Vulnerabilities (CVE)

Filtered by CWE-200
Total 8083 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2012-2724 1 Md-systems 1 Simplenews 2024-11-21 5.0 MEDIUM 5.3 MEDIUM
The Simplenews module 6.x-1.x before 6.x-1.4, 6.x-2.x before 6.x-2.0-alpha4, and 7.x-1.x before 7.x-1.0-rc1 for Drupal reveals the email addresses of new mailing list subscribers when confirmation is required, which allows remote attackers to obtain sensitive information via the confirmation page.
CVE-2012-1994 1 Hp 1 Systems Insight Manager 2024-11-21 2.7 LOW 5.7 MEDIUM
HP Systems Insight Manager before 7.0 allows a remote user on adjacent network to access information
CVE-2012-1169 2 Fedoraproject, Moodle 2 Fedora, Moodle 2024-11-21 5.0 MEDIUM 5.3 MEDIUM
Moodle before 2.2.2 has Personal information disclosure, when administrative setting users name display is set to first name only full names are shown in page breadcrumbs.
CVE-2012-1161 2 Fedoraproject, Moodle 2 Fedora, Moodle 2024-11-21 4.0 MEDIUM 4.3 MEDIUM
Moodle before 2.2.2: Course information leak via hidden courses being displayed in tag search results
CVE-2012-1159 2 Fedoraproject, Moodle 2 Fedora, Moodle 2024-11-21 4.0 MEDIUM 4.3 MEDIUM
Moodle before 2.2.2: Overview report allows users to see hidden courses
CVE-2012-1158 2 Fedoraproject, Moodle 2 Fedora, Moodle 2024-11-21 4.0 MEDIUM 4.3 MEDIUM
Moodle before 2.2.2 has a course information leak in gradebook where users are able to see hidden grade items in export
CVE-2012-1155 4 Debian, Fedoraproject, Moodle and 1 more 4 Debian Linux, Fedora, Moodle and 1 more 2024-11-21 5.0 MEDIUM 7.5 HIGH
Moodle has a database activity export permission issue where the export function of the database activity module exports all entries even those from groups the user does not belong to
CVE-2012-1105 3 Apereo, Debian, Fedoraproject 3 Phpcas, Debian Linux, Fedora 2024-11-21 2.1 LOW 5.5 MEDIUM
An Information Disclosure vulnerability exists in the Jasig Project php-pear-CAS 1.2.2 package in the /tmp directory. The Central Authentication Service client library archives the debug logging file in an insecure manner.
CVE-2012-1094 1 Redhat 1 Jboss Application Server 2024-11-21 5.0 MEDIUM 7.5 HIGH
JBoss AS 7 prior to 7.1.1 and mod_cluster do not handle default hostname in the same way, which can cause the excluded-contexts list to be mismatched and the root context to be exposed.
CVE-2012-0844 2 Debian, Netsurf-browser 2 Debian Linux, Netsurf 2024-11-21 2.1 LOW 5.5 MEDIUM
Information-disclosure vulnerability in Netsurf through 2.8 due to a world-readable cookie jar.
CVE-2012-0843 2 Debian, Uzbl 2 Debian Linux, Uzbl 2024-11-21 2.1 LOW 5.5 MEDIUM
uzbl: Information disclosure via world-readable cookies storage file
CVE-2012-0842 2 Debian, Suckless 2 Debian Linux, Surf 2024-11-21 2.1 LOW 5.5 MEDIUM
surf: cookie jar has read access from other local user
CVE-2012-0433 1 Crowbar Project 1 Crowbar 2024-11-21 2.1 LOW 3.3 LOW
The install-chef-suse.sh script shipped with crowbar before 2012-10-02 is creating files containing confidential data with insecure permissions, allowing local users to read confidential data.
CVE-2012-0046 1 Mediawiki 1 Mediawiki 2024-11-21 5.0 MEDIUM 7.5 HIGH
mediawiki allows deleted text to be exposed
CVE-2011-5282 1 Mirc 1 Mirc 2024-11-21 5.0 MEDIUM 5.3 MEDIUM
mIRC prior to 7.22 has a message leak because chopping of outbound messages is mishandled.
CVE-2011-4972 1 Ckeditor 1 Ckeditor 2024-11-21 5.0 MEDIUM 7.5 HIGH
hook_file_download in the CKEditor module 7.x-1.4 for Drupal does not properly restrict access to private files, which allows remote attackers to read private files via a direct request.
CVE-2011-4937 1 Joomla 1 Joomla\! 2024-11-21 5.0 MEDIUM 7.5 HIGH
Joomla! 1.7.1 has core information disclosure due to inadequate error checking.
CVE-2011-4919 1 Mpack Project 1 Mpack 2024-11-21 5.0 MEDIUM 7.5 HIGH
mpack 1.6 has information disclosure via eavesdropping on mails sent by other users
CVE-2011-4916 1 Linux 1 Linux Kernel 2024-11-21 2.1 LOW 5.5 MEDIUM
Linux kernel through 3.1 allows local users to obtain sensitive keystroke information via access to /dev/pts/ and /dev/tty*.
CVE-2011-4915 3 Canonical, Debian, Linux 3 Ubuntu Linux, Debian Linux, Linux Kernel 2024-11-21 2.1 LOW 5.5 MEDIUM
fs/proc/base.c in the Linux kernel through 3.1 allows local users to obtain sensitive keystroke information via access to /proc/interrupts.