Information Disclosure

OpenSSH is vulnerable to information disclosure attacks. The system responds differently to valid and invalid authentication attempts. A remote user could send specially crafted requests to determine valid usernames on the target system which may lead to disclosure of system information...

CVE-2018-12296

Insufficient access control in /api/external/7.0/system.System.getinfos in Seagate NAS OS version 4.3.15.1 allows attackers to obtain information about the NAS without authentication via empty POST requests...

CVE-2019-1587

A vulnerability in Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure ACI mode could allow an authenticated, remote attacker to access sensitive information. The vulnerability occurs because the affected software does not properly validate user-supplied input. An attack...

North Korea's Hidden Cobra Strikes U.S. Targets with HOPLIGHT

A never-before-seen spyware variant called HOPLIGHT is targeting U.S. companies and government agencies in active attacks, according to the U.S. Department of Homeland Security. In an advisory this week, the United States Computer Emergency Readiness Team US-CERT said that there are nine differen...

Information disclosure

Some URIs in IBM API Connect 2018.1 and 2018.4.1.3 disclose system specification information like the machine id, system uuid, filesystem paths, network interface names along with their mac addresses. An attacker can use this information in targeted attacks. IBM X-Force ID: 156542...

Information disclosure

Information exposure vulnerability in SYNO.Personal.Profile in Synology Application Service before 1.5.4-0320 allows remote authenticated users to obtain sensitive system information via the uid parameter...

CVE-2018-13294

Information exposure vulnerability in SYNO.Personal.Profile in Synology Application Service before 1.5.4-0320 allows remote authenticated users to obtain sensitive system information via the uid parameter...

Information disclosure

Information exposure vulnerability in SYNO.Personal.Application.Info in Synology Application Service before 1.5.4-0320 allows remote authenticated users to obtain sensitive system information via the version parameter...

Information disclosure

Information exposure vulnerability in SYNO.SynologyDrive.Files in Synology Drive before 1.1.2-10562 allows remote attackers to obtain sensitive system information via the dsmpath parameter...

CVE-2018-13297

The vulnerability CVE-2018-13297 affects Synology Drive’s SYNO.SynologyDrive.Files component. Versions prior to 1.1.2-10562 allow remote attackers to obtain sensitive system information via the dsm_path parameter, enabling an information-disclosure impact (partial confidentiality) without requiri...

CVE-2018-13294

Information exposure vulnerability in SYNO.Personal.Profile in Synology Application Service before 1.5.4-0320 allows remote authenticated users to obtain sensitive system information via the uid parameter...

CVE-2018-13294

The CVE-2018-13294 vulnerability affects Synology Application Service’s SYNO.Personal.Profile component, prior to version 1.5.4-0320. It allows remote authenticated users to disclose sensitive system information via the uid parameter, indicating an information disclosure flaw likely tied to impro...

CVE-2018-13295

Information exposure vulnerability in SYNO.Personal.Application.Info in Synology Application Service before 1.5.4-0320 allows remote authenticated users to obtain sensitive system information via the version parameter...

CVE-2019-1762

A vulnerability in the Secure Storage feature of Cisco IOS and IOS XE Software could allow an authenticated, local attacker to access sensitive system information on an affected device. The vulnerability is due to improper memory operations performed at encryption time, when affected software...

Design/Logic Flaw

A vulnerability in the Secure Storage feature of Cisco IOS and IOS XE Software could allow an authenticated, local attacker to access sensitive system information on an affected device. The vulnerability is due to improper memory operations performed at encryption time, when affected software...

CVE-2019-1762

Cisco IOS and IOS XE Information Disclosure vulnerability (CVE-2019-1762) arises from improper memory operations in the Secure Storage feature during encryption of configuration updates. An authenticated, local attacker could retrieve contents of memory locations and disclose keying materials emb...

Cisco IOS and IOS XE Software Information Disclosure Vulnerability

A vulnerability in the Secure Storage feature of Cisco IOS and IOS XE Software could allow an authenticated, local attacker to access sensitive system information on an affected device. The vulnerability is due to improper memory operations performed at encryption time, when affected software...

Google Android System Information Disclosure Vulnerability (CNVD-2019-10470)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. System in Google Android suffers from an information disclosure vulnerability that can be exploited by attackers to disclose information...

Google Android System Information Disclosure Vulnerability (CNVD-2019-10467)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. System in Google Android suffers from an information disclosure vulnerability that can be exploited by attackers to disclose information...

Google Android System Information Disclosure Vulnerability (CNVD-2019-10465)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. System in Google Android suffers from an information disclosure vulnerability that can be exploited by attackers to disclose information...