Vulnerabilities (CVE)

Filtered by CWE-202
Total 25 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-38897 1 Wavlink 2 Wn551k1, Wn551k1 Firmware 2025-06-06 N/A 5.3 MEDIUM
WAVLINK WN551K1'live_check.shtml enables attackers to obtain sensitive router information.
CVE-2024-13255 1 Restful Web Services Project 1 Restful Web Services 2025-06-04 N/A 7.5 HIGH
Exposure of Sensitive Information Through Data Queries vulnerability in Drupal RESTful Web Services allows Forceful Browsing.This issue affects RESTful Web Services: from 7.X-2.0 before 7.X-2.10.
CVE-2023-0785 1 Mayurik 1 Best Online News Portal 2025-03-07 2.6 LOW 3.7 LOW
A vulnerability classified as problematic was found in SourceCodester Best Online News Portal 1.0. Affected by this vulnerability is an unknown functionality of the file check_availability.php. The manipulation of the argument username leads to exposure of sensitive information through data queries. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The identifier VDB-220645 was assigned to this vulnerability.
CVE-2024-20388 1 Cisco 3 Firepower Management Center, Firepower Threat Defense, Secure Firewall Management Center 2024-11-26 N/A 5.3 MEDIUM
A vulnerability in the password change feature of Cisco Firepower Management Center (FMC) software could allow an unauthenticated, remote attacker to determine valid user names on an affected device. This vulnerability is due to improper authentication of password update responses. An attacker could exploit this vulnerability by forcing a password reset on an affected device. A successful exploit could allow the attacker to determine valid user names in the unauthenticated response to a forced password reset.
CVE-2021-1372 1 Cisco 2 Webex Meetings, Webex Meetings Server 2024-11-21 2.1 LOW 5.5 MEDIUM
A vulnerability in Cisco Webex Meetings Desktop App and Webex Productivity Tools for Windows could allow an authenticated, local attacker to gain access to sensitive information on an affected system. This vulnerability is due to the unsafe usage of shared memory by the affected software. An attacker with permissions to view system memory could exploit this vulnerability by running an application on the local system that is designed to read shared memory. A successful exploit could allow the attacker to retrieve sensitive information from the shared memory, including usernames, meeting information, or authentication tokens. Note: To exploit this vulnerability, an attacker must have valid credentials on a Microsoft Windows end-user system and must log in after another user has already authenticated with Webex on the same end-user system.