TYPE DE FAIBLESSE

CWE-459

127 CVE, des plus récentes aux plus anciennes. Définition MITRE de CWE-459 (en anglais) →

CVE-2019-14115u'Information disclosure issue occurs as in current logic as secure touch is released without clearing the display session which can result in user reading the secure input while t… 5.5 MOYENNE

CVE-2020-0258In stopZygoteLocked of AppZygote.java, there is an insufficient cleanup. This could lead to local information disclosure in the application that is started next with no additional … 5.5 MOYENNE

CVE-2020-12414IndexedDB should be cleared when leaving private browsing mode and it is not, the API for WKWebViewConfiguration was being used incorrectly and requires the private instance of thi… 6.5 MOYENNE

CVE-2019-20850An issue was discovered in Mattermost Mobile Apps before 1.26.0. A view cache can persist on a device after a logout. 5.3 MOYENNE

CVE-2019-20849An issue was discovered in Mattermost Mobile Apps before 1.26.0. Cookie data can persist on a device after a logout. 5.3 MOYENNE

CVE-2020-12494Beckhoff's TwinCAT RT network driver for Intel 8254x and 8255x is providing EtherCAT functionality. The driver implements real-time features. Except for Ethernet frames sent from r… 5.3 MOYENNE

CVE-2020-0543Incomplete cleanup from specific special register read operations in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local… 5.5 MOYENNE

CVE-2020-10685A flaw was found in Ansible Engine affecting Ansible Engine versions 2.7.x before 2.7.17 and 2.8.x before 2.8.11 and 2.9.x before 2.9.7 as well as Ansible Tower before and includin… 5.0 MOYENNE

CVE-2020-12624The League application before 2020-05-02 on Android sends a bearer token in an HTTP Authorization header to an arbitrary web site that hosts an external image because an OkHttp obj… 6.5 MOYENNE

CVE-2020-5961NVIDIA vGPU graphics driver for guest OS contains a vulnerability in which an incorrect resource clean up on a failure path can impact the guest VM, leading to denial of service. 5.5 MOYENNE

CVE-2020-6794If a user saved passwords before Thunderbird 60 and then later set a master password, an unencrypted copy of these passwords is still accessible. This is because the older stored p… 6.5 MOYENNE

CVE-2019-8768"Clear History and Website Data" did not clear the history. The issue was addressed with improved data deletion. This issue is fixed in macOS Catalina 10.15. A user may be unable t… 5.3 MOYENNE

CVE-2019-8550An issue existed in the pausing of FaceTime video. The issue was resolved with improved logic. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, watchOS 5.2. A user’s video ma… 4.3 MOYENNE

CVE-2019-17420In OISF LibHTP before 0.5.31, as used in Suricata 4.1.4 and other products, an HTTP protocol parsing error causes the http_header signature to not alert on a response with a single… 5.3 MOYENNE

CVE-2019-3733RSA BSAFE Crypto-C Micro Edition, all versions prior to 4.1.4, is vulnerable to three (3) different Improper Clearing of Heap Memory Before Release vulnerability, also known as 'He… 4.9 MOYENNE

CVE-2019-13014Little Snitch versions 4.4.0 fixes a vulnerability in a privileged helper tool. However, the operating system may have made a copy of the privileged helper which is not removed or … 5.5 MOYENNE

CVE-2019-12902Pydio Cells before 1.5.0 does incomplete cleanup of a user's data upon deletion. This allows a new user, holding the same User ID as a deleted user, to restore the deleted user's d… 6.5 MOYENNE

CVE-2019-1586A vulnerability in Cisco Application Policy Infrastructure Controller (APIC) Software could allow an unauthenticated, local attacker with physical access to obtain sensitive inform… 4.6 MOYENNE

CVE-2019-5011An exploitable privilege escalation vulnerability exists in the helper service CleanMyMac X, version 4.20, due to improper updating. The application failed to remove the vulnerable… 5.5 MOYENNE

CVE-2019-5595In FreeBSD before 11.2-STABLE(r343782), 11.2-RELEASE-p9, 12.0-STABLE(r343781), and 12.0-RELEASE-p3, kernel callee-save registers are not properly sanitized before return from syste… 5.5 MOYENNE

CVE-2018-17467Insufficiently quick clearing of stale rendered content in Navigation in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to spoof the contents of the Omnibox (URL bar… 4.3 MOYENNE

CVE-2018-15407A vulnerability in the installation process of Cisco HyperFlex Software could allow an authenticated, local attacker to read sensitive information. The vulnerability is due to insu… 5.5 MOYENNE

CVE-2018-11068RSA BSAFE SSL-J versions prior to 6.2.4 contain a Heap Inspection vulnerability that could allow an attacker with physical access to the system to recover sensitive key material. 4.6 MOYENNE

CVE-2018-12332Incomplete Cleanup vulnerability in ECOS Secure Boot Stick (aka SBS) 5.6.5 allows an attacker to compromise authentication and encryption keys via a compromised host PC after a res… 4.2 MOYENNE

CVE-2005-2293Oracle Formsbuilder 9.0.4 stores database usernames and passwords in a temporary file, which is not deleted after it is used, which allows local users to obtain sensitive informati… 5.5 MOYENNE

CVE-2002-0788An interaction between PGP 7.0.3 with the "wipe deleted files" option, when used on Windows Encrypted File System (EFS), creates a cleartext temporary files that cannot be wiped or… 5.5 MOYENNE

CVE-2000-0552ICQwebmail client for ICQ 2000A creates a world readable temporary file during login and does not delete it, which allows local users to obtain sensitive information. 5.5 MOYENNE