TYPE DE FAIBLESSE

CWE-359

115 CVE, des plus récentes aux plus anciennes. Définition MITRE de CWE-359 (en anglais) →

CVE-2022-41936XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. The `modifications` rest endpoint does not filter out entries according to … 5.3 MOYENNE

CVE-2022-20942A vulnerability in the web-based management interface of Cisco Email Security Appliance (ESA), Cisco Secure Email and Web Manager, and Cisco Secure Web Appliance, formerly known as… 6.5 MOYENNE

CVE-2022-2720In affected versions of Octopus Server it was identified that when a sensitive value is a substring of another value, sensitive value masking will only partially work. 5.3 MOYENNE

CVE-2022-0852There is a flaw in convert2rhel. convert2rhel passes the Red Hat account password to subscription-manager via the command line, which could allow unauthorized users locally on the … 5.5 MOYENNE

CVE-2021-46687JFrog Artifactory prior to version 7.31.10 and 6.23.38 is vulnerable to Sensitive Data Exposure through the Project Administrator REST API. This issue affects: JFrog JFrog Artifact… 4.9 MOYENNE

CVE-2022-1365Exposure of Private Personal Information to an Unauthorized Actor in GitHub repository lquixada/cross-fetch prior to 3.1.5. 6.5 MOYENNE

CVE-2022-24820XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. A guest user without the right to view pages of the wiki can still list doc… 5.3 MOYENNE

CVE-2022-24819XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. A guest user without the right to view pages of the wiki can still list doc… 5.3 MOYENNE

CVE-2022-0155follow-redirects is vulnerable to Exposure of Private Personal Information to an Unauthorized Actor 6.5 MOYENNE

CVE-2021-36723Emuse - eServices / eNvoice Exposure Of Private Personal Information due to lack of identification mechanisms and predictable IDs an attacker can scrape all the files on the servic… 6.1 MOYENNE

CVE-2021-28559Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by an Information Exposure vulnerabilit… 5.3 MOYENNE

CVE-2021-22876curl 7.1.1 to and including 7.75.0 is vulnerable to an "Exposure of Private Personal Information to an Unauthorized Actor" by leaking credentials in the HTTP Referer: header. libcu… 5.3 MOYENNE

CVE-2020-1688On Juniper Networks SRX Series and NFX Series, a local authenticated user with access to the shell may obtain the Web API service private key that is used to provide encrypted comm… 6.5 MOYENNE

CVE-2019-15623Exposure of Private Information in Nextcloud Server 16.0.1 causes the server to send it's domain and user IDs to the Nextcloud Lookup Server without any further data when the Looku… 5.3 MOYENNE

CVE-2017-16769Exposure of private information vulnerability in Photo Viewer in Synology Photo Station 6.8.1-3458 allows remote attackers to obtain metadata from password-protected photographs vi… 5.3 MOYENNE