Base de CVEs

CVE-2025-55676 Média · 5.5 CWE-209 14/10/2025

Windows USB Video Class System Driver Information Disclosure Vulnerability

Generation of error message containing sensitive information in Windows USB Video Driver allows an authorized attacker to disclose information locally.

CVE-2025-31998 Crítica · 9.8 CWE-209 12/10/2025

HCL Unica Centralized Offer Management is vulnerable to poor unhandled exceptions which exposes sensitive information

HCL Unica Centralized Offer Management is vulnerable to poor unhandled exceptions which exposes sensitive information. An attacker can exploit use this information to exploit known vulnerabilities launch targeted attacks, such as remote code execution or denial of service.

CVE-2025-54291 Média · 5.3 CWE-209 02/10/2025

Project existence disclosure in LXD images API

Information disclosure in images API in Canonical LXD before 6.5 and 5.21.4 on all platforms allows unauthenticated remote attackers to determine project existence via differing HTTP status code responses.

CVE-2025-26333 Alta · 7.5 CWE-209 25/09/2025

Information Exposure Through an Error Message em Dell Bsafe Crypto-j

Dell BSAFE Crypto-J generates an error message that includes sensitive information about its environment and associated data. A remote attacker could potentially exploit this vulnerability, leading to information exposure.

CVE-2025-43777 Média · 5.3 CWE-209 09/09/2025

Information Exposure Through an Error Message em Liferay Digital Experience Platform

Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.9, 2025.Q1.0 through 2025.Q1.16, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13 and 2024.Q1.1 through 2024.Q1.19 exposes "Internal Server Error" in the response body when a login attempt is made with a deleted Client Secret.

CVE-2025-36003 Média · 5.3 CWE-209 28/08/2025

IBM Security Verify Governance Identity Manager information disclosure

IBM Security Verify Governance Identity Manager 10.0.2 could allow a remote attacker to obtain sensitive information when detailed technical error messages are returned. This information could be used in further attacks against the system.

CVE-2025-47813 Média · 4.3 KEV Alta · 57 Exploit público CWE-209 10/07/2025

Wing FTP Server Information Disclosure Vulnerability

loginok.html in Wing FTP Server before 7.4.4 discloses the full local installation path of the application when using a long value in the UID cookie.

CVE-2024-35935 Baixa · 3.3 CWE-209 19/05/2024

btrfs: send: handle path ref underflow in header iterate_inode_ref()

In the Linux kernel, the following vulnerability has been resolved: btrfs: send: handle path ref underflow in header iterate_inode_ref() Change BUG_ON to proper error handling if building the path buffer fails. The pointers are not printed so we don't accidentally leak kernel addresses.

CVE-2024-29059 Alta · 7.5 KEV Alta · 69 Exploit público CWE-209 22/03/2024

Microsoft .NET Framework Information Disclosure Vulnerability

.NET Framework Information Disclosure Vulnerability

CVE-2023-20593 Média · 5.5 CWE-209 24/07/2023

Information Exposure Through an Error Message em Xen

An issue in “Zen 2” CPUs, under specific microarchitectural circumstances, may allow an attacker to potentially access sensitive information.

CVE-2022-0563 Média · 5.5 CWE-209 21/02/2022

A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support....

A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an "INPUTRC" environment variable to get a path to the library config file. When the library cannot parse the specified file, it prints an error message containing data from the file. This flaw allows an unprivileged user to read root-owned files, potentially leading to privilege escalation. This flaw affects util-linux versions prior to 2.37.4.

CVE-2018-12886 Alta · 8.1 CWE-209 22/05/2019

stack_protect_prologue in cfgexpand.c and stack_protect_epilogue in function.c in GNU Compiler...

stack_protect_prologue in cfgexpand.c and stack_protect_epilogue in function.c in GNU Compiler Collection (GCC) 4.1 through 8 (under certain circumstances) generate instruction sequences when targeting ARM targets that spill the address of the stack protector guard, which allows an attacker to bypass the protection of -fstack-protector, -fstack-protector-all, -fstack-protector-strong, and -fstack-protector-explicit against stack overflow by controlling what the stack canary is compared against.

CVE-2013-7331 Média · 6.5 KEV Alta · 68 Exploit público CWE-209 26/02/2014

Microsoft Internet Explorer Information Disclosure Vulnerability

The Microsoft.XMLDOM ActiveX control in Microsoft Windows 8.1 and earlier allows remote attackers to determine the existence of local pathnames, UNC share pathnames, intranet hostnames, and intranet IP addresses by examining error codes, as demonstrated by a res:// URL, and exploited in the wild in February 2014.