CWE-199 · 8 records
Information Management Errors
CVEs in this class
8 records
| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
40Plan | CVE-2016-5405No exploit | 389 Directory Server in Red Hat Enterprise Linux Desktop 6 through 7, Red Hat Enterprise Linux HPC Node 6 through 7, Red Hat Enterprise Linuredhat · enterprise linux desktop · CWE-199 | Critical9.8 | — | 3.0% | Jun 8, 2017 |
22Monitor | CVE-2015-8346No exploit | app/views/timelog/_form.html.erb in Redmine before 2.6.8, 3.0.x before 3.0.6, and 3.1.x before 3.1.2 allows remote attackers to obtain sensiredmine · redmine · CWE-199 | Medium5.3 | — | 1.9% | Apr 12, 2016 |
22Monitor | CVE-2016-5486No exploit | Unspecified vulnerability in the Sun ZFS Storage Appliance Kit (AK) component in Oracle Sun Systems Products Suite AK 2013 allows local useroracle · sun zfs storage appliance kit · CWE-199 | Medium5.5 | — | 0.3% | Oct 25, 2016 |
22Monitor | CVE-2024-51522No exploit | Vulnerability of improper device information processing in the device management module Impact: Successful exploitation of this vulnerabilithuawei · harmonyos · CWE-199 | Medium5.5 | — | 0.1% | Nov 5, 2024 |
22Monitor | CVE-2025-58304No exploit | Permission control vulnerability in the file management module.huawei · harmonyos · CWE-199 | Medium5.5 | — | 0.0% | Nov 28, 2025 |
21Monitor | CVE-2016-10841No exploit | The bin/mkvhostspasswd script in cPanel before 11.54.0.4 discloses password hashes (SEC-73).cpanel · cpanel · CWE-199 | Medium5.3 | — | 0.8% | Aug 1, 2019 |
17Monitor | CVE-2014-1591No exploit | Mozilla Firefox 33.0 and SeaMonkey before 2.31 include path strings in CSP violation reports, which allows remote attackers to obtain sensitmozilla · firefox · CWE-199 | Medium4.3 | — | 1.1% | Dec 11, 2014 |
8Monitor | CVE-2014-1595No exploit | Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, and Thunderbird before 31.3 on Apple OS X 10.10 omit a CoreGraphics disable-loggimozilla · firefox · CWE-199 | Low2.1 | — | 0.3% | Dec 11, 2014 |
- CVE-2016-540540Plan
389 Directory Server in Red Hat Enterprise Linux Desktop 6 through 7, Red Hat Enterprise Linux HPC Node 6 through 7, Red Hat Enterprise Linu
CriticalCVSS 9.8No exploitEPSS 3%redhat · enterprise linux desktopJun 8, 2017
- CVE-2015-834622Monitor
app/views/timelog/_form.html.erb in Redmine before 2.6.8, 3.0.x before 3.0.6, and 3.1.x before 3.1.2 allows remote attackers to obtain sensi
MediumCVSS 5.3No exploitEPSS 1%redmine · redmineApr 12, 2016
- CVE-2016-548622Monitor
Unspecified vulnerability in the Sun ZFS Storage Appliance Kit (AK) component in Oracle Sun Systems Products Suite AK 2013 allows local user
MediumCVSS 5.5No exploitEPSS 0%oracle · sun zfs storage appliance kitOct 25, 2016
- CVE-2024-5152222Monitor
Vulnerability of improper device information processing in the device management module Impact: Successful exploitation of this vulnerabilit
MediumCVSS 5.5No exploitEPSS 0%huawei · harmonyosNov 5, 2024
- CVE-2025-5830422Monitor
Permission control vulnerability in the file management module.
MediumCVSS 5.5No exploitEPSS 0%huawei · harmonyosNov 28, 2025
- CVE-2016-1084121Monitor
The bin/mkvhostspasswd script in cPanel before 11.54.0.4 discloses password hashes (SEC-73).
MediumCVSS 5.3No exploitEPSS 0%cpanel · cpanelAug 1, 2019
- CVE-2014-159117Monitor
Mozilla Firefox 33.0 and SeaMonkey before 2.31 include path strings in CSP violation reports, which allows remote attackers to obtain sensit
MediumCVSS 4.3No exploitEPSS 1%mozilla · firefoxDec 11, 2014
- CVE-2014-15958Monitor
Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, and Thunderbird before 31.3 on Apple OS X 10.10 omit a CoreGraphics disable-loggi
LowCVSS 2.1No exploitEPSS 0%mozilla · firefoxDec 11, 2014