511
Reference Description
CVE-2022-31162 Rust library leaks Oauth client details in application debug logs
https://www.cve.org/CVERecord?id=CVE-2022-31162
CVE-2021-25476 Digital Rights Management (DRM) capability for mobile platform leaks pointer
information, simplifying ASLR bypass
https://www.cve.org/CVERecord?id=CVE-2021-25476
CVE-2001-1483 Enumeration of valid usernames based on inconsistent responses
https://www.cve.org/CVERecord?id=CVE-2001-1483
CVE-2001-1528 Account number enumeration via inconsistent responses.
https://www.cve.org/CVERecord?id=CVE-2001-1528
CVE-2004-2150 User enumeration via discrepancies in error messages.
https://www.cve.org/CVERecord?id=CVE-2004-2150
CVE-2005-1205 Telnet protocol allows servers to obtain sensitive environment information from
clients.
https://www.cve.org/CVERecord?id=CVE-2005-1205
CVE-2002-1725 Script calls phpinfo(), revealing system configuration to web user
https://www.cve.org/CVERecord?id=CVE-2002-1725
CVE-2002-0515 Product sets a different TTL when a port is being filtered than when it is
not being filtered, which allows remote attackers to identify filtered ports by
comparing TTLs.
https://www.cve.org/CVERecord?id=CVE-2002-0515
CVE-2004-0778 Version control system allows remote attackers to determine the existence of
arbitrary files and directories via the -X command for an alternate history file,
which causes different error messages to be returned.
https://www.cve.org/CVERecord?id=CVE-2004-0778
CVE-2000-1117 Virtual machine allows malicious web site operators to determine the
existence of files on the client by measuring delays in the execution of the
getSystemResource method.
https://www.cve.org/CVERecord?id=CVE-2000-1117
CVE-2003-0190 Product immediately sends an error message when a user does not exist,
which allows remote attackers to determine valid usernames via a timing
attack.
https://www.cve.org/CVERecord?id=CVE-2003-0190
CVE-2008-2049 POP3 server reveals a password in an error message after multiple APOP
commands are sent. Might be resultant from another weakness.
https://www.cve.org/CVERecord?id=CVE-2008-2049
CVE-2007-5172 Program reveals password in error message if attacker can trigger certain
database errors.
https://www.cve.org/CVERecord?id=CVE-2007-5172
CVE-2008-4638 Composite: application running with high privileges (CWE-250) allows user to
specify a restricted file to process, which generates a parsing error that leaks
the contents of the file (CWE-209).
https://www.cve.org/CVERecord?id=CVE-2008-4638
CVE-2007-1409 Direct request to library file in web application triggers pathname leak in error
message.
https://www.cve.org/CVERecord?id=CVE-2007-1409
CVE-2005-0603 Malformed regexp syntax leads to information exposure in error message.
https://www.cve.org/CVERecord?id=CVE-2005-0603
CVE-2004-2268 Password exposed in debug information.
https://www.cve.org/CVERecord?id=CVE-2004-2268
CVE-2003-1078 FTP client with debug option enabled shows password to the screen.
https://www.cve.org/CVERecord?id=CVE-2003-1078
CVE-2022-0708 Collaboration platform does not clear team emails in a response, allowing leak
of email addresses
CWE Version 4.14
CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
CWE-200: Exposure of Sensitive Information to an Unauthorized Actor