which the server response could be modified to allow the attacker to respond with modified command payload and have the client return additional running configuration information leading to an information disclosure of running configuration of MySQL.


Information disclosure issue in qdPM 8.3 allows remote attackers to obtain sensitive information via a direct request to (1) core/config/databases.yml (2) core/log/qdPM_prod.log or (3) core/apps/qdPM/config/settings.yml.


** DISPUTED ** Kernel Samepage Merging (KSM) in the Linux kernel 2.6.32 through 4.x does not prevent use of a write-timing side channel which allows guest OS users to defeat the ASLR protection mechanism on other guest OS instances via a Cross-VM ASL INtrospection (CAIN) attack. NOTE: the vendor states \Basically if you care about this attack vector disable deduplication.\ Share-until-written approaches for memory conservation among mutually untrusting tenants are inherently detectable for information disclosure and can be classified as potentially misunderstood behaviors rather than vulnerabilities.


iTerm2 3.x before 3.1.1 allows remote attackers to discover passwords by reading DNS queries. A new (default) feature was added to iTerm2 version 3.0.0 (and unreleased 2.9.x versions such as 2.9.20150717) that resulted in a potential information disclosure. In an attempt to see whether the text under the cursor (or selected text) was a URL the text would be sent as an unencrypted DNS query. This has the potential to result in passwords and other sensitive information being sent in cleartext without the user being aware.


In

Android

before

or

earlier

security

patch

level

on

Qualcomm

Snapdragon

Mobile

Snapdragon

Wear

and

Small

Cell

SoC

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

and

code

to

zeroize

AES

key

could

be

compiled

out

by

compiler

which

could

potentially

result

in

information

disclosure.


Moodle before 2.2.2 has Personal information disclosure when administrative setting users name display is set to first name only full names are shown in page breadcrumbs.


uzbl: Information disclosure via world-readable cookies storage file


An information disclosure flaw was found in the way the Java Virtual Machine (JVM) implementation of Java SE 7 as provided by OpenJDK 7 incorrectly initialized integer arrays after memory allocation (in certain circumstances they had nonzero elements right after the allocation). A remote attacker could use this flaw to obtain potentially sensitive information.


libuser has information disclosure when moving user's home directory


PEAR

version

contains

an

eval

injection

vulnerability

in

getSubmitValue

method

validate

method

method

method

method.

that

can

result

in

Possible

information

disclosure

possible

impact

on

data

integrity

and

execution

of

arbitrary

code.

This

attack

appear

to

be

exploitable

via

A

specially

crafted

query

string

could

be

utilised

e.g.

This

vulnerability

appears

to

have

been

fixed

in


ARM Trusted Firmware-A allows information disclosure.


An issue was discovered on Samsung mobile devices with M(6.0) software. There is an information disclosure in a Trustlet because an address is logged. The Samsung ID is SVE-2018-11600 (July 2018).


Home Assistant before 0.67.0 was vulnerable to an information disclosure that allowed an unauthenticated attacker to read the application's error log via components/api.py.


An issue was discovered on Samsung mobile devices with N(7.x) (Exynos8890/8895 chipsets) software. There is information disclosure (a KASLR offset) in the Secure Driver via a modified trustlet. The Samsung ID is SVE-2017-10987 (April 2018).


An issue was discovered in Foxit E-mail advertising system before September 2018. It allows authentication bypass and information disclosure related to Interspire Email Marketer.


An issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) (Exynos 9810 chipsets) software. There is information disclosure about a kernel pointer in the g2d_drv driver because of logging. The Samsung ID is SVE-2018-13035 (December 2018).


An issue was discovered on Samsung mobile devices with M(6.0) N(7.x) and O(8.0) (Exynos or Qualcomm chipsets) software. There is information disclosure (of a kernel address) via trustonic_tee. The Samsung ID is SVE-2017-11175 (February 2018).


An issue was discovered on Samsung mobile devices with M(6.x) (Exynos or Qualcomm chipsets) software. There is information disclosure from a Trustlet via the debug log. The Samsung ID is SVE-2017-10638 (April 2018).


An issue was discovered on Samsung mobile devices with N(7.x) (MediaTek chipsets) software. There is information disclosure (of kernel stack memory) in a MediaTek driver. The Samsung ID is SVE-2018-11852 (July 2018).


Information disclosure in Asuswrt-Merlin firmware for ASUS devices older than 384.4 and ASUS firmware before 3.0.0.4.382.50470 for devices allows remote attackers to acquire information on internal network IP address ranges by reading the new_lan_ip variable on the error_page.htm page.


Information disclosure in Asuswrt-Merlin firmware for ASUS devices older than 384.4 and ASUS firmware before 3.0.0.4.382.50470 for devices allows remote attackers to acquire information on internal network devices' hostnames and MAC addresses by reading the custom_id variable on the blocking.asp page.


In Ruby before 2.2.10 2.3.x before 2.3.7 2.4.x before 2.4.4 2.5.x before 2.5.1 and 2.6.0-preview1 an attacker controlling the unpacking format (similar to format string vulnerabilities) can trigger a buffer under-read in the String#unpack method resulting in a massive and controlled information disclosure.


Lutron Quantum BACnet Integration 2.0 (firmware 3.2.243) doesn't check for correct user authentication before showing the /deviceIP information which leads to internal network information disclosure.


LibVNC

before

contains

multiple

weaknesses

Improper

Initialization

vulnerability

in

VNC

client

code

that

allows

attacker

to

read

stack

memory

and

can

be

abuse

for

information

disclosure.

Combined

with

another

vulnerability

it

can

be

used

to

leak

stack

memory

layout

and

in

bypassing

ASLR


LibVNC

before

contains

Improper

Initialization

vulnerability

in

VNC

Repeater

client

code

that

allows

attacker

to

read

stack

memory

and

can

be

abuse

for

information

disclosure.

Combined

with

another

vulnerability

it

can

be

used

to

leak

stack

memory

layout

and

in

bypassing

ASLR


In avrc_pars_vendor_rsp of avrc_pars_ct.cc there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-111896861


In smp_proc_master_id of smp_act.cc there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9.0 Android ID: A-111937027


In mca_ccb_hdl_req of mca_cact.cc there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9.0 Android ID: A-110791536


In avct_bcb_msg_ind of avct_bcb_act.cc there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-8.0 Android-8.1 Android ID: A-79944113.


In bnep_data_ind of bnep_main.cc there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android ID: A-78286118.


In mca_ccb_hdl_rsp of mca_cact.cc in Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 and Android-9 there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Android ID: A-116319076.


In llcp_util_parse_cc of llcp_util.cc there is a possible out-of-bound read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9Android ID: A-114237888


In bnep_data_ind of bnep_main.cc there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android ID: A-79164722.


In ihevcd_sao_shift_ctb of ihevcd_sao.c there is a possible out of bounds write due to missing bounds check. This could lead to information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-113260892.


When wifi is switched function sendNetworkStateChangeBroadcast of WifiStateMachine.java broadcasts an intent including detailed wifi network information. This could lead to information disclosure with no execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9.0 Android ID: A-77286245.


In DynamicRefTable::load of ResourceTypes.cpp there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android ID: A-79488511.


In process_service_search_rsp of sdp_discovery.c there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure when connecting to a malicious Bluetooth device with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-74249842.


In llcp_dlc_proc_i_pdu of llcp_dlc.cc in Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 and Android-9 there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure over NFC with no additional execution privileges needed. User interaction is not needed for exploitation. Android ID: A-116722267.


In bta_ag_do_disc of bta_ag_sdp.cc there is a possible out-of-bound read due to an incorrect parameter size. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-9. Android ID: A-113164621.


In readVector of iCrypto.cpp there is a possible invalid read due to uninitialized data. This could lead to local information disclosure from the DRM server with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9.0 Android ID: A-79218474


In smp_proc_enc_info of smp_act.cc there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9.0 Android ID: A-111937065


In smp_process_keypress_notification of smp_act.cc there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android ID: A-111936834


In trim_device of f2fs_format_utils.c it is possible that the data partition is not wiped during a factory reset. This could lead to local information disclosure after factory reset with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-112868088.


In avrc_msg_cback of avrc_api.cc there is a possible out-of-bound read due to a missing bounds check. This could lead to remote information disclosure over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9.0 Android ID: A-111803925


In avdt_msg_prs_cfg of avdt_msg.cc there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android ID: A-78288378.


In the content provider of the download manager there is a possible SQL injection due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9.0 Android ID: A-111085900


In llcp_util_parse_link_params of llcp_util.cc there is a possible out-of-bound read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9Android ID: A-114238578


In process_l2cap_cmd of l2c_main.cc there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android ID: A-74202041.


In bta_hh_ctrl_dat_act of bta_hh_act.cc in Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 and Android-9 there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Android ID: A-116108738.


In onCheckedChanged of BluetoothPairingController.java there is a possible way to retrieve contact information due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-8.0 Android-8.1 Android-9. Android ID: A-72872376


In ieee802_11_rx_wnmsleep_req of wnm_ap.c in Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 and Android-9 there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the wifi driver with no additional execution privileges needed. User interaction is not needed for exploitation. Android ID: A-111893132.


In WiFi the RSSI value and SSID information is broadcast as part of android.net.wifi.RSSI_CHANGE and android.net.wifi.STATE_CHANGE intents. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-111698366


In gatts_process_attribute_req of gatt_sc.cc there is a possible read of uninitialized data due to a missing bounds check. This could lead to remote information disclosure in the Bluetooth process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android ID: A-73172115.


In avrc_ctrl_pars_vendor_rsp of avrc_pars_ct.c there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-111450417


In process_l2cap_cmd of l2c_main.cc there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android ID: A-74196706.


In bta_av_proc_meta_cmd of bta_av_act.cc there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9.0 Android ID: A-111893951


In dumpExtractors of IMediaExtractor.cp there is a possible disclosure of recently accessed media files due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1. Android ID: A-114770654.


In add_attr of sdp_discovery.c in Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 and Android-9 there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Android ID: A-115900043.


In process_l2cap_cmd of l2c_main.cc there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android ID: A-74201143.


In rfc_process_mx_message of rfc_ts_frames.cc there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9.0 Android ID: A-80432928


In multiple functions of ContentProvider.java there is a possible permission bypass due to a missing URI validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-112555574.


In llcp_util_parse_connect of llcp_util.cc there is a possible out-of-bound read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9Android ID: A-111660010


In avdt_scb_hdl_report of avdt_scb_act.cc in Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 and Android-9 there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation. Android ID: A-111450156.


An issue was discovered in Arcserve Unified Data Protection (UDP) through 6.5 Update 4. There is a DDI-VRT-2018-18 Unauthenticated Sensitive Information Disclosure via /gateway/services/EdgeServiceImpl issue.


An

issue

was

discovered

in

Arcserve

Unified

Data

Protection

(UDP)

through

Update

There

is

a

Unauthenticated

Sensitive

Information

Disclosure

via

issue.


Multiple out of bounds read in igdkm64.sys in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059) 10.18.x.5057 (aka 15.36.x.5057) 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 may allow an authenticated user to potentially enable information disclosure via local access.


Elasticsearch Alerting and Monitoring in versions before 6.4.1 or 5.6.12 have an information disclosure issue when secrets are configured via the API. The Elasticsearch _cluster/settings API when queried could leak sensitive configuration information such as passwords tokens or usernames. This could allow an authenticated Elasticsearch user to improperly view these details.


A external entity processing information disclosure (XXE) vulnerability in Trend Micro Control Manager 6.0 could allow a remote attacker to disclose sensitive information on vulnerable installations.


Data leakage in cryptographic libraries for Intel IPP before 2019 update1 release may allow an authenticated user to potentially enable information disclosure via local access.


Microarchitectural

Load

Port

Data

Sampling

(MLPDS):

Load

ports

on

some

microprocessors

utilizing

speculative

execution

may

allow

an

authenticated

user

to

potentially

enable

information

disclosure

via

a

side

channel

with

local

access.

A

list

of

impacted

products

can

be

found

here:


A vulnerability in the UPC bar code of the Avanti Markets MarketCard could allow an unauthenticated local attacker to access funds within the customer's MarketCard balance and also could lead to Customer Information Disclosure. The vulnerability is due to lack of proper validation of the UPC bar code present on the MarketCard. An attacker could exploit this vulnerability by generating a copy of a customer's bar code. An exploit could allow the attacker to access all funds located within the MarketCard or allow unauthenticated disclosure of information.


Microarchitectural

Store

Buffer

Data

Sampling

(MSBDS):

Store

buffers

on

some

microprocessors

utilizing

speculative

execution

may

allow

an

authenticated

user

to

potentially

enable

information

disclosure

via

a

side

channel

with

local

access.

A

list

of

impacted

products

can

be

found

here:


Buffer leakage in igdkm64.sys in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059) 10.18.x.5057 (aka 15.36.x.5057) 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 may allow an authenticated user to potentially enable information disclosure via local access.


During the spawning of a malicious Passenger-managed application SpawningKit in Phusion Passenger 5.3.x before 5.3.2 allows such applications to replace key files or directories in the spawning communication directory with symlinks. This then could result in arbitrary reads and writes which in turn can result in information disclosure and privilege escalation.


Microarchitectural

Fill

Buffer

Data

Sampling

(MFBDS):

Fill

buffers

on

some

microprocessors

utilizing

speculative

execution

may

allow

an

authenticated

user

to

potentially

enable

information

disclosure

via

a

side

channel

with

local

access.

A

list

of

impacted

products

can

be

found

here:


An Insecure Permissions vulnerability in SpawningKit in Phusion Passenger 5.3.x before 5.3.2 causes information disclosure in the following situation: given a Passenger-spawned application process that reports that it listens on a certain Unix domain socket if any of the parent directories of said socket are writable by a normal user that is not the application's user then that non-application user can swap that directory with something else resulting in traffic being redirected to a non-application user's process through an alternative Unix domain socket.


Information disclosure in the SNMP settings page in ASUSTOR ADM version 3.1.1 allows attackers to obtain the SNMP password in cleartext.


Due to missing permissions in Android Manifest file Sensitive information disclosure issue can happen in PCI RCS app in Snapdragon Auto Snapdragon Connectivity Snapdragon Consumer IOT Snapdragon Industrial IOT Snapdragon IoT Snapdragon Mobile Snapdragon Voice & Music Snapdragon Wearables in MDM9206 MDM9607 MDM9650 MSM8909W MSM8996AU QCA6574AU QCS605 SD 210/SD 212/SD 205 SD 615/16/SD 415 SD 636 SD 650/52 SD 675 SD 712 / SD 710 / SD 670 SD 730 SD 820 SD 820A SD 835 SD 845 / SD 850 SD 855 SDA660 SDM630 SDM660


Admin tools in SAP BusinessObjects Business Intelligence versions 4.1 4.2 allow an unauthenticated user to read sensitive information (server name) hence leading to an information disclosure.


Mediawiki 1.31 before 1.31.1 1.30.1 1.29.3 and 1.27.5 contains an information disclosure flaw in the Special:Redirect/logid


On SRX Series devices during compilation of IDP policies an attacker sending specially crafted packets may be able to bypass firewall rules leading to information disclosure which an attacker may use to gain control of the target device or other internal devices systems or services protected by the SRX Series device. This issue only applies to devices where IDP policies are applied to one or more rules. Customers not using IDP policies are not affected. Depending on if the IDP updates are automatic or not as well as the interval between available updates an attacker may have more or less success in performing reconnaissance or bypass attacks on the victim SRX Series device or protected devices. ScreenOS with IDP is not vulnerable to this issue. Affected releases are Juniper Networks Junos OS: 12.1X46 versions prior to 12.1X46-D60 on SRX; 12.3X48 versions prior to 12.3X48-D35 on SRX; 15.1X49 versions prior to 15.1X49-D60 on SRX.


Incorrect caching of responses to requests including an Authorization header in HAProxy 1.8.0 through 1.8.9 (if cache enabled) allows attackers to achieve information disclosure via an unauthenticated remote request related to the proto_http.c check_request_for_cacheability function.


Information disclosure in Netwave IP camera at get_status.cgi (via HTTP on port 8000) allows an unauthenticated attacker to exfiltrate sensitive information from the device.


The mobi_reconstruct_parts function in parse_rawml.c in Libmobi 0.3 allows remote attackers to cause information disclosure (read access violation) via a crafted mobi file.


The mobi_decompress_huffman_internal function in compression.c in Libmobi 0.3 allows remote attackers to cause information disclosure (read access violation) via a crafted mobi file.


NEC Univerge Sv9100 WebPro 6.00.00 devices have Predictable Session IDs that result in Account Information Disclosure via Home.htm?sessionId=#####&GOTO(8) URIs.


An issue was discovered in the MakeMyTrip application 7.2.4 for Android. The databases (locally stored) are not encrypted and have cleartext that might lead to sensitive information disclosure as demonstrated by data/com.makemytrip/databases and data/com.makemytrip/Cache SQLite database files.


Information disclosure in Netwave IP camera at //etc/RT2870STA.dat (via HTTP on port 8000) allows an unauthenticated attacker to exfiltrate sensitive information about the network configuration like the network SSID and password.


Splunk

through

allows

information

disclosure

by

appending

__raw/services/server/info/server-info?output_mode=json

to

a

query

as

demonstrated

by

discovering

a

license

key.


** DISPUTED ** OpenWrt mishandles access control in /etc/config/rpcd and the /usr/share/rpcd/acl.d files which allows remote authenticated users to call arbitrary methods (i.e. achieve ubus access over HTTP) that were only supposed to be accessible to a specific user as demonstrated by the file log and service namespaces potentially leading to remote Information Disclosure or Code Execution. NOTE: The developer disputes this as a vulnerability indicating that rpcd functions appropriately.


D-Link

REV.

B

(with

firmware

through

devices

have

permission

bypass

and

information

disclosure

in

as

demonstrated

by

a

/getcfg.php?a=%0a_POST_SERVICES%3DDEVICE.ACCOUNT%0aAUTHORIZED_GROUP%3D1

request.


The Samba Active Directory LDAP server was vulnerable to an information disclosure flaw because of missing access control checks. An authenticated attacker could use this flaw to extract confidential attribute values using LDAP search expressions. Samba versions before 4.6.16 4.7.9 and 4.8.4 are vulnerable.


Jamf Pro 10.x before 10.3.0 has Incorrect Access Control. Jamf Pro user accounts and groups with access to log in to Jamf Pro had full access to endpoints in the Universal API (UAPI) regardless of account privileges or privilege sets. An authenticated Jamf Pro account without required privileges could be used to perform CRUD actions (GET POST PUT DELETE) on UAPI endpoints which could result in unauthorized information disclosure compromised data integrity and data loss. For a full listing of available UAPI endpoints and associated CRUD actions you can navigate to /uapi/doc in your instance of Jamf Pro.


IBM Security Guardium Big Data Intelligence (SonarG) 3.1 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs referrer header or browser history. IBM X-Force ID: 137767.


Cloud Foundry Cloud Controller versions prior to 1.52.0 contains information disclosure and path traversal vulnerabilities. An authenticated malicious user can predict the location of application blobs and leverage path traversal to create a malicious application that has the ability to overwrite arbitrary files on the Cloud Controller instance.


It was found that the AJP connector in undertow as shipped in Jboss EAP 7.1.0.GA does not use the ALLOW_ENCODED_SLASH option and thus allow the the slash / anti-slash characters encoded in the url which may lead to path traversal and result in the information disclosure of arbitrary local files.


IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs referrer header or browser history. IBM X-Force ID: 140763.


libcurl

to

and

including

contains

an

out

bounds

read

in

code

handling

trailers.

It

was

reported

that

reading

an

trailer

could

mess

up

future

trailers

since

the

stored

size

was

one

byte

less

than

required.

The

problem

is

that

the

code

that

creates

headers

from

the

trailer

data

once

appended

a

string

like

to

the

target

buffer

while

this

was

recently

changed

to

(a

space

was

added

after

the

colon)

but

the

following

math

wasn't

updated

correspondingly.

When

accessed

the

data

is

read

out

of

bounds

and

causes

either

a

crash

or

that

the

(too

large)

data

gets

passed

to

client

write.

This

could

lead

to

a

denial-of-service

situation

or

an

information

disclosure

if

someone

has

a

service

that

echoes

back

or

uses

the

trailers

for

something.


Kitura 2.3.0 and earlier have an unintended read access to unauthorised files and folders that can be exploited by a crafted URL resulting in information disclosure.


An information disclosure in ovirt-hosted-engine-setup prior to 2.2.7 reveals the root user's password in the log file.


Fuji Electric FRENIC LOADER v3.3 v7.3.4.1a of FRENIC-Mini (C1) FRENIC-Mini (C2) FRENIC-Eco FRENIC-Multi FRENIC-MEGA FRENIC-Ace. The program does not properly parse FNC files that may allow for information disclosure.


An issue was discovered in GitLab Community and Enterprise Edition before 10.8.7 11.0.x before 11.0.5 and 11.1.x before 11.1.2. Information Disclosure can occur because the Prometheus metrics feature discloses private project pathnames.


The TIBCO Spotfire Client and TIBCO Spotfire Web Player Client components of TIBCO Software Inc.'s TIBCO Spotfire Analyst TIBCO Spotfire Analytics Platform for AWS Marketplace TIBCO Spotfire Deployment Kit TIBCO Spotfire Desktop and TIBCO Spotfire Desktop Language Packs contain multiple vulnerabilities that may allow for unauthorized information disclosure. Affected releases are TIBCO Software Inc.'s TIBCO Spotfire Analyst: versions up to and including 7.8.0; 7.9.0; 7.9.1; 7.10.0; 7.10.1; 7.11.0; 7.12.0 TIBCO Spotfire Analytics Platform for AWS Marketplace: versions up to and including 7.12.0 TIBCO Spotfire Deployment Kit: versions up to and including 7.8.0; 7.9.0;7.9.1;7.10.0;7.10.1;7.11.0; 7.12.0 TIBCO Spotfire Desktop: versions up to and including 7.8.0; 7.9.0; 7.9.1; 7.10.0; 7.10.1; 7.11.0;7.12.0 TIBCO Spotfire Desktop Language Packs: versions up to and including 7.8.0; 7.9.0; 7.9.1; 7.10.0; 7.10.1; 7.11.0.


Adobe Connect versions 9.7 and earlier have an exploitable unrestricted SWF file upload vulnerability. Successful exploitation could lead to information disclosure.


Adobe ColdFusion Update 5 and earlier versions ColdFusion 11 Update 13 and earlier versions have an exploitable Unsafe XML External Entity Processing vulnerability. Successful exploitation could lead to information disclosure.


Adobe Connect versions 9.7.5 and earlier have an exploitable Authentication Bypass vulnerability. Successful exploitation could lead to sensitive information disclosure.


Sensitive Information Disclosure in Zipato Zipabox Smart Home Controller allows remote attacker get sensitive information that expands attack surface.


Foxit PhantomPDF and Reader before 9.3 allow remote attackers to trigger Uninitialized Object Information Disclosure because creation of ArrayBuffer and DataView objects is mishandled.


The VMware Workspace ONE Unified Endpoint Management Console (A/W Console) 9.7.x prior to 9.7.0.3 9.6.x prior to 9.6.0.7 9.5.x prior to 9.5.0.16 9.4.x prior to 9.4.0.22 9.3.x prior to 9.3.0.25 9.2.x prior to 9.2.3.27 and 9.1.x prior to 9.1.5.6 contains a SAML authentication bypass vulnerability which can be leveraged during device enrollment. This vulnerability may allow for a malicious actor to impersonate an authorized SAML session if certificate-based authentication is enabled. This vulnerability is also relevant if certificate-based authentication is not enabled but the outcome of exploitation is limited to an information disclosure (Important Severity) in those cases.


NVIDIA GeForce Experience all versions prior to 3.14.1 contains a potential vulnerability when GameStream is enabled an attacker has system access and certain system features are enabled where limited information disclosure may be possible.


NVIDIA GeForce Experience prior to 3.15 contains a vulnerability when GameStream is enabled where limited sensitive user information may be available to users with system access which may lead to information disclosure.


NVIDIA GeForce Experience contains a vulnerability in all versions prior to 3.16 on Windows where a local user may obtain third party integration parameters which may lead to information disclosure.


NVIDIA Jetson TX2 contains a vulnerability by means of speculative execution where local and unprivileged code may access the contents of cached information in an unauthorized manner which may lead to information disclosure. The updates apply to all versions prior to R28.3.


In Android before the 2018-05-05 security patch level NVIDIA Widevine Trustlet contains a vulnerability in Widevine TA where the software reads data past the end or before the beginning of the intended buffer which may lead to Information Disclosure. This issue is rated as moderate. Android: A-69383916. Reference: N-CVE-2018-6246.


A Cryptographic Issue (CWE-310) vulnerability exists in IIoT Monitor 3.1.38 which could allow information disclosure.


An issue was discovered in Amazon Web Services (AWS) FreeRTOS through 1.3.1 FreeRTOS up to V10.0.1 (with FreeRTOS+TCP) and WITTENSTEIN WHIS Connect middleware TCP/IP component. Out of bounds memory access during parsing of ARP packets in eARPProcessPacket can be used for information disclosure.


Amazon Web Services (AWS) FreeRTOS through 1.3.1 FreeRTOS up to V10.0.1 (with FreeRTOS+TCP) and WITTENSTEIN WHIS Connect middleware TCP/IP component allow information disclosure during parsing of ICMP packets in prvProcessICMPPacket.


An issue was discovered in Amazon Web Services (AWS) FreeRTOS through 1.3.1 FreeRTOS up to V10.0.1 (with FreeRTOS+TCP) and WITTENSTEIN WHIS Connect middleware TCP/IP component. Out of bounds memory access during parsing of NBNS packets in prvTreatNBNS can be used for information disclosure.


Adobe Acrobat and Reader versions 2019.008.20081 and earlier 2019.008.20080 and earlier 2019.008.20081 and earlier 2017.011.30106 and earlier version 2017.011.30105 and earlier version 2015.006.30457 and earlier and 2015.006.30456 and earlier have a security bypass vulnerability. Successful exploitation could lead to information disclosure.


A path traversal vulnerability exists in viewcgi.c in the 2.0.7 through 2.2.26 legacy versions of the NCBI ToolBox which may result in reading of arbitrary files (i.e. significant information disclosure) or file deletion via the nph-viewgif.cgi query string.


An issue was discovered in CIRCONTROL CirCarLife before 4.3. There is system software information disclosure due to lack of authentication for /html/device-id.


Amazon Web Services (AWS) FreeRTOS through 1.3.1 FreeRTOS up to V10.0.1 (with FreeRTOS+TCP) and WITTENSTEIN WHIS Connect middleware TCP/IP component allow information disclosure during parsing of TCP options in prvCheckOptions.


An issue was discovered in Amazon Web Services (AWS) FreeRTOS through 1.3.1 FreeRTOS up to V10.0.1 (with FreeRTOS+TCP) and WITTENSTEIN WHIS Connect middleware TCP/IP component. Out of bounds memory access during parsing of DHCP responses in prvProcessDHCPReplies can be used for information disclosure.


ansible before versions 2.5.14 2.6.11 2.7.5 is vulnerable to a information disclosure flaw in vvv+ mode with no_log on that can lead to leakage of sensible data.


An issue was discovered in Acronis Cyber Protect before 15 Update 1 build 26172. Because the local notification service misconfigures CORS information disclosure can occur.


xxl-job

allows

Information

Disclosure

of

username

model

and

password

via


Sensitive information disclosure and weak encryption in Pyrescom Termod4 time management devices before 10.04k allows remote attackers to read a session-file and obtain plain-text user credentials.


Information disclosure in aspx pages in MV's IDCE application v1.0 allows an attacker to copy and paste aspx pages in the end of the URL application that connect into the database which reveals internal and sensitive information without logging into the web application.


Information disclosure in Logon Page in MV's mConnect application v02.001.00 allows an attacker to know valid users from the application's database via brute force.


Verint Workforce Optimization suite 15.1 (15.1.0.37634) has Unauthenticated Information Disclosure via API


Observable discrepancy in the RAPL interface for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access.


Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.


Improper removal of sensitive information before storage or transfer in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.


Inadequate encryption strength in subsystem for Intel(R) CSME versions before 13.0.40 and 13.30.10 may allow an unauthenticated user to potentially enable information disclosure via physical access.


Improper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30 12.1-57.18 12.0-63.21 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a 11.0.3d and 10.2.7 resulting in limited information disclosure to low privileged users.


Local file inclusion in FHEM 6.0 allows in fhem/FileLog_logWrapper file parameter can allow an attacker to include a file which can lead to sensitive information disclosure.


Information Disclosure in NoneCMS v1.3 allows remote attackers to obtain sensitive information via the component \/public/index.php\.


Information Disclosure in NoneCMS v1.3 allows remote attackers to obtain sensitive information via the component \/nonecms/vendor\.


There is a improper privilege management vulnerability in some Huawei smartphone. Successful exploitation of this vulnerability can cause information disclosure and malfunctions due to insufficient verification of data authenticity.


HUAWEI P30 Pro versions earlier than 10.1.0.160(C00E160R2P8) have a path traversal vulnerability. The system does not sufficiently validate certain pathname successful exploit could allow the attacker access files and cause information disclosure.


Huawei smartphones Taurus-AL00B with versions earlier than 10.0.0.205(C00E201R7P2) have an improper authentication vulnerability. The software insufficiently validate the user's identity when a user wants to do certain operation. An attacker can trick user into installing a malicious application to exploit this vulnerability. Successful exploit may cause some information disclosure.


UNSUPPORTED

WHEN

ASSIGNED

D-Link

devices

allow

Information

Disclosure

via

SERVICES=DEVICE.ACCOUNT%0AAUTHORIZED_GROUP=1

to

getcfg.php.

NOTE:

This

vulnerability

only

affects

products

that

are

no

longer

supported

by

the

maintainer.


Huawei Honor V30 smartphones with versions earlier than 10.1.0.212(C00E210R5P1) have an improper authentication vulnerability. The system does not sufficiently validate certain parameter passed from the bottom level the attacker should trick the user into installing a malicious application and control the bottom level successful exploit could cause information disclosure.


Bleichenbacher's attack on PKCS #1 v1.5 padding for RSA in STM32 cryptographic firmware library software expansion for STM32Cube (UM1924). The vulnerability can allow one to use Bleichenbacher's oracle attack to decrypt an encrypted ciphertext by making successive queries to the server using the vulnerable library resulting in remote information disclosure.


Bleichenbacher's attack on PKCS #1 v1.5 padding for RSA in Microchip Libraries for Applications 2018-11-26 All up to 2018-11-26. The vulnerability can allow one to use Bleichenbacher's oracle attack to decrypt an encrypted ciphertext by making successive queries to the server using the vulnerable library resulting in remote information disclosure.


Sliced Invoices plugin for WordPress 3.8.2 and earlier allows unauthenticated information disclosure and authenticated SQL injection via core/class-sliced.php.


Improper Restriction of XML External Entity Reference in subsystem forIntel(R) Quartus(R) Prime Pro Edition before version 20.3 and Intel(R) Quartus(R) Prime Standard Edition before version 20.2 may allow unauthenticated user to potentially enable information disclosure via network access.


Debug message containing addresses of memory transactions in some Intel(R) 10th Generation Core Processors supporting SGX may allow a privileged user to potentially enable information disclosure via local access.


Observable timing discrepancy in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.


Magento versions 2.4.0 and 2.3.5 (and earlier) are affected by an SQL Injection vulnerability that could lead to sensitive information disclosure. This vulnerability could be exploited by an authenticated user with permissions to the product listing page to read data from the database.


Improper initialization in a subsystem in the Intel(R) CSME versions before 11.8.86 11.12.86 11.22.86 12.0.81 13.0.47 13.30.17 14.1.53 14.5.32 13.50.11 and 15.0.22 may allow a privileged user to potentially enable information disclosure via local access.


Domain-bypass transient execution vulnerability in some Intel Atom(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.


The sf_event_mgt (aka Event management and registration) extension before 4.3.1 and 5.x before 5.1.1 for TYPO3 allows Information Disclosure (participant data and event data via email) because of Broken Access Control.


The l10nmgr (aka Localization Manager) extension before 7.4.0 8.x before 8.7.0 and 9.x before 9.2.0 for TYPO3 allows Information Disclosure (translatable fields).


Rockwell Automation ISaGRAF Runtime Versions 4.x and 5.x includes the functionality of setting a password that is required to execute privileged commands. The password value passed to ISaGRAF Runtime is the result of encryption performed with a fixed key value using the tiny encryption algorithm (TEA) on an entered or saved password. A remote unauthenticated attacker could pass their own encrypted password to the ISaGRAF 5 Runtime which may result in information disclosure on the device.


Rockwell Automation ISaGRAF Runtime Versions 4.x and 5.x stores the password in plaintext in a file that is in the same directory as the executable file. ISaGRAF Runtime reads the file and saves the data in a variable without any additional modification. A local unauthenticated attacker could compromise the user passwords resulting in information disclosure.


A vulnerability in the Trend Micro Apex One ServerMigrationTool component could allow an attacker to trigger an out-of-bounds red information disclosure which would disclose sensitive information to an unprivileged account. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.


In broadcastWifiCredentialChanged of ClientModeImpl.java there is a possible location permission bypass due to a missing permission check. This could lead to local information disclosure of the WiFi network name with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-159371448


In nfc_data_event of nfc_ncif.cc there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-151313205


In getGpuStatsGlobalInfo and getGpuStatsAppInfo of GpuService.cpp there is a possible permission bypass due to a missing permission check. This could lead to local information disclosure of gpu statistics with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-161903239


In priorLinearAllocation of C2AllocatorIon.cpp there is a possible use-after-free due to improper locking. This could lead to local information disclosure in the media codec with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-152239213


A flaw was found in the xdg-email component of xdg-utils-1.1.0-rc1 and newer. When handling mailto: URIs xdg-email allows attachments to be discreetly added via the URI when being passed to Thunderbird. An attacker could potentially send a victim a URI that automatically attaches a sensitive file to a new email. If a victim user does not notice that an attachment was added and sends the email this could result in sensitive information disclosure. It has been confirmed that the code behind this issue is in xdg-email and not in Thunderbird.


In checkGrantUriPermission of UriGrantsManagerService.java there is a possible permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-140729426


In postNotification of ServiceRecord.java there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-153878498


In nfc_enabled of nfc_main.cc there is a possible out of bounds read due to an incorrect increment. This could lead to local information disclosure via firmware with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-155234594


In avrc_ctrl_pars_vendor_cmd of avrc_pars_tg.cc there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-168712245


In ce_t4t_update_binary of ce_t4t.cc there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-157649298


In EapFailureNotifier.java and SimRequiredNotifier.java there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-156008365


In nfc_ncif_proc_ee_action of nfc_ncif.cc there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-157649306


In smp_br_state_machine_event of smp_br_main.cc there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure triggered by a malformed Bluetooth packet with no additional execution privileges needed. User interaction is not needed for exploitation. Bounds Sanitizer mitigates this in the default configuration.Product: AndroidVersions: Android-11Android ID: A-162327732


In filter_incoming_event of hci_layer.cc there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-141618611


In SELinux policies of mls there is a missing permission check. This could lead to local information disclosure of package metadata with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-161356067


Mahavitaran android application 7.50 and prior transmit sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs referrer header MITM or browser history.


In createSimSelectNotification of SimSelectNotification.java there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-153556754


In checkGrantUriPermission of UriGrantsManagerService.java there is a possible way to access contacts due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-138791358


In phNxpNciHal_core_initialized of phNxpNciHal.cc there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the NFC server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-153731880


During boot the device unlock interface behaves differently depending on if a fingerprint registered to the device is present. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-79776455


In getRadioAccessFamily of PhoneInterfaceManager.java there is a possible read of privileged data due to a missing permission check. This could lead to local information disclosure of radio data with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-150857259


In nfc_ncif_proc_get_routing of nfc_ncif.cc there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-153655153


In isSubmittable and showWarningMessagesIfAppropriate of WifiConfigController.java and WifiConfigController2.java there is a possible insecure WiFi configuration due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-161378819


In phNxpNciHal_core_initialized of phNxpNciHal.cc there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the NFC server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-153731335


A vulnerability in the TCL Android Smart TV series V8-R851T02-LF1 V295 and below and V8-T658T01-LF1 V373 and below by TCL Technology Group Corporation allows an attacker on the adjacent network to arbitrarily browse and download sensitive files over an insecure web server running on port 7989 that lists all files & directories. An unprivileged remote attacker on the adjacent network can download most system files leading to serious critical information disclosure. Also some TV models and/or FW versions may expose the webserver with the entire filesystem accessible on another port. For example nmap scan for all ports run directly from the TV model U43P6046 (Android 8.0) showed port 7983 not mentioned in the original CVE description but containing the same directory listing of the entire filesystem. This webserver is bound (at least) to localhost interface and accessible freely to all unprivileged installed apps on the Android such as a regular web browser. Any app can therefore read any files of any other apps including Android system settings including sensitive data such as saved passwords private keys etc.


In showProvisioningNotification of ConnectivityService.java there is an unsafe PendingIntent. This could lead to local information disclosure of notification data with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-154928507


In setErrorPlaybackState of BluetoothMediaBrowserService.java there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-156009462


In the nl80211_policy policy of nl80211.c there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not required for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-119770583


A heap overflow vulnerability exists within FactoryTalk Linx Version 6.11 and prior. This vulnerability could allow a remote unauthenticated attacker to send malicious set attribute requests which could result in the leaking of sensitive information. This information disclosure could lead to the bypass of address space layout randomization (ASLR).


In nfc_ncif_proc_get_routing of nfc_ncif.cc there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-122358602


SAP NetWeaver AS ABAP (Web Dynpro) versions - 731 740 750 751 752 753 754 755 782 allows an authenticated user to access Web Dynpro components which reveals sensitive system information that would otherwise be restricted to highly privileged users because of missing authorization resulting in Information Disclosure.


Information disclosure in Advanced Search component of GitLab EE starting from 8.4 results in exposure of search terms via Rails logs. This affects versions >=8.4 to <13.4.7 >=13.5 to <13.5.5 and >=13.6 to <13.6.2.


SAP Process Integration (PGP Module - Business-to-Business Add On) version - 1.0 allows an attacker to read PGP Keys under certain conditions in the PGP Module of Business-to-Business Add-On these keys can then be used to read messages processed by the module leading to Information Disclosure.


Information disclosure via GraphQL in GitLab CE/EE 13.1 and later exposes private group and project membership. This affects versions >=13.6 to <13.6.2 >=13.5 to <13.5.5 and >=13.1 to <13.4.7.


SAP Adaptive Server Enterprise version 16.0 allows an authenticated attacker to exploit certain misconfigured endpoints exposed over the adjacent network to read system administrator password leading to Information Disclosure. This could help the attacker to read/write any data and even stop the server like an administrator.


SAP NetWeaver (ABAP Server) and ABAP Platform versions 731 740 750 allows an attacker with admin privileges to access certain files which should otherwise be restricted leading to Information Disclosure.


SAP 3D Visual Enterprise Viewer version 9 allows an attacker to send certain manipulated file to the victim which can lead to leakage of sensitive information when the victim loads the malicious file into the VE viewer leading to Information Disclosure.


SAP NetWeaver - XML Toolkit for JAVA (ENGINEAPI) (versions- 7.10 7.11 7.20 7.30 7.31 7.40 7.50) under certain conditions allows an attacker to access information which would otherwise be restricted leading to Information Disclosure.


An exploitable authentication bypass vulnerability exists in the ESPON Web Control functionality of Epson EB-1470Ui MAIN: 98009273ESWWV107 MAIN2: 8X7325WWV303. A specially crafted series of HTTP requests can cause authentication bypass resulting in information disclosure. An attacker can send an HTTP request to trigger this vulnerability.


SAP NetWeaver (ABAP Server) and ABAP Platform versions - 740 750 751 752 753 754 755 allows a business user to access the list of users in the given system using value help leading to Information Disclosure.


Under certain conditions the SAP Adaptive Server Enterprise version 16.0 allows an attacker to access encrypted sensitive and confidential information through publicly readable installation log files leading to a compromise of the installed Cockpit. This compromise could enable the attacker to view modify and/or make unavailable any data associated with the Cockpit leading to Information Disclosure.


SAP Commerce versions - 6.7 1808 1811 1905 may allow an attacker to access information under certain conditions which would otherwise be restricted leading to Information Disclosure.


Certain settings page(s) in SAP Business Objects Business Intelligence Platform (CMC) version 4.2 generates error messages that can give enterprise private-network related information which would otherwise be restricted leading to Information Disclosure.


SAP Enable Now before version 1911 sends the Session ID cookie value in URL. This might be stolen from the browser history or log files leading to Information Disclosure.


SAP Business Objects Business Intelligence Platform (CMC) version 4.1 4.2 shows cleartext password in the response leading to Information Disclosure. It involves social engineering in order to gain access to system and If password is known it would give administrative rights to the attacker to read/modify delete the data and rights within the system.


Forcepoint Web Security Content Gateway versions prior to 8.5.4 improperly process XML input leading to information disclosure.


Under certain conditions the upgrade of SAP Data Hub 2.7 to SAP Data Intelligence version - 3.0 allows an attacker to access confidential system configuration information that should otherwise be restricted leading to Information Disclosure.


Admin tools and Query Builder in SAP Business Objects Business Intelligence Platform versions 4.1 4.2 allows an attacker to access information that should otherwise be restricted leading to Information Disclosure.


Under certain conditions SAP Adaptive Server Enterprise (Cockpit) version 16.0 allows an attacker with access to local network to get sensitive and confidential information leading to Information Disclosure. It can be used to get user account credentials tamper with system data and impact system availability.


User enumeration vulnerability can be exploited to get a list of user accounts and personal user information can be exposed in SAP NetWeaver Application Server ABAP (POWL test application) versions - 710 711 730 731 740 750 leading to Information Disclosure.


SAP NetWeaver AS Java (HTTP Service) versions 7.10 7.11 7.20 7.30 7.31 7.40 7.50 allows an attacker with administrator privileges to access user sensitive data such as passwords in trace files when the user logs in and sends request with login credentials leading to Information Disclosure.


Certain vulnerable endpoints in SAP NetWeaver AS Java (Heap Dump Application) versions 7.30 7.31 7.40 7.50 provide valuable information about the system like hostname server node and installation path that could be misused by an attacker leading to Information Disclosure.


An issue was discovered in FNET through 4.6.4. The code for processing the hostname from an LLMNR request doesn't check for '\\0' termination. Therefore the deduced length of the hostname doesn't reflect the correct length of the actual data. This may lead to Information Disclosure in _fnet_llmnr_poll in fnet_llmnr.c during a response to a malicious request of the DNS class IN.


Microsoft Dynamics Business Central/NAV Information Disclosure


In PHP versions 7.2.x below 7.2.33 7.3.x below 7.3.21 and 7.4.x below 7.4.9 while processing PHAR files using phar extension phar_parse_zipfile could be tricked into accessing freed memory which could lead to a crash or information disclosure.


When using fgetss() function to read data with stripping tags in PHP versions 7.2.x below 7.2.27 7.3.x below 7.3.14 and 7.4.x below 7.4.2 it is possible to supply data that will cause this function to read past the allocated buffer. This may lead to information disclosure or crash.


When using certain mbstring functions to convert multibyte encodings in PHP versions 7.2.x below 7.2.27 7.3.x below 7.3.14 and 7.4.x below 7.4.2 it is possible to supply data that will cause function mbfl_filt_conv_big5_wchar to read past the allocated buffer. This may lead to information disclosure or crash.


GitLab EE 8.0 and later through 12.7.2 allows Information Disclosure.


In PHP versions 7.2.x below 7.2.9 7.3.x below 7.3.16 and 7.4.x below 7.4.4 while parsing EXIF data with exif_read_data() function it is possible for malicious data to cause PHP to read one byte of uninitialized memory. This could potentially lead to information disclosure or crash.


In PHP versions 7.3.x below 7.3.15 and 7.4.x below 7.4.3 while extracting PHAR files on Windows using phar extension certain content inside PHAR file could lead to one-byte read past the allocated buffer. This could potentially lead to information disclosure or crash.


GitLab EE 10.1 through 12.7.2 allows Information Disclosure.


A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists in Modicon M221 (all references all versions) that could allow non sensitive information disclosure when the attacker has captured the traffic between EcoStruxure Machine - Basic software and Modicon M221 controller.


Elasticsearch versions before 7.10.0 and 6.8.14 have an information disclosure issue when audit logging and the emit_request_body option is enabled. The Elasticsearch audit log could contain sensitive information such as password hashes or authentication tokens. This could allow an Elasticsearch administrator to view these details.


NVIDIA GeForce NOW versions prior to 2.0.23 (Windows macOS) and versions prior to 5.31 (Android Shield TV) contains a vulnerability in the application software where the network test component transmits sensitive information insecurely which may lead to information disclosure.


IBM DataPower Gateway 10.0.0.0 through 10.0.1.0 and 2018.4.1.0 through 2018.4.1.14 stores sensitive information in GET request parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs referrer header or browser history. IBM X-Force ID: 193033.


Symantec Endpoint Detection And Response prior to 4.4 may be susceptible to an information disclosure issue which is a type of vulnerability that could potentially allow unauthorized access to data.