CVE-2024-56159
Published Dec 19, 2024Astro is a web framework for content-driven websites. A bug in the build process allows any unauthenticated user to read parts of the server source code. During build, along with…
CWE archive
CWE-219 CVEs
Programmatic archive6 CVEs tagged with CWE-219 — 0 Critical, 3 High, 3 Medium, 0 Low, 0 Unrated.
CVE-2024-39776
Published Aug 22, 2024Avtec Outpost stores sensitive information in an insecure location without proper access controls in place.
CVE-2023-39467
Published May 3, 2024Triangle MicroWorks SCADA Data Gateway certificate Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected i…
CVE-2022-36306
Published Aug 16, 2022An authenticated attacker can enumerate and download sensitive files, including the eNodeB's web management UI's TLS private key, the web server binary, and the web server configu…
CVE-2022-21236
Published Jan 28, 2022An information disclosure vulnerability exists due to a web server misconfiguration in the Reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a dis…
CVE-2002-2024
Published Dec 31, 2002Horde IMP 2.2.7 allows remote attackers to obtain the full web root pathname via an HTTP request for (1) poppassd.php3, (2) login.php3?reason=chpass2, (3) spelling.php3, and (4) l…
Showing 1-6 of 6 CVEsPage 1 of 1