In the Android kernel in the video driver there is a kernel pointer leak due to a WARN_ON statement. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.


In the Android kernel in F2FS driver there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with system execution privileges needed. User interaction is not needed for exploitation.


In the Android kernel in F2FS touch driver there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with system execution privileges needed. User interaction is not needed for exploitation.


In the Android kernel in SEC_TS touch driver there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.


In the Linux kernel through 3.1 there is an information disclosure issue via /proc/stat.


An undisclosed vulnerability in Jazz common products exists with potential for information disclosure. IBM X-Force ID: 128627.


Improper validation of the length field of LLDP-MED TLV in userdisk/vport_lldpd in Moxa Camera VPort 06EC-2V Series version 1.1 allows information disclosure to attackers due to controllable loop counter variable via a crafted lldp packet.


Magento versions 2.3.3 and earlier 2.2.10 and earlier 1.14.4.3 and earlier and 1.9.4.3 and earlier have an sql injection vulnerability. Successful exploitation could lead to sensitive information disclosure.


Magento versions 2.3.3 and earlier 2.2.10 and earlier 1.14.4.3 and earlier and 1.9.4.3 and earlier have a path traversal vulnerability. Successful exploitation could lead to sensitive information disclosure.


It was found that 3scale's APIdocs does not validate the access token in the case of invalid token it uses session auth instead. This conceivably bypasses access controls and permits unauthorized information disclosure.


It was found that the cookie used for CSRF prevention in Keycloak was not unique to each session. An attacker could use this flaw to gain access to an authenticated user session leading to possible information disclosure or further attacks.


IBM WebSphere eXtreme Scale 8.6.1 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs referrer header or browser history. IBM X-Force ID: 177932.


An information disclosure issue was discovered in GitLab Enterprise Edition before 11.5.8 11.6.x before 11.6.6 and 11.7.x before 11.7.1. The GitHub token used in CI/CD for External Repos was being leaked to project maintainers in the UI.

information disclosure issue
information disclosure


An information disclosure issue was discovered GitLab versions < 12.1.2 < 12.0.4 and < 11.11.6 in the security dashboard which could result in disclosure of vulnerability feedback information.


An information disclosure issue was discovered in GitLab CE/EE 8.14 and later by using the move issue feature which could result in disclosure of the newly created issue ID.


An information disclosure issue in GitLab starting from version 12.8 allowed a user with access to the server logs to see sensitive information that wasn't properly redacted.


An information disclosure issue exist in D-LINK-DIR-615 B2 2.01mt. An attacker can obtain a user name and password by forging a post request to the / getcfg.php page


An information disclosure issue was addressed by removing the vulnerable code. This issue affected versions prior to macOS High Sierra 10.13.6.


An information disclosure issue was addressed with improved state management. This issue is fixed in macOS Catalina 10.15.6 watchOS 6.2.8. A malicious application may disclose restricted memory.


An information disclosure issue existed in the transition of program state. This issue was addressed with improved state handling. This issue is fixed in iTunes 12.11 for Windows. A malicious application may be able to access local users Apple IDs.


An information disclosure issue was addressed by removing the vulnerable code. This issue is fixed in iOS 13.3 and iPadOS 13.3. An application may be able to execute arbitrary code with kernel privileges.

information disclosure issue
information disclosure
arbitrary code execution
dos


An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 13.5 and iPadOS 13.5 macOS Catalina 10.15.5 tvOS 13.4.5 watchOS 6.2.5. A local user may be able to read kernel memory.

information disclosure issue
information disclosure
dos


An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 13.5 and iPadOS 13.5 macOS Catalina 10.15.5 tvOS 13.4.5 watchOS 6.2.5. A malicious application may be able to determine kernel memory layout.


An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1465 CVE-2019-1466.


An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0968 CVE-2019-0977 CVE-2019-1009 CVE-2019-1010 CVE-2019-1011 CVE-2019-1012 CVE-2019-1013 CVE-2019-1015 CVE-2019-1016 CVE-2019-1046 CVE-2019-1048 CVE-2019-1049 CVE-2019-1050.


An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory aka 'Microsoft Excel Information Disclosure Vulnerability'.


An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0968 CVE-2019-0977 CVE-2019-1009 CVE-2019-1011 CVE-2019-1012 CVE-2019-1013 CVE-2019-1015 CVE-2019-1016 CVE-2019-1046 CVE-2019-1047 CVE-2019-1048 CVE-2019-1049 CVE-2019-1050.


An information disclosure vulnerability exists in Windows when the Windows SMB Client kernel-mode driver fails to properly handle objects in memory aka 'Windows SMB Client Driver Information Disclosure Vulnerability'.


An information disclosure vulnerability exists in Microsoft Access software when the software fails to properly handle objects in memory aka 'Microsoft Access Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1400.


An information disclosure vulnerability exists in the way Rome SDK handles server SSL/TLS certificate validation aka 'Rome SDK Information Disclosure Vulnerability'.


An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1094 CVE-2019-1095 CVE-2019-1098 CVE-2019-1099 CVE-2019-1100 CVE-2019-1101.


An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory.To exploit this vulnerability an authenticated attacker could run a specially crafted application aka 'Windows Kernel Information Disclosure Vulnerability'.


An information disclosure vulnerability exists when Windows Update Client fails to properly handle objects in memory aka 'Windows Update Client Information Disclosure Vulnerability'.


An information disclosure vulnerability exists when the Windows RDP server improperly discloses the contents of its memory aka 'Remote Desktop Protocol Server Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1224.


An information disclosure vulnerability exists when affected Open Enclave SDK versions improperly handle objects in memory aka 'Open Enclave SDK Information Disclosure Vulnerability'.


An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory aka 'DirectWrite Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1093.


An information disclosure vulnerability exists when the Windows Servicing Stack allows access to unprivileged file locations aka 'Microsoft Windows Information Disclosure Vulnerability'.


An information disclosure vulnerability exists when the Windows Remote Procedure Call (RPC) runtime improperly initializes objects in memory aka 'Windows Remote Procedure Call Information Disclosure Vulnerability'.


An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory aka 'DirectWrite Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1097.


An information disclosure vulnerability exists in the way Windows Error Reporting (WER) handles objects in memory aka 'Windows Error Reporting Information Disclosure Vulnerability'.


An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1334.


An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in memory aka 'Microsoft Graphics Components Information Disclosure Vulnerability'.


An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory aka 'DirectWrite Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1432.


An information disclosure vulnerability exists when the Windows RDP server improperly discloses the contents of its memory aka 'Remote Desktop Protocol Server Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1225.


An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1252.


An information disclosure vulnerability exists when the win32k component improperly provides kernel information aka 'Win32k Information Disclosure Vulnerability'.


An information disclosure vulnerability in Android Apps using Microsoft Authentication Library (MSAL) 0.3.1-Alpha or later exists under specific conditions aka 'Microsoft Authentication Library for Android Information Disclosure Vulnerability'.


An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when it improperly enforces permissions aka 'SQL Server Management Studio Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1376.


An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory aka 'Microsoft Graphics Component Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1078 CVE-2019-1153.


An information disclosure vulnerability exists in Microsoft SharePoint when an attacker uploads a specially crafted file to the SharePoint Server.An authenticated attacker who successfully exploited this vulnerability could potentially leverage SharePoint functionality to obtain SMB hashes.The security update addresses the vulnerability by correcting how SharePoint checks file content. aka 'Microsoft SharePoint Information Disclosure Vulnerability'.


An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory aka 'Windows Graphics Component Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1143 CVE-2019-1158.


An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory aka 'Microsoft Edge Information Disclosure Vulnerability'.


An information disclosure vulnerability exists in the way that the Windows Code Integrity Module handles objects in memory aka 'Windows Code Integrity Module Information Disclosure Vulnerability'.


An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1474.


An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory aka 'Windows GDI Information Disclosure Vulnerability'.


An information disclosure exists in the Windows Common Log File System (CLFS) driver when it fails to properly handle sandbox checks aka 'Windows Common Log File System Driver Information Disclosure Vulnerability'.


An information disclosure vulnerability exists in Lync 2013 aka 'Lync 2013 Information Disclosure Vulnerability'.


An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1465 CVE-2019-1467.


An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0968 CVE-2019-0977 CVE-2019-1009 CVE-2019-1010 CVE-2019-1011 CVE-2019-1012 CVE-2019-1013 CVE-2019-1016 CVE-2019-1046 CVE-2019-1047 CVE-2019-1048 CVE-2019-1049 CVE-2019-1050.


An information disclosure vulnerability exists in SymCrypt during the OAEP decryption stage aka 'SymCrypt Information Disclosure Vulnerability'.


An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in memory aka 'Microsoft Graphics Components Information Disclosure Vulnerability'.


An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0968 CVE-2019-0977 CVE-2019-1009 CVE-2019-1010 CVE-2019-1011 CVE-2019-1012 CVE-2019-1013 CVE-2019-1015 CVE-2019-1016 CVE-2019-1047 CVE-2019-1048 CVE-2019-1049 CVE-2019-1050.


An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory aka 'Windows Graphics Component Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1143 CVE-2019-1154.


An information vulnerability exists when Windows Modules Installer Service improperly discloses file information aka 'Windows Modules Installer Service Information Disclosure Vulnerability'.


An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0968 CVE-2019-0977 CVE-2019-1009 CVE-2019-1010 CVE-2019-1012 CVE-2019-1013 CVE-2019-1015 CVE-2019-1016 CVE-2019-1046 CVE-2019-1047 CVE-2019-1048 CVE-2019-1049 CVE-2019-1050.


An information disclosure vulnerability exists when the Windows Hyper-V Network Switch on a host operating system fails to properly validate input from an authenticated user on a guest operating system aka 'Hyper-V Information Disclosure Vulnerability'.


An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1071.


An information disclosure vulnerability exists in Microsoft Access software when the software fails to properly handle objects in memory aka 'Microsoft Access Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1463.


An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1286.


An information disclosure vulnerability exists when the Windows Transaction Manager improperly handles objects in memory aka 'Windows Transaction Manager Information Disclosure Vulnerability'.


An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1227.


An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory aka 'Microsoft Excel Information Disclosure Vulnerability'.


An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0968 CVE-2019-0977 CVE-2019-1010 CVE-2019-1011 CVE-2019-1012 CVE-2019-1013 CVE-2019-1015 CVE-2019-1016 CVE-2019-1046 CVE-2019-1047 CVE-2019-1048 CVE-2019-1049 CVE-2019-1050.


An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1472.


An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1095 CVE-2019-1098 CVE-2019-1099 CVE-2019-1100 CVE-2019-1101 CVE-2019-1116.


An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1094 CVE-2019-1095 CVE-2019-1098 CVE-2019-1099 CVE-2019-1100 CVE-2019-1116.


An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory aka 'DirectWrite Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1245 CVE-2019-1251.


An information disclosure vulnerability exists when Visual Studio improperly parses XML input in certain settings files aka 'Visual Studio Information Disclosure Vulnerability'.


An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0968 CVE-2019-0977 CVE-2019-1009 CVE-2019-1010 CVE-2019-1011 CVE-2019-1012 CVE-2019-1013 CVE-2019-1015 CVE-2019-1016 CVE-2019-1046 CVE-2019-1047 CVE-2019-1049 CVE-2019-1050.


An information disclosure vulnerability exists when Windows Hyper-V on a host operating system fails to properly validate input from an authenticated user on a guest operating system aka 'Windows Hyper-V Information Disclosure Vulnerability'.


An information disclosure vulnerability exists in Windows Adobe Type Manager Font Driver (ATMFD.dll) when it fails to properly handle objects in memory aka 'OpenType Font Driver Information Disclosure Vulnerability'.


An information disclosure vulnerability exists when the Windows TCP/IP stack improperly handles IPv6 flowlabel filled in packets aka 'Windows TCP/IP Information Disclosure Vulnerability'.


An information disclosure vulnerability exists in Windows Media Player when it fails to properly handle objects in memory aka 'Windows Media Player Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1480.


An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0968 CVE-2019-0977 CVE-2019-1009 CVE-2019-1010 CVE-2019-1011 CVE-2019-1012 CVE-2019-1013 CVE-2019-1015 CVE-2019-1016 CVE-2019-1046 CVE-2019-1047 CVE-2019-1048 CVE-2019-1049.


In ComposeActivityEmail of ComposeActivityEmail.java there is a possible way to silently attach files to an email due to a confused deputy. This could lead to local information disclosure sending files accessible to AOSP Mail to a remote email recipient with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-32589229.


An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory allowing an attacker to retrieve information from a targeted system aka 'Windows GDI Information Disclosure Vulnerability'.


An information disclosure vulnerability exists when Exchange allows creation of entities with Display Names having non-printable characters. An authenticated attacker could exploit this vulnerability by creating entities with invalid display names which when added to conversations remain invisible. This security update addresses the issue by validating display names upon creation in Microsoft Exchange and by rendering invalid display names correctly in Microsoft Outlook clients. aka 'Microsoft Exchange Information Disclosure Vulnerability'.


An information disclosure vulnerability exists when Windows Hyper-V writes uninitialized memory to disk aka 'Windows Hyper-V Information Disclosure Vulnerability'.


An information disclosure vulnerability exists when the Windows Remote Desktop Protocol (RDP) fails to properly handle objects in memory aka 'Remote Desktop Protocol Information Disclosure Vulnerability'.


An information disclosure vulnerability exists when Microsoft Edge based on Edge HTML improperly handles objects in memory aka 'Microsoft Edge based on Edge HTML Information Disclosure Vulnerability'.


An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0968 CVE-2019-0977 CVE-2019-1009 CVE-2019-1010 CVE-2019-1011 CVE-2019-1012 CVE-2019-1015 CVE-2019-1016 CVE-2019-1046 CVE-2019-1047 CVE-2019-1048 CVE-2019-1049 CVE-2019-1050.


An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1094 CVE-2019-1095 CVE-2019-1099 CVE-2019-1100 CVE-2019-1101 CVE-2019-1116.


An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1345.


An information disclosure vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory aka 'Microsoft Office Information Disclosure Vulnerability'.


An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1073.


An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1466 CVE-2019-1467.


An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0968 CVE-2019-0977 CVE-2019-1009 CVE-2019-1010 CVE-2019-1011 CVE-2019-1012 CVE-2019-1013 CVE-2019-1015 CVE-2019-1046 CVE-2019-1047 CVE-2019-1048 CVE-2019-1049 CVE-2019-1050.


An information disclosure vulnerability exists in Azure Active Directory (AAD) Microsoft Account (MSA) during the login request session aka 'Windows Information Disclosure Vulnerability'.


An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory aka 'Windows Graphics Component Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1154 CVE-2019-1158.


An information disclosure vulnerability exists when the Windows RDP client improperly discloses the contents of its memory aka 'Remote Desktop Protocol Client Information Disclosure Vulnerability'.


An information disclosure vulnerability exists when the win32k component improperly provides kernel information aka 'Win32k Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1440.


An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Microsoft Edge aka 'Scripting Engine Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0990.


An information disclosure vulnerability exists in the way Microsoft SharePoint handles session objects aka 'Microsoft SharePoint Information Disclosure Vulnerability'.


An information disclosure vulnerability exists when affected Microsoft browsers improperly handle objects in memory aka 'Microsoft Browser Information Disclosure Vulnerability'.


An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0968 CVE-2019-0977 CVE-2019-1009 CVE-2019-1010 CVE-2019-1011 CVE-2019-1013 CVE-2019-1015 CVE-2019-1016 CVE-2019-1046 CVE-2019-1047 CVE-2019-1048 CVE-2019-1049 CVE-2019-1050.


An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1094 CVE-2019-1095 CVE-2019-1098 CVE-2019-1100 CVE-2019-1101 CVE-2019-1116.


An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory aka 'DirectWrite Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1244 CVE-2019-1245.


An information disclosure vulnerability exists when certain central processing units (CPU) speculatively access memory aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1071 CVE-2019-1073.


An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory aka 'DirectWrite Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1411.


An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1228.


An information disclosure vulnerability exists when DirectX improperly handles objects in memory aka 'DirectX Information Disclosure Vulnerability'.


An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1094 CVE-2019-1098 CVE-2019-1099 CVE-2019-1100 CVE-2019-1101 CVE-2019-1116.


An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory aka 'Microsoft Graphics Component Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1078 CVE-2019-1148.


An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address aka 'Windows Kernel Information Disclosure Vulnerability'.


An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1094 CVE-2019-1095 CVE-2019-1098 CVE-2019-1099 CVE-2019-1101 CVE-2019-1116.


An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory aka 'DirectWrite Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1244 CVE-2019-1251.


An information disclosure vulnerability exists when Unistore.dll fails to properly handle objects in memory aka 'Microsoft unistore.dll Information Disclosure Vulnerability'.


An information disclosure vulnerability exists when the win32k component improperly provides kernel information aka 'Win32k Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1436.


An information disclosure vulnerability exists when the Windows Graphics component improperly handles objects in memory aka 'Microsoft Graphics Component Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1148 CVE-2019-1153.


An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0968 CVE-2019-0977 CVE-2019-1009 CVE-2019-1010 CVE-2019-1011 CVE-2019-1012 CVE-2019-1013 CVE-2019-1015 CVE-2019-1016 CVE-2019-1046 CVE-2019-1047 CVE-2019-1048 CVE-2019-1050.


An information disclosure vulnerability exists in Windows Media Player when it fails to properly handle objects in memory aka 'Windows Media Player Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1481.


An information disclosure vulnerability exists when Microsoft Edge based on Edge HTML improperly handles objects in memory aka 'Microsoft Edge based on Edge HTML Information Disclosure Vulnerability'.


An information disclosure vulnerability exists when the win32k component improperly provides kernel information aka 'Win32k Information Disclosure Vulnerability'.


An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0702 CVE-2019-0755 CVE-2019-0767 CVE-2019-0775.


An information disclosure vulnerability exists in Microsoft SQL Server Analysis Services when it improperly enforces metadata permissions aka 'Microsoft SQL Server Analysis Services Information Disclosure Vulnerability'.


An information disclosure vulnerability exists in the Windows Event Viewer (eventvwr.msc) when it improperly parses XML input containing a reference to an external entity aka 'Windows Event Viewer Information Disclosure Vulnerability'.


An information disclosure vulnerability exists in Skype for Android aka 'Skype for Android Information Disclosure Vulnerability'.


An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Microsoft Edge aka 'Scripting Engine Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1023.


Under certain conditions the Monitoring Servlet of the SAP NetWeaver Process Integration (Messaging System) fixed in versions 7.10 to 7.11 7.20 7.30 7.31 7.40 7.50 allows an attacker to see the names of database tables used by the application leading to information disclosure.


An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory aka 'Microsoft Excel Information Disclosure Vulnerability'.


An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Microsoft Edge aka 'Scripting Engine Information Disclosure Vulnerability'.


An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0758 CVE-2019-0882.


An information disclosure vulnerability exists when Windows Task Scheduler improperly discloses credentials to Windows Credential Manager aka 'Windows Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0839.


An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0758 CVE-2019-0961.


An information disclosure vulnerability exists when the Windows TCP/IP stack improperly handles fragmented IP packets aka 'Windows TCP/IP Information Disclosure Vulnerability'.


An information disclosure vulnerability exists when Windows Hyper-V on a host operating system fails to properly validate input from an authenticated user on a guest operating system aka 'Windows Hyper-V Information Disclosure Vulnerability'.


An information disclosure vulnerability exists when Azure DevOps Server and Microsoft Team Foundation Server do not properly sanitize a specially crafted authentication request to an affected server aka 'Azure DevOps Server and Team Foundation Server Information Disclosure Vulnerability'.


An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory.To exploit this vulnerability an authenticated attacker could run a specially crafted application aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0702 CVE-2019-0755 CVE-2019-0775 CVE-2019-0782.


An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests aka 'Windows SMB Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0703 CVE-2019-0704.


An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests aka 'Windows SMB Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0703 CVE-2019-0821.


An information disclosure vulnerability exists when the win32k component improperly provides kernel information aka 'Win32k Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0848.


An information disclosure vulnerability exists when the win32k component improperly provides kernel information aka 'Win32k Information Disclosure Vulnerability'.


An information disclosure vulnerability exists in the way Azure WaLinuxAgent creates swap files on resource disks aka 'Azure Linux Agent Information Disclosure Vulnerability'.


An information disclosure vulnerability exists when Microsoft Outlook improperly handles certain types of messages aka \Microsoft Outlook Information Disclosure Vulnerability.\ This affects Office 365 ProPlus Microsoft Office Microsoft Outlook.


An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0755 CVE-2019-0767 CVE-2019-0775 CVE-2019-0782.


An information disclosure vulnerability exists in .NET Framework and .NET Core which allows bypassing Cross-origin Resource Sharing (CORS) configurations aka \.NET Framework Information Disclosure Vulnerability.\ This affects Microsoft .NET Framework 2.0 Microsoft .NET Framework 3.0 Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 Microsoft .NET Framework 4.5.2 Microsoft .NET Framework 4.6 Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 Microsoft .NET Framework 4.7/4.7.1/4.7.2 .NET Core 2.1 Microsoft .NET Framework 4.7.1/4.7.2 Microsoft .NET Framework 3.5 Microsoft .NET Framework 3.5.1 Microsoft .NET Framework 4.6/4.6.1/4.6.2 .NET Core 2.2 Microsoft .NET Framework 4.7.2.


An information disclosure vulnerability exists when Team Foundation Server does not properly handle variables marked as secret aka \Team Foundation Server Information Disclosure Vulnerability.\ This affects Team.


An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0849.


An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0802.


An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0774.


An information disclosure vulnerability exists in the way Azure IoT Java SDK logs sensitive information aka 'Azure IoT Java SDK Information Disclosure Vulnerability'.


An information disclosure vulnerability exists when Microsoft Office improperly discloses the contents of its memory aka \Microsoft Office Information Disclosure Vulnerability.\ This affects Office 365 ProPlus Microsoft Office.


An information disclosure vulnerability exists when Visual Studio improperly discloses arbitrary file contents if the victim opens a malicious .vscontent file aka \Microsoft Visual Studio Information Disclosure Vulnerability.\ This affects Microsoft Visual Studio.


An information disclosure vulnerability exists in the way that Microsoft Edge handles cross-origin requests aka 'Microsoft Edge Information Disclosure Vulnerability'.


An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0614.


An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0882 CVE-2019-0961.


An information disclosure vulnerability exists when the win32k component improperly provides kernel information aka 'Win32k Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0814.


An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0602 CVE-2019-0616 CVE-2019-0619 CVE-2019-0660 CVE-2019-0664.


An information disclosure vulnerability exists when Chakra improperly discloses the contents of its memory which could provide an attacker with information to further compromise the user's computer or data.To exploit the vulnerability an attacker must know the memory address of where the object was created.The update addresses the vulnerability by changing the way certain functions handle objects in memory aka Scripting Engine Information Disclosure Vulnerability. This CVE ID is unique from CVE-2019-0658.

information disclosure vulnerability
improper disclosure of memory content


An information disclosure vulnerability exists when the Terminal Services component improperly discloses the contents of its memory aka 'Windows Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0838.


An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0602 CVE-2019-0615 CVE-2019-0616 CVE-2019-0619 CVE-2019-0660.


An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0602 CVE-2019-0615 CVE-2019-0616 CVE-2019-0619 CVE-2019-0664.


An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0615 CVE-2019-0616 CVE-2019-0619 CVE-2019-0660 CVE-2019-0664.


An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0602 CVE-2019-0615 CVE-2019-0619 CVE-2019-0660 CVE-2019-0664.


An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Microsoft Edge aka 'Scripting Engine Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0648.

information disclosure vulnerability
improper memory handle


An information disclosure vulnerability exists when affected Open Enclave SDK versions improperly handle objects in memory aka 'Open Enclave SDK Information Disclosure Vulnerability'.


An information disclosure vulnerability exists when Windows Subsystem for Linux improperly handles objects in memory aka \Windows Subsystem for Linux Information Disclosure Vulnerability.\ This affects Windows 10 Servers Windows 10 Windows Server 2019.


An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory aka 'Microsoft Scripting Engine Information Disclosure Vulnerability'.


An information disclosure vulnerability exists when the Windows Print Spooler does not properly handle objects in memory aka 'Windows Print Spooler Information Disclosure Vulnerability'.


An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0621 CVE-2019-0663.

information disclosure vulnerability
improper memory object handle


An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0702 CVE-2019-0767 CVE-2019-0775 CVE-2019-0782.


An information disclosure vulnerability exists when the Human Interface Devices (HID) component improperly handles objects in memory aka 'HID Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0601.


An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory aka 'Microsoft Edge Information Disclosure Vulnerability'.


An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0661 CVE-2019-0663.


An information disclosure vulnerability exists when DirectX improperly handles objects in memory aka 'DirectX Information Disclosure Vulnerability'.


The Windows GDI component in Windows 7 SP1 and Windows Server 2008 SP2 and R2 SP1 allows an information disclosure vulnerability due to the way objects are handled in memory aka \Windows Elevation of Privilege Vulnerability\.

information disclosure vulnerability
elevated privilege vulnerability
information disclosure


An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory aka \Microsoft Edge Information Disclosure Vulnerability.\ This affects Microsoft Edge. This CVE ID is unique from CVE-2018-0871.

information disclosure vulnerability
improper memory object handle
information disclosure


An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory aka \Windows Kernel Information Disclosure Vulnerability.\ This affects Windows 10 Windows 10 Servers. This CVE ID is unique from CVE-2018-8127.


An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory aka \Microsoft Edge Information Disclosure Vulnerability.\ This affects Microsoft Edge. This CVE ID is unique from CVE-2018-1021.


An information disclosure vulnerability exists when DirectX improperly handles objects in memory aka \DirectX Information Disclosure Vulnerability.\ This affects Windows 10 Windows Server 2019.


An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory aka \Microsoft Edge Information Disclosure Vulnerability.\ This affects Microsoft Edge. This CVE ID is unique from CVE-2018-0998.


An information disclosure vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory aka \Microsoft Edge Information Disclosure Vulnerability.\ This affects Microsoft Edge. This CVE ID is unique from CVE-2018-0892.


An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory aka \Microsoft Edge Information Disclosure Vulnerability.\ This affects Microsoft Edge. This CVE ID is unique from CVE-2018-8123.


An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0928 CVE-2020-1033 CVE-2020-1589 CVE-2020-1592.


An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-16901.


An information disclosure vulnerability exists when the Windows KernelStream improperly handles objects in memory aka 'Windows KernelStream Information Disclosure Vulnerability'.


An information disclosure vulnerability exists when the .NET Framework improperly handles objects in memory aka '.NET Framework Information Disclosure Vulnerability'.


An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory aka 'Microsoft Graphics Component Information Disclosure Vulnerability'.


An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory aka 'Media Foundation Information Disclosure Vulnerability'.


An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-1007.


An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory aka 'Media Foundation Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0937 CVE-2020-0939 CVE-2020-0946 CVE-2020-0947.


An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory aka 'Media Foundation Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0939 CVE-2020-0945 CVE-2020-0946 CVE-2020-0947.


An information disclosure vulnerability exists when DirectX improperly handles objects in memory aka 'DirectX Information Disclosure Vulnerability'.


An information disclosure vulnerability exists when the Windows State Repository Service improperly handles objects in memory aka 'Windows State Repository Service Information Disclosure Vulnerability'.


An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory aka 'Media Foundation Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0937 CVE-2020-0939 CVE-2020-0945 CVE-2020-0946.


An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory aka 'Microsoft Graphics Component Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-1083.


An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory aka 'Media Foundation Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0937 CVE-2020-0945 CVE-2020-0946 CVE-2020-0947.


An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-1033 CVE-2020-1589 CVE-2020-1592 CVE-2020-16854.


An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory aka 'Media Foundation Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0937 CVE-2020-0939 CVE-2020-0945 CVE-2020-0947.


An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory aka 'Windows Kernel Information Disclosure Vulnerability'.


An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0928 CVE-2020-1033 CVE-2020-1592 CVE-2020-16854.


An information disclosure vulnerability exists when the Windows Graphics component improperly handles objects in memory aka 'Microsoft Graphics Component Information Disclosure Vulnerability'.


An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory aka 'Microsoft Graphics Component Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0921.


An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-1367 CVE-2020-1389 CVE-2020-1419.


An information disclosure vulnerability exists when a Windows service improperly handles objects in memory aka 'Windows Service Information Disclosure Vulnerability'.


An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0928 CVE-2020-1589 CVE-2020-1592 CVE-2020-16854.


An information disclosure vulnerability exists when the Windows Push Notification Service improperly handles objects in memory aka 'Windows Push Notification Service Information Disclosure Vulnerability'.


An information disclosure vulnerability exists when Windows Subsystem for Linux improperly handles objects in memory aka 'Windows Subsystem for Linux Information Disclosure Vulnerability'.


An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory aka 'Media Foundation Information Disclosure Vulnerability'.


An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-1389 CVE-2020-1419 CVE-2020-1426.


An information disclosure vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory aka 'Microsoft Edge PDF Information Disclosure Vulnerability'.


An information disclosure vulnerability exists when the Windows Runtime improperly handles objects in memory aka 'Windows Runtime Information Disclosure Vulnerability'.


An information disclosure vulnerability exists when StartTileData.dll improperly handles objects in memory aka 'Windows Information Disclosure Vulnerability'.


An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0821.


An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory aka 'Internet Explorer Information Disclosure Vulnerability'.


An information disclosure vulnerability exists when Microsoft Exchange improperly handles objects in memory aka \Microsoft Exchange Memory Corruption Vulnerability.\ This affects Microsoft Exchange Server. This CVE ID is unique from CVE-2018-8154.

information disclosure vulnerability
improper memory object handle
memory corruption vulnerability
information disclosure
memory corruption


ASP.NET Core 1.0 1.1 and 2.0 allow an attacker to bypass Cross-origin Resource Sharing (CORS) configurations and retrieve normally restricted content from a web application aka \ASP.NET Core Information Disclosure Vulnerability\.


Dell Wyse ThinOS version 9.0 contains a Sensitive Information Disclosure Vulnerability. An authenticated malicious user with physical access to the system could exploit this vulnerability to read sensitive information written to the log files.


Dell Wyse ThinOS versions 9.0 9.1 and 9.1 MR1 contain a Sensitive Information Disclosure Vulnerability. An authenticated attacker with physical access to the system could exploit this vulnerability to read sensitive Smartcard data in log files.


Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability


IBM Cognos Analytics 11.0 and 11.1 is susceptible to an information disclosure vulnerability where an attacker could gain access to cached browser data. IBM X-Force ID: 161748.


Windows Common Log File System Driver Information Disclosure Vulnerability


Windows Common Log File System Driver Information Disclosure Vulnerability.


Microsoft Defender for IoT Information Disclosure Vulnerability


Microsoft Edge (Chromium-based) Information Disclosure Vulnerability


Microsoft Edge allows remote attackers to obtain sensitive information from process memory via a crafted web site aka \Microsoft Edge Information Disclosure Vulnerability.\


Microsoft Edge allows remote attackers to access arbitrary \My Documents\ files via a crafted web site aka \Microsoft Edge Information Disclosure Vulnerability.\


Microsoft Edge in Microsoft Windows 10 1703 allows information disclosure due to how Edge handles objects in memory aka \Microsoft Edge Information Disclosure Vulnerability\. This CVE ID is unique from CVE-2018-0763.


Microsoft Edge in Microsoft Windows 10 1703 and 1709 allows information disclosure due to how Edge handles objects in memory aka \Microsoft Edge Information Disclosure Vulnerability\. This CVE ID is unique from CVE-2018-0839.


Microsoft Microsoft Excel 2010 SP2 and Office Compatibility Pack SP2 allow remote attackers to obtain sensitive information from process memory via a crafted Office document aka \Microsoft Office Information Disclosure Vulnerability.\


Adobe Experience Manager Forms versions 6.2 6.1 6.0 have an information disclosure vulnerability resulting from abuse of the pre-population service in AEM Forms.


doorGets 7.0 has a sensitive information disclosure vulnerability in /setup/temp/admin.php and /setup/temp/database.php. A remote unauthenticated attacker could exploit this vulnerability to obtain the administrator password.


doorGets 7.0 has a sensitive information disclosure vulnerability in /fileman/php/copyfile.php. A remote unauthenticated attacker can exploit this vulnerability to obtain server-sensitive information.


doorGets 7.0 has a sensitive information disclosure vulnerability in /fileman/php/copydir.php. A remote unauthenticated attacker can exploit this vulnerability to obtain server-sensitive information.


doorGets 7.0 has a sensitive information disclosure vulnerability in /fileman/php/movefile.php. A remote unauthenticated attacker can exploit this vulnerability to obtain server-sensitive information or make the server unserviceable.


doorGets 7.0 has a sensitive information disclosure vulnerability in /fileman/php/download.php. A remote unauthenticated attacker can exploit this vulnerability to obtain server-sensitive information.


doorGets 7.0 has a sensitive information disclosure vulnerability in /fileman/php/renamefile.php. A remote unauthenticated attacker can exploit this vulnerability to obtain server-sensitive information or make the server unserviceable.


doorGets 7.0 has a sensitive information disclosure vulnerability in /fileman/php/downloaddir.php. A remote unauthenticated attacker can exploit this vulnerability to obtain server-sensitive information.


PHPGurukul Hospital Management System in PHP v4.0 has a sensitive information disclosure vulnerability in multiple areas. Remote unauthenticated users can exploit the vulnerability to obtain user sensitive information.


ActiveSyncProvider in Microsoft Windows 10 Gold and 1511 allows attackers to discover credentials by leveraging failure of Universal Outlook to obtain a secure connection aka \Universal Outlook Information Disclosure Vulnerability.\


Information Disclosure vulnerability in McAfee Advanced Threat Defense (ATD prior to 4.8 allows remote authenticated attackers to gain access to the atduser credentials via carefully constructed GET request extracting insecurely information stored in the database.


Dell ImageAssist versions prior to 8.7.15 contain an information disclosure vulnerability. Dell ImageAssist stores some sensitive encrypted information in the images it creates. A privileged user of a system running an operating system that was deployed with Dell ImageAssist could potentially retrieve this sensitive information to then compromise the system and related systems.


The Sec Consult Security Lab reported an information disclosure vulnerability in MF910S product to ZTE PSIRT in October 2019. Through the analysis of related product team the information disclosure vulnerability is confirmed. The MF910S product's one-click upgrade tool can obtain the Telnet remote login password in the reverse way. If Telnet is opened the attacker can remotely log in to the device through the cracked password resulting in information leakage. The MF910S was end of service on October 23 2019 ZTE recommends users to choose new products for the purpose of better security.


Information Disclosure vulnerability in McAfee DXL Platform and TIE Server in DXL prior to 5.0.1 HF2 and TIE prior to 2.3.1 HF1 allows Authenticated users to view sensitive information in plain text via the GUI or command line.


Information Disclosure vulnerability in McAfee Advanced Threat Defense (ATD) prior to 4.8 allows remote authenticated attackers to gain access to hashed credentials via carefully constructed POST request extracting incorrectly recorded data from log files.


Information Disclosure vulnerability in the Agent Handler in McAfee ePolicy Orchestrator (ePO) 5.9.x and 5.10.0 prior to 5.10.0 update 4 allows remote unauthenticated attacker to view sensitive information in plain text via sniffing the traffic between the Agent Handler and the SQL server.


ELOG 3.1.4-57bea22 and below is affected by an information disclosure vulnerability. A remote unauthenticated attacker can access the server's configuration file by sending an HTTP GET request. Amongst the configuration data the attacker may gain access to valid admin usernames and in older versions of ELOG passwords.


An information disclosure vulnerability exists in Magento 2.1 prior to 2.1.18 Magento 2.2 prior to 2.2.9 Magento 2.3 prior to 2.3.2. An authenticated user with privileges to create email templates could leak sensitive data via a malicious email template.


OpenAFS before 1.6.24 and 1.8.x before 1.8.5 is prone to an information disclosure vulnerability because uninitialized scalars are sent over the network to a peer.


An information disclosure vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2.6.6 that could allow unauthenticated access to some configuration files which may contain usernames license keys IP addresses and encrypted password hashes.


There is an information disclosure vulnerability on Secure Input of certain Huawei smartphones in Versions earlier than Tony-AL00B 9.1.0.216(C00E214R2P1). The Secure Input does not properly limit certain system privilege. An attacker tricks the user to install a malicious application and successful exploit could result in information disclosure.


Honor play smartphones with versions earlier than 9.1.0.333(C00E333R1P1T8) have an information disclosure vulnerability in certain Huawei . An attacker could view certain information after a series of operation without unlock the screen lock. Successful exploit could cause an information disclosure condition.


An exploitable information disclosure vulnerability exists in the network packet handling functionality of Shadowsocks-libev 3.3.2. When utilizing a Stream Cipher a specially crafted set of network packets can cause an outbound connection from the server resulting in information disclosure. An attacker can send arbitrary packets to trigger this vulnerability.


There is an information disclosure vulnerability on Mate 9 Pro Huawei smartphones versions earlier than LON-AL00B9.0.1.150 (C00E61R1P8T8). An attacker could view the photos after a series of operations without unlocking the screen lock. Successful exploit could cause an information disclosure condition.


An exploitable information disclosure vulnerability exists in the packet-parsing functionality of Blynk-Library v0.6.1. A specially crafted packet can cause an unterminated strncpy resulting in information disclosure. An attacker can send a packet to trigger this vulnerability.


An exploitable information disclosure vulnerability exists in the KCodes NetUSB.ko kernel module that enables the ReadySHARE Printer functionality of at least two NETGEAR Nighthawk Routers and potentially several other vendors/products. An unauthenticated remote attacker can craft and send a packet containing an opcode that will trigger the kernel module to return several addresses. One of which can be used to calculate the dynamic base address of the module for further exploitation.


VMware vCenter Server (6.7.x prior to 6.7 U3 6.5 prior to 6.5 U3 and 6.0 prior to 6.0 U3j) contains an information disclosure vulnerability where Virtual Machines deployed from an OVF could expose login information via the virtual machine's vAppConfig properties. A malicious actor with access to query the vAppConfig properties of a virtual machine deployed from an OVF may be able to view the credentials used to deploy the OVF (typically the root account of the virtual machine).


There is an information disclosure vulnerability in certain Huawei smartphones (Mate 10;Mate 10 Pro;Honor V10;Changxiang 7S;P-smart;Changxiang 8 Plus;Y9 2018;Honor 9 Lite;Honor 9i;Mate 9). The software does not properly handle certain information of applications locked by applock in a rare condition. Successful exploit could cause information disclosure.


A remote information disclosure vulnerability was discovered in HPE 3PAR StoreServ Management and Core Software Media version(s): prior to 3.5.0.1.


An issue summary information disclosure vulnerability exists in Atlassian Jira Tempo plugin version 4.10.0. Authenticated users can obtain the summary for issues they do not have permission to view via the Tempo plugin.


VMware vCenter Server (6.7.x prior to 6.7 U3 6.5 prior to 6.5 U3 and 6.0 prior to 6.0 U3j) contains an information disclosure vulnerability due to the logging of credentials in plain-text for virtual machines deployed through OVF. A malicious user with access to the log files containing vCenter OVF-properties of a virtual machine deployed from an OVF may be able to view the credentials used to deploy the OVF (typically the root account of the virtual machine).


An exploitable information disclosure vulnerability exists in the Weave PASE pairing functionality of the Nest Cam IQ Indoor version 4620002. A set of specially crafted weave packets can brute force a pairing code resulting in greater Weave access and potentially full device control. An attacker can send specially crafted packets to trigger this vulnerability.


VMware Workstation (15.x before 15.5.1) and Fusion (11.x before 11.5.1) contain an information disclosure vulnerability in vmnetdhcp. Successful exploitation of this issue may allow an attacker on a guest VM to disclose sensitive information by leaking memory from the host process.


An exploitable information disclosure vulnerability exists in the Weave Legacy Pairing functionality of Nest Cam IQ Indoor version 4620002. A set of specially crafted weave packets can cause an out of bounds read resulting in information disclosure. An attacker can send packets to trigger this vulnerability.


A remotely exploitable information disclosure vulnerability is present in Aruba Intelligent Edge Switch models 5400 3810 2920 2930 2530 with GigT port 2530 10/100 port or 2540. The vulnerability impacts firmware 16.08.* before 16.08.0009 16.09.* before 16.09.0007 and 16.10.* before 16.10.0003. The vulnerability allows an attacker to retrieve sensitive system information. This attack can be carried out without user authentication under very specific conditions.


Huawei OceanStor SNS3096 V100R002C01 have an information disclosure vulnerability. Attackers with low privilege can exploit this vulnerability by performing some specific operations. Successful exploit of this vulnerability can cause some information disclosure.


An information disclosure vulnerability in Symantec Reporter web UI 10.3 prior to 10.3.2.5 allows a malicious authenticated administrator user to obtain passwords for external SMTP FTP FTPS LDAP and Cloud Log Download servers that they might not otherwise be authorized to access. The malicious administrator user can also obtain the passwords of other Reporter web UI users.


HPE has identified a vulnerability in HPE 3PAR Service Processor (SP) version 4.1 through 4.4. HPE 3PAR Service Processor (SP) version 4.1 through 4.4 has a remote information disclosure vulnerability which can allow for the disruption of the confidentiality integrity and availability of the Service Processor and any managed 3PAR arrays.


app/operator_panel/index_inc.php in the Operator Panel module in FusionPBX 4.4.3 suffers from an information disclosure vulnerability due to excessive debug information which allows authenticated administrative attackers to obtain credentials and other sensitive information.


An issue was discovered in Kaseya Virtual System Administrator (VSA) through 9.4.0.37. It has a critical information disclosure vulnerability. An unauthenticated attacker can send properly formatted requests to the web application and download sensitive files and information. For example the /DATAREPORTS directory can be farmed for reports. Because this directory contains the results of reports such as NMAP Patch Status and Active Directory domain metadata an attacker can easily collect this critical information and parse it for information. There are a number of directories affected.


An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. There is an information disclosure vulnerability via requests for the router_info.xml document. This will reveal the PIN code MAC address routing table firmware version update time QOS information LAN information and WLAN information of the device.


An information disclosure vulnerability in the Management Center (MC) REST API 2.0 2.1 and 2.2 prior to 2.2.2.1 allows a malicious authenticated user to obtain passwords for external backup and CPL policy import servers that they might not otherwise be authorized to access.


The /rest/api/latest/groupuserpicker resource in Jira before version 8.4.0 allows remote attackers to enumerate usernames via an information disclosure vulnerability.


The login.jsp resource in Jira before version 7.13.4 and from version 8.0.0 before version 8.2.2 allows remote attackers to enumerate usernames via an information disclosure vulnerability.


The Simple - Better Banking application 2.45.0 through 2.45.3 (fixed in 2.46.0) for Android was affected by an information disclosure vulnerability that leaked the user's password to the keyboard autocomplete functionality. Third-party Android keyboards that capture the password may store this password in cleartext or transmit the password to third-party services for keyboard customization purposes. A compromise of any datastore that contains keyboard autocompletion caches would result in the disclosure of the user's Simple Bank password.


Tube Map Live Underground for Android before 3.0.22 has an Information Disclosure Vulnerability


mysecureshell 1.31: Local Information Disclosure Vulnerability


Microsoft SharePoint Server 2013 in certain configurations involving legacy My Sites does not properly establish default access controls for a SharePoint list which allows remote authenticated users to bypass intended restrictions on reading list items via a direct request for a list's location aka \Incorrect Access Rights Information Disclosure Vulnerability.\


An

Information

Disclosure

vulnerability

exists

due

to

insufficient

validation

of

authentication

cookies

for

the

RTSP

session

in

D-Link

and

which

could

let

a

malicious

user

obtain

unauthorized

access

to

video

streams.


An

Information

Disclosure

vulnerability

exists

due

to

a

failure

to

restrict

access

on

the

lums.cgi

script

when

processing

a

live

video

stream

in

D-LINK

An

Information

Disclosure

vulnerability

exists

due

to

a

failure

to

restrict

access

on

the

lums.cgi

script

when

processing

a

live

video

stream

in

D-LINK

TESCO

TESCO

and

which

could

let

a

malicious

user

obtain

sensitive

information.

which

could

let

a

malicious

user

obtain

sensitive

information.


The Windows Forms (aka WinForms) component in Microsoft .NET Framework 1.0 SP3 1.1 SP1 2.0 SP2 3.0 SP2 4 and 4.5 does not properly initialize memory arrays which allows remote attackers to obtain sensitive information via (1) a crafted XAML browser application (XBAP) or (2) a crafted .NET Framework application that leverages a pointer to an unmanaged memory location aka \System Drawing Information Disclosure Vulnerability.\


Cisco Linksys E4200 1.0.05 Build 7 devices contain an Information Disclosure Vulnerability which allows remote attackers to obtain private IP addresses and other sensitive information.


Brother MFC-9970CDW 1.10 firmware L devices contain an information disclosure vulnerability which allows remote attackers to view private IP addresses and other sensitive information.


Brother MFC-9970CDW 1.10 firmware L devices contain an information disclosure vulnerability which allows remote attackers to view sensitive information from referrer logs due to inadequate handling of HTTP referrer headers.


Microsoft Active Directory Federation Services (AD FS) 1.x through 2.1 on Windows Server 2003 R2 SP2 Windows Server 2008 SP2 and R2 SP1 and Windows Server 2012 allows remote attackers to obtain sensitive information about the service account and possibly conduct account-lockout attacks by connecting to an endpoint aka \AD FS Information Disclosure Vulnerability.\


The kernel in Microsoft Windows XP SP3 Windows Server 2003 SP2 Windows Vista SP2 Windows Server 2008 SP2 Windows 7 SP1 and Windows 8 on 32-bit platforms does not properly handle unspecified page-fault system calls which allows local users to obtain sensitive information from kernel memory via a crafted application aka \Kernel Information Disclosure Vulnerability.\


Microsoft Internet Explorer 6 through 10 allows user-assisted remote attackers to bypass the Same Origin Policy and obtain sensitive information from any visited document via a crafted web page that is not properly handled during a print-preview action aka \Internet Explorer Information Disclosure Vulnerability.\


win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3 Windows Server 2003 SP2 Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 and Windows 7 SP1 does not properly handle objects in memory which allows local users to gain privileges via a crafted application aka \Win32k Information Disclosure Vulnerability.\


The Ancillary Function Driver (AFD) in afd.sys in the kernel-mode drivers in Microsoft Windows XP SP2 Windows Server 2003 SP2 Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8 and Windows Server 2012 allows local users to obtain sensitive information from kernel memory by leveraging improper copy operations aka \Ancillary Function Driver Information Disclosure Vulnerability.\


Adobe Acrobat Reader DC add-on for Internet Explorer versions 2021.005.20060 (and earlier) 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by an Information Disclosure vulnerability. An unauthenticated attacker could leverage this vulnerability to check for existence of local files. Exploitation of this issue requires user interaction in that a victim must visit an attacker controlled web page.


Acrobat Reader DC ActiveX Control versions 2021.005.20060 (and earlier) 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by an Information Disclosure vulnerability. An unauthenticated attacker could leverage this vulnerability to obtain NTLMv2 credentials. Exploitation of this issue requires user interaction in that a victim must visit an attacker controlled web page.


Affected versions of Atlassian Jira Server and Data Center allow authenticated remote attackers to enumerate the keys of private Jira projects via an Information Disclosure vulnerability in the /rest/api/latest/projectvalidate/key endpoint. The affected versions are before version 8.5.18 from version 8.6.0 before 8.13.10 and from version 8.14.0 before 8.18.2.


Acrobat Reader DC ActiveX Control versions 2021.005.20060 (and earlier) 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by an Information Disclosure vulnerability. An unauthenticated attacker could leverage this vulnerability to obtain NTLMv2 credentials. Exploitation of this issue requires user interaction in that a victim must open a maliciously crafted Microsoft Office file or visit an attacker controlled web page.


Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to view users' emails via an Information Disclosure vulnerability in the /rest/api/2/search endpoint. The affected versions are before version 8.5.13 from version 8.6.0 before 8.13.5 and from version 8.14.0 before 8.15.1.


Windows Storage Information Disclosure Vulnerability


Remote Desktop Protocol Client Information Disclosure Vulnerability


Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability This CVE ID is unique from CVE-2021-36969 CVE-2021-38635.


Windows exFAT File System Information Disclosure Vulnerability


Microsoft Office Graphics Component Information Disclosure Vulnerability


Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability This CVE ID is unique from CVE-2021-36969 CVE-2021-38636.


Windows Fast FAT File System Driver Information Disclosure Vulnerability This CVE ID is unique from CVE-2021-41343.


Windows Ancillary Function Driver for WinSock Information Disclosure Vulnerability


Windows CSC Service Information Disclosure Vulnerability


Windows GDI+ Information Disclosure Vulnerability


Windows Hyper-V Information Disclosure Vulnerability


Magento versions 2.4.2 (and earlier) 2.4.1-p1 (and earlier) and 2.3.6-p1 (and earlier) are vulnerable to an Information Disclosure vulnerability when uploading a modified png file to a product image. Successful exploitation could lead to the disclosure of document root path by an unauthenticated attacker. Access to the admin console is required for successful exploitation.


Windows DNS Information Disclosure Vulnerability This CVE ID is unique from CVE-2021-28323.


Windows Installer Information Disclosure Vulnerability


Microsoft Windows Codecs Library Information Disclosure Vulnerability


Windows Event Tracing Information Disclosure Vulnerability


Microsoft Excel Information Disclosure Vulnerability


Eclipse Jersey 2.28 to 2.33 and Eclipse Jersey 3.0.0 to 3.0.1 contains a local information disclosure vulnerability. This is due to the use of the File.createTempFile which creates a file inside of the system temporary directory with the permissions: -rw-r--r--. Thus the contents of this file are viewable by all other users locally on the system. As such if the contents written is security sensitive it can be disclosed to other local users.


Windows TCP/IP Information Disclosure Vulnerability


Windows Portmapping Information Disclosure Vulnerability


Windows DNS Information Disclosure Vulnerability This CVE ID is unique from CVE-2021-28328.


An information disclosure vulnerability in the ArcGIS Service Directory in Esri ArcGIS Enterprise versions 10.9.0 and below may allows a remote attacker to view hidden field names in feature layers. This issue may reveal field names but not not disclose features.


IBM Db2 11.2 and 11.5 contains an information disclosure vulnerability exposing remote storage credentials to privileged users under specific conditions. IBM X-Fporce ID: 201780.


An information disclosure vulnerability was found in the virtio vhost-user GPU device (vhost-user-gpu) of QEMU in versions up to and including 6.0. The flaw exists in virgl_cmd_get_capset_info() in contrib/vhost-user-gpu/virgl.c and could occur due to the read of uninitialized memory. A malicious guest could exploit this issue to leak memory from the host.


An information disclosure vulnerability was reported in some Motorola-branded Binatone Hubble Cameras that could allow an unauthenticated attacker on the same subnet to download an encrypted log file containing sensitive information such as WiFi SSID and password.


KACO New Energy XP100U Up to XP-JAVA 2.0 is affected by incorrect access control. Credentials will always be returned in plain-text from the local server during the KACO XP100U authentication process regardless of whatever passwords have been provided which leads to an information disclosure vulnerability.


Windows NT Lan Manager Datagram Receiver Driver Information Disclosure Vulnerability


TPM Device Driver Information Disclosure Vulnerability


Windows Remote Procedure Call Information Disclosure Vulnerability


Windows GDI+ Information Disclosure Vulnerability


Windows Docker Information Disclosure Vulnerability


Windows (modem.sys) Information Disclosure Vulnerability


Bot Framework SDK Information Disclosure Vulnerability


Windows DNS Query Information Disclosure Vulnerability


A sensitive information disclosure vulnerability in the mosquitto message broker of Juniper Networks Junos OS may allow a locally authenticated user with shell access the ability to read portions of sensitive files such as the master.passwd file. Since mosquitto is shipped with setuid permissions enabled and is owned by the root user this vulnerability may allow a local privileged user the ability to run mosquitto with root privileges and access sensitive information stored on the local filesystem. This issue affects Juniper Networks Junos OS: 17.3 versions prior to 17.3R3-S12 17.4 versions prior to 17.4R3-S4; 18.1 versions prior to 18.1R3-S12; 18.3 versions prior to 18.3R3-S4; 19.1 versions prior to 19.1R3-S4; 19.3 versions prior to 19.3R3-S1 19.3R3-S2; 19.4 versions prior to 19.4R2-S3; 20.1 versions prior to 20.1R2; 20.2 versions prior to 20.2R1-S3 20.2R2 20.2R3.


A sensitive information disclosure vulnerability in delta-export configuration utility (dexp) of Juniper Networks Junos OS may allow a locally authenticated shell user the ability to create and read database files generated by the dexp utility including password hashes of local users. Since dexp is shipped with setuid permissions enabled and is owned by the root user this vulnerability may allow a local privileged user the ability to run dexp with root privileges and access sensitive information in the dexp database. This issue affects Juniper Networks Junos OS: 15.1 versions prior to 15.1R7-S8; 15.1X49 versions prior to 15.1X49-D230; 17.3 versions prior to 17.3R3-S9; 17.4 versions prior to 17.4R2-S12 17.4R3-S3; 18.1 versions prior to 18.1R3-S11; 18.2 versions prior to 18.2R3-S6; 18.2X75 versions prior to 18.2X75-D34; 18.3 versions prior to 18.3R3-S4; 18.4 versions prior to 18.4R2-S7 18.4R3-S6; 19.1 versions prior to 19.1R1-S6 19.1R2-S2 19.1R3-S3; 19.2 versions prior to 19.2R1-S5 19.2R3-S1; 19.3 versions prior to 19.3R2-S5 19.3R3-S1; 19.4 versions prior to 19.4R1-S3 19.4R2-S2 19.4R3-S1; 20.1 versions prior to 20.1R1-S4 20.1R2; 20.2 versions prior to 20.2R1-S2 20.2R2.


Acrobat Reader DC ActiveX Control versions 21.007.20099 (and earlier) 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by an Information Disclosure vulnerability. An unauthenticated attacker could leverage this vulnerability to obtain NTLMv2 credentials. Exploitation of this issue requires user interaction in that a victim must visit an attacker controlled web page.


Acrobat Reader DC ActiveX Control versions 21.007.20099 (and earlier) 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by an Information Disclosure vulnerability. An unauthenticated attacker could leverage this vulnerability to obtain NTLMv2 credentials. Exploitation of this issue requires user interaction in that a victim must open a maliciously crafted Microsoft Office file or visit an attacker controlled web page.


.NET Core and Visual Studio Information Disclosure Vulnerability


Windows Kernel Memory Information Disclosure Vulnerability


Win32k Information Disclosure Vulnerability


Microsoft SharePoint Server Information Disclosure Vulnerability


Storage Spaces Controller Information Disclosure Vulnerability


GDI+ Information Disclosure Vulnerability


ASP.NET Core and Visual Studio Information Disclosure Vulnerability


Windows GDI Information Disclosure Vulnerability


Windows Remote Assistance Information Disclosure Vulnerability


ExportToPdfCmd Arbitrary File Read Information Disclosure Vulnerability using ImportAlert function within the Alerts Settings page.


Sangoma

Technologies

Corporation

Switchvox

Version

is

affected

by

an

information

disclosure

vulnerability

due

to

an

improper

access

restriction.

Users

information

such

as

first

name

last

name

acount

id

server

uuid

email

address

profile

image

number

timestamps

etc

can

be

extracted

by

sending

an

unauthenticated

HTTP

GET

request

to

the


The vCenter Server contains an information disclosure vulnerability in VAPI (vCenter API) service. A malicious actor with network access to port 443 on vCenter Server may exploit this issue by sending a specially crafted json-rpc message to gain access to sensitive information.


Releases prior to VMware vRealize Operations Tenant App 8.6 contain an Information Disclosure Vulnerability.


Nextcloud iOS before 3.4.2 suffers from an information disclosure vulnerability when searches for sharees utilize the lookup server by default instead of only on the local Nextcloud server unless a global search has been explicitly chosen by the user.


Nextcloud Deck before 1.2.7 1.4.1 suffers from an information disclosure vulnerability when searches for sharees utilize the lookup server by default instead of only the local Nextcloud server unless a global search has been explicitly chosen by the user.


An information disclosure vulnerability in the login page of Huntflow Enterprise before 3.10.4 could allow an unauthenticated remote user to get information about the domain name of the configured LDAP server. An attacker could exploit this vulnerability by requesting the login page and searching for the \isLdap\ JavaScript parameter in the HTML source code.


Thinfinity VirtualUI 2.1.28.0 2.1.32.1 and 2.5.26.2 fixed in version 3.0 is affected by an information disclosure vulnerability in the parameter \Addr\ in cmd site. The ability to send requests to other systems can allow the vulnerable server to filtrate the real IP of the web server or increase the attack surface.


Dell Enterprise SONiC OS versions 3.3.0 and earlier contains a sensitive information disclosure vulnerability. An authenticated malicious user with access to the system may use the TACACS\\Radius credentials stored to read sensitive information and use it in further attacks.


Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability This CVE ID is unique from CVE-2021-38635 CVE-2021-38636.


Dell VNX2 OE for File versions 8.1.21.266 and earlier contain a sensitive information disclosure vulnerability. A local malicious user may exploit this vulnerability to read sensitive information and use it.


Windows Cryptographic Primitives Library Information Disclosure Vulnerability


Windows Installer Information Disclosure Vulnerability


Dell EMC SCG 5.00.00.10 and earlier contain a sensitive information disclosure vulnerability. A local malicious user may exploit this vulnerability to read sensitive information and use it.


An information disclosure vulnerability exists in the the way IOBit Advanced SystemCare Ultimate 14.2.0.220 driver handles Privileged I/O read requests. A specially crafted I/O request packet (IRP) can lead to privileged reads in the context of a driver which can result in sensitive information disclosure from the kernel. The IN instruction can read four bytes from the given I/O device potentially leaking sensitive device data to unprivileged users.


An information disclosure vulnerability exists in the Zebra IP Routing Manager functionality of D-LINK DIR-3040 1.13B03. A specially crafted network request can lead to the disclosure of sensitive information. An attacker can send a sequence of requests to trigger this vulnerability.


SAP NetWeaver Master Data Management versions - 710 710.750 allows a malicious unauthorized user with access to the MDM Server subnet to find the password using a brute force method. If successful the attacker could obtain access to highly sensitive data and MDM administrative privileges leading to information disclosure vulnerability thereby affecting the confidentiality and integrity of the application. This happens when security guidelines and recommendations concerning administrative accounts of an SAP NetWeaver Master Data Management installation have not been thoroughly reviewed.


Dell OpenManage Enterprise version 3.5 and OpenManage Enterprise-Modular version 1.30.00 contain an information disclosure vulnerability. An authenticated low privileged attacker may potentially exploit this vulnerability leading to disclosure of the OIDC server credentials.


Dell EMC NetWorker 18.x 19.1.x 19.2.x 19.3.x 19.4 and 19.4.0.1 contains an Information Disclosure vulnerability. A local administrator of the gstd system may potentially exploit this vulnerability to read LDAP credentials from local logs and use the stolen credentials to make changes to the network domain.


An information disclosure vulnerability exists in the the way IOBit Advanced SystemCare Ultimate 14.2.0.220 driver handles Privileged I/O read requests. A specially crafted I/O request packet (IRP) can lead to privileged reads in the context of a driver which can result in sensitive information disclosure from the kernel. The IN instruction can read two bytes from the given I/O device potentially leaking sensitive device data to unprivileged users.


Products.GenericSetup is a mini-framework for expressing the configured state of a Zope Site as a set of filesystem artifacts. In Products.GenericSetup before version 2.1.1 there is an information disclosure vulnerability - anonymous visitors may view log and snapshot files generated by the Generic Setup Tool. The problem has been fixed in version 2.1.1. Depending on how you have installed Products.GenericSetup you should change the buildout version pin to 2.1.1 and re-run the buildout or if you used pip simply do pip install `\Products.GenericSetup>=2.1.1\`.


Products.PluggableAuthService

is

a

pluggable

Zope

authentication

and

authorization

framework.

In

Products.PluggableAuthService

before

version

there

is

an

information

disclosure

vulnerability

everyone

can

list

the

names

of

roles

defined

in

the

ZODB

Role

Manager

plugin

if

the

site

uses

this

plugin.

The

problem

has

been

fixed

in

version

Depending

on

how

you

have

installed

Products.PluggableAuthService

you

should

change

the

buildout

version

pin

to

and

re-run

the

buildout

or

if

you

used

pip

simply

do

`pip

install

\Products.PluggableAuthService>=2.6.0\`.


An information disclosure vulnerability exists in the IOCTL 0x9c40a148 handling of IOBit Advanced SystemCare Ultimate 14.2.0.220. A specially crafted I/O request packet (IRP) can lead to a disclosure of sensitive information. An attacker can send a malicious IRP to trigger this vulnerability.


An information disclosure vulnerability exists in the HTTP Server /ping.html functionality of Texas Instruments CC3200 SimpleLink Solution NWP 2.9.0.0. A specially-crafted HTTP request can lead to an uninitialized read. An attacker can send an HTTP request to trigger this vulnerability.


The `com.bmuschko:gradle-vagrant-plugin` Gradle plugin contains an information disclosure vulnerability due to the logging of the system environment variables. When this Gradle plugin is executed in public CI/CD this can lead to sensitive credentials being exposed to malicious actors. This is fixed in version 3.0.0.


An information disclosure vulnerability exists in the Syslog functionality of D-LINK DIR-3040 1.13B03. A specially crafted network request can lead to the disclosure of sensitive information. An attacker can send an HTTP request to trigger this vulnerability.


Dell NetWorker versions 18.x and 19.x contain an Information disclosure vulnerability. A NetWorker server user with remote access to NetWorker clients may potentially exploit this vulnerability and gain access to unauthorized information.


Dell EMC PowerProtect Cyber Recovery version 19.7.0.1 contains an Information Disclosure vulnerability. A locally authenticated high privileged Cyber Recovery user may potentially exploit this vulnerability leading to the takeover of the notification email account.


Azure RTOS Information Disclosure Vulnerability This CVE ID is unique from CVE-2021-26444 CVE-2021-42323.


Visual Basic for Applications Information Disclosure Vulnerability


Azure RTOS Information Disclosure Vulnerability This CVE ID is unique from CVE-2021-26444 CVE-2021-42301.


Azure Active Directory Information Disclosure Vulnerability


Zoho Remote Access Plus Server Windows Desktop Binary fixed in 10.1.2132.6 is affected by a sensitive information disclosure vulnerability. Due to improper privilege management the process launches as the logged in user so memory dump can be done by non-admin also. Remotely an attacker can dump all sensitive information including DB Connection string entire IT infrastructure details commands executed by IT admin including credentials secrets private keys and more.


** UNSUPPORTED WHEN ASSIGNED ** An information disclosure vulnerability was discovered in the directory and file management of Avaya Aura Utility Services. This vulnerability may potentially allow any local user to access system functionality and configuration information that should only be available to a privileged user. Affects all 7.x versions of Avaya Aura Utility Services.


An out-of-bounds write information disclosure vulnerability in Trend Micro Apex One (on-prem and SaaS) OfficeScan XG SP1 and Worry-Free Business Security (10.0 SP1 and Services) could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.


An information disclosure vulnerability was discovered in the directory and file management of Avaya Aura Appliance Virtualization Platform Utilities (AVPU). This vulnerability may potentially allow any local user to access system functionality and configuration information that should only be available to a privileged user. Affects versions 8.0.0.0 through 8.1.3.1 of AVPU.


Microsoft Teams iOS Information Disclosure Vulnerability


Microsoft Edge for Android Information Disclosure Vulnerability


Microsoft Dataverse Information Disclosure Vulnerability


Windows Backup Engine Information Disclosure Vulnerability


Windows Mobile Device Management Information Disclosure Vulnerability


Microsoft SharePoint Information Disclosure Vulnerability


Windows Event Tracing Information Disclosure Vulnerability


Microsoft Windows VMSwitch Information Disclosure Vulnerability


Windows DirectX Information Disclosure Vulnerability


Microsoft Message Queuing Information Disclosure Vulnerability This CVE ID is unique from CVE-2021-43236.


The /rest-service-fecru/server-v1 resource in Fisheye and Crucible before version 4.8.9 allowed authenticated remote attackers to obtain information about installation directories via information disclosure vulnerability.


Microsoft Message Queuing Information Disclosure Vulnerability This CVE ID is unique from CVE-2021-43222.


Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote attackers to view object import configuration details via an Information Disclosure vulnerability in the Create Object type mapping feature. The affected versions are before version 4.21.0.


Microsoft Local Security Authority Server (lsasrv) Information Disclosure Vulnerability


Storage Spaces Controller Information Disclosure Vulnerability This CVE ID is unique from CVE-2021-43235.


Storage Spaces Controller Information Disclosure Vulnerability This CVE ID is unique from CVE-2021-43227.


VP9 Video Extensions Information Disclosure Vulnerability


Microsoft Exchange Information Disclosure Vulnerability


Media Foundation Information Disclosure Vulnerability


Windows Key Distribution Center Information Disclosure Vulnerability


Windows Fast FAT File System Driver Information Disclosure Vulnerability This CVE ID is unique from CVE-2021-38662.


SCOM Information Disclosure Vulnerability


FSLogix Information Disclosure Vulnerability


A vulnerability has been identified in Climatix POL909 (AWB module) (All versions < V11.44) Climatix POL909 (AWM module) (All versions < V11.36). The handling of log files in the web application of affected devices contains an information disclosure vulnerability which could allow logged in users to access sensitive files.


Windows Print Spooler Information Disclosure Vulnerability


.NET Core and Visual Studio Information Disclosure Vulnerability


Microsoft SharePoint Information Disclosure Vulnerability


Microsoft Windows Infrared Data Association (IrDA) Information Disclosure Vulnerability


Server for NFS Information Disclosure Vulnerability This CVE ID is unique from CVE-2021-31975.


Event Tracing for Windows Information Disclosure Vulnerability


Microsoft Office Information Disclosure Vulnerability


Microsoft Excel Information Disclosure Vulnerability


Server for NFS Information Disclosure Vulnerability This CVE ID is unique from CVE-2021-31976.


3D Viewer Information Disclosure Vulnerability


Microsoft Accessibility Insights for Web Information Disclosure Vulnerability


Microsoft SharePoint Server Information Disclosure Vulnerability


Windows Bind Filter Driver Information Disclosure Vulnerability


Windows Overlay Filter Information Disclosure Vulnerability


Azure RTOS Information Disclosure Vulnerability This CVE ID is unique from CVE-2021-42301 CVE-2021-42323.


The Jira importers plugin AttachTemporaryFile rest resource in Jira Server and Data Center before version 8.5.12 from version 8.6.0 before 8.13.4 and from version 8.14.0 before 8.15.1 allowed remote authenticated attackers to obtain the full path of the Jira application data directory via an information disclosure vulnerability in the error message when presented with an invalid filename.


Affected

versions

of

Atlassian

Jira

Server

and

Data

Center

allow

unauthenticated

remote

attackers

to

download

temporary

files

and

enumerate

project

keys

via

an

Information

Disclosure

vulnerability

in

the

API

endpoint.

The

affected

versions

are

before

version

from

version

before

and

from

version

before


Microsoft Power BI Information Disclosure Vulnerability


Microsoft Edge for Android Information Disclosure Vulnerability


An information disclosure vulnerability exists in AMD Platform Security Processor (PSP) chipset driver. The discretionary access control list (DACL) may allow low privileged users to open a handle and send requests to the driver resulting in a potential data leak from uninitialized physical pages.


Windows ActiveX Installer Service Information Disclosure Vulnerability


Windows Media Photo Codec Information Disclosure Vulnerability


Information Disclosure vulnerability in UserAdmin application in SAP NetWeaver Application Server for Java versions - 7.11 7.20 7.30 7.31 7.40 and 7.50 allows attackers to access restricted information by entering malicious server name.


Azure DevOps Server and Team Foundation Server Information Disclosure Vulnerability


Azure Virtual Machine Information Disclosure Vulnerability


Under certain conditions SAP Business One Hana Chef Cookbook versions - 8.82 9.0 9.1 9.2 9.3 10.0 used to install SAP Business One for SAP HANA allows an attacker to exploit an insecure temporary backup path and to access information which would otherwise be restricted resulting in Information Disclosure vulnerability highly impacting the confidentiality integrity and availability of the application.


Rich Text Edit Control Information Disclosure Vulnerability


Microsoft Accessibility Insights for Android Information Disclosure Vulnerability


An information disclosure vulnerability exists in the pick-and-place rotation parsing functionality of Gerbv 2.7.0 and dev (commit b5f1eacd) and Gerbv forked 2.8.0. A specially-crafted pick-and-place file can exploit the missing initialization of a structure to leak memory contents. An attacker can provide a malicious file to trigger this vulnerability.


Microsoft Excel Information Disclosure Vulnerability


Microsoft SharePoint Server Information Disclosure Vulnerability


A component in Microsoft Outlook Express 6 and Windows Mail in Windows Vista does not properly handle certain HTTP headers when processing MHTML protocol URLs which allows remote attackers to obtain sensitive information from other Internet Explorer domains aka \URL Parsing Cross Domain Information Disclosure Vulnerability.\


Microsoft Windows Vista uses insecure default permissions for unspecified \local user information data stores\ in the registry and the file system which allows local users to obtain sensitive information such as administrative passwords aka \Permissive User Information Store ACLs Information Disclosure Vulnerability.\


The MHTML protocol handler in Microsoft Outlook Express 6 and Windows Mail in Windows Vista does not properly handle Content-Disposition \notifications \ which allows remote attackers to obtain sensitive information from other Internet Explorer domains aka \Content Disposition Parsing Cross Domain Information Disclosure Vulnerability.\


The Teredo interface in Microsoft Windows Vista and Vista x64 Edition does not properly handle certain network traffic which allows remote attackers to bypass firewall blocking rules and obtain sensitive information via crafted IPv6 traffic aka \Windows Vista Firewall Blocking Rule Information Disclosure Vulnerability.\


The XMLHTTP ActiveX controls in XML Core Services 3.0 in Microsoft Windows XP SP2 and SP3 Windows Server 2003 SP2 Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8 Windows 8.1 Windows Server 2012 Gold and R2 and Windows RT Gold and 8.1 allow remote attackers to bypass the Same Origin Policy via a web page that is visited in Internet Explorer aka \MSXML Information Disclosure Vulnerability.\