CVE-2020-4612 (v3: 6.5) 22 Sep 2020
IBM Data Risk Manager (iDNA) 2.0.6 could allow an authenticated user to obtain sensitive information using a specially crafted HTTP request. IBM X-For... Read more ➔
CVE-2020-4616 (v3: 5.3) 22 Sep 2020
IBM Data Risk Manager (iDNA) 2.0.6 could disclose sensitive username information to an attacker using a specially crafted HTTP request. IBM X-Force ID... Read more ➔
CVE-2020-0286 (v3: 7.5) 18 Sep 2020
In Bluetooth AVRCP, there is a possible leak of audio metadata due to residual data. This could lead to remote information disclosure with no addition... Read more ➔
CVE-2020-4171 (v3: 4.3) 27 Aug 2020
IBM Security Guardium Insights 2.0.1 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 174407. Read more ➔
CVE-2020-12777 (v3: 7.5) 10 Aug 2020
A function in Combodo iTop contains a vulnerability of Broken Access Control, which allows unauthorized attacker to inject command and disclose system... Read more ➔
CVE-2020-12780 (v3: 7.5) 10 Aug 2020
A security misconfiguration exists in Combodo iTop, which can expose sensitive information. Read more ➔
CVE-2019-4366 (v3: 5.3) 3 Aug 2020
IBM Cognos Analytics 11.0 and 11.1 is susceptible to an information disclosure vulnerability where an attacker could gain access to cached browser dat... Read more ➔
CVE-2020-4572 (v3: 5.3) 29 Jul 2020
IBM Tivoli Key Lifecycle Manager 3.0.1 and 4.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message i... Read more ➔
CVE-2020-4573 (v3: 5.3) 29 Jul 2020
IBM Tivoli Key Lifecycle Manager 3.0.1 and 4.0 could disclose sensitive information due to responding to unauthenticated HTTP requests. IBM X-Force ID... Read more ➔
CVE-2020-13918 (v3: 7.5) 28 Jul 2020
Incorrect access control in webs in Ruckus Wireless Unleashed through 200.7.10.102.92 allows a remote attacker to leak system information (that can be... Read more ➔
CVE-2019-4731 (v3: 5.5) 28 Jul 2020
IBM MQ Appliance 9.1.4.CD could allow a local attacker to obtain highly sensitive information by inclusion of sensitive data within trace. IBM X-Force... Read more ➔
CVE-2020-4319 (v3: 4.3) 28 Jul 2020
IBM MQ, IBM MQ Appliance, and IBM MQ for HPE NonStop 8.0, 9.1 LTS, and 9.1 CD could allow under special circumstances, an authenticated user to obtain... Read more ➔
CVE-2020-15698 (v3: 5.3) 15 Jul 2020
An issue was discovered in Joomla! through 3.9.19. Inadequate filtering on the system information screen could expose Redis or proxy credentials Read more ➔
CVE-2020-6280 (v3: 2.7) 14 Jul 2020
SAP NetWeaver (ABAP Server) and ABAP Platform, versions 731, 740, 750, allows an attacker with admin privileges to access certain files which should o... Read more ➔
CVE-2019-20898 (v3: 7.5) 13 Jul 2020
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to access sensitive information without being authenticated in the G... Read more ➔
CVE-2020-15081 (v3: 5.3) 2 Jul 2020
In PrestaShop from version 1.5.0.0 and before 1.7.6.6, there is information exposure in the upload directory. The problem is fixed in version 1.7.6.6.... Read more ➔
CVE-2020-14458 (v3: 7.5) 19 Jun 2020
An issue was discovered in Mattermost Server before 5.19.0. Attackers can discover private channels via the "get channel by name" API, aka MMSA-2020-0... Read more ➔
CVE-2020-4045 11 Jun 2020
SSB-DB version 20.0.0 has an information disclosure vulnerability. The get() method is supposed to only decrypt messages when you explicitly ask it to... Read more ➔
CVE-2020-9848 (v3: 2.4) 9 Jun 2020
An authorization issue was addressed with improved state management. This issue is fixed in iOS 13.5 and iPadOS 13.5. A person with physical access to... Read more ➔
CVE-2020-13830 (v3: 7.5) 4 Jun 2020
An issue was discovered on Samsung mobile devices with P(9.0) software. One UI HOME logging can leak information. The Samsung ID is SVE-2019-16382 (Ju... Read more ➔
CVE-2019-20836 (v3: 7.5) 4 Jun 2020
An issue was discovered in Foxit Reader and PhantomPDF before 9.5. It has mishandling of cloud credentials, as demonstrated by Google Drive. Read more ➔
CVE-2020-7030 (v3: 5.5) 4 Jun 2020
A sensitive information disclosure vulnerability was discovered in the web interface component of IP Office that may potentially allow a local user to... Read more ➔
CVE-2011-2863 (v3: 6.5) 3 Jun 2020
Insufficient policy enforcement in V8 in Google Chrome prior to 14.0.0.0 allowed a remote attacker to obtain potentially sensitive information from pr... Read more ➔
CVE-2020-13783 (v3: 7.5) 3 Jun 2020
D-Link DIR-865L Ax 1.20B01 Beta devices have Cleartext Storage of Sensitive Information. Read more ➔
CVE-2020-13787 (v3: 7.5) 3 Jun 2020
D-Link DIR-865L Ax 1.20B01 Beta devices have Cleartext Transmission of Sensitive Information. Read more ➔