Improper Removal of Sensitive Information Before Storage or Transfer

Every one of the 109 is a mark on the map. Named now: 1 to 26, most at risk first.

1. The optional initial password change and password expiration features present in Apache Jackrabbit Oak 1.2.0 to 1.22.0 are prone to a sensitive information disclosure vulnerabilit…CVE-2020-1940Apache Software Foundation · 4.5% likely

   Apache

2. Mis-trained branch predictions for return instructions may allow arbitrary speculative code execution under certain microarchitecture-dependent conditions.CVE-2022-29900AMD · 3.9% likely

   AMD

3. The Network Address Translation (NAT) capability for Netfilter ("iptables") 1.2.6a and earlier leaks translated IP addresses in ICMP error messages.CVE-2002-07043.2% likely
4. RCE in SymfonyCVE-2020-15094symfony · CVSS 8 · 3.0% likely

   Symfony

5. In parseNextBox of IsoInterface.java, there is a possible leak of unredacted location information due to improper input validation. This could lead to remote information disclosur…CVE-2021-0340Android · 2.2% likely
6. An issue was discovered in the Chat functionality of the TeamViewer desktop application 14.3.4730 on Windows. (The vendor states that it was later fixed.) Upon login, every commun…CVE-2019-19362CVSS 4.3 · 2.1% likely
7. Improper Removal of Sensitive Information Before Storage or Transfer in feross/simple-getCVE-2022-0355feross · CVSS 8.8 · 2.0% likely
8. Improper Removal of Sensitive Information Before Storage or Transfer in eventsource/eventsourceCVE-2022-1650eventsource · CVSS 8.1 · 1.9% likely
9. An issue was discovered in Varnish Cache before 6.0.5 LTS, 6.1.x and 6.2.x before 6.2.2, and 6.3.x before 6.3.1. It does not clear a pointer between the handling of one client req…CVE-2019-206371.8% likely
10. folly::secureRandom will re-use a buffer between parent and child processes when fork() is called. That will result in multiple forked children producing repeat (or similar) resul…CVE-2018-6337Facebook · CVSS 7.5 · 1.8% likely

    Meta (Facebook)

11. Improper Removal of Sensitive Information Before Storage or Transfer in cockpit-hq/cockpitCVE-2022-2818cockpit-hq · CVSS 9.8 · 1.7% likely

    Cockpit HQ

12. An issue was discovered in Mbed TLS before 2.24.0 (and before 2.16.8 LTS and before 2.7.17 LTS). There is missing zeroization of plaintext buffers in mbedtls_ssl_read to erase unu…CVE-2020-364761.6% likely
13. /usr/sbin/default.sh and /usr/apache/htdocs/cgi-bin/admin/hardfactorydefault.cgi on Dynacolor FCM-MB40 v1.2.0.0 devices implement an incomplete factory-reset process. A backdoor c…CVE-2019-134021.5% likely
14. An authenticated user with access to the Strapi admin panel can view private and sensitive data, such as email and password reset tokens, for other admin panel users that have a r…CVE-2022-30617Strapi · 1.5% likely

    Strapi

15. Insufficient password hash filtering in some IRRd queries and exportsCVE-2022-24798irrdnet · CVSS 7.5 · 1.4% likely
16. An information disclosure vulnerability was found in containers/podman in versions before 2.0.5. When using the deprecated Varlink API or the Docker-compatible REST API, if multip…CVE-2020-14370podman · 1.4% likely
17. A vulnerability was discovered in oVirt 4.1.x before 4.1.9, where the combination of Enable Discard and Wipe After Delete flags for VM disks managed by oVirt, could cause a disk t…CVE-2018-1062oVirt · 1.4% likely
18. Openstack nova: information leak in libvirt lvm-backed instancesCVE-2012-5625Red Hat · CVSS 6.5 · 1.3% likely

    Red Hat

19. Improper Removal of Sensitive Information Before Storage or Transfer in follow-redirects/follow-redirectsCVE-2022-0536follow-redirects · CVSS 2.6 · 1.3% likely

    Follow-Redirects

20. Some websites have a feature "Show Password" where clicking a button will change a password field into a textbook field, revealing the typed password. If, when using a software ke…CVE-2020-26965Mozilla · 1.3% likely

    Mozilla

21. An information disclosure vulnerability was found in libvirt in versions before 6.3.0. HTTP cookies used to access network-based disks were saved in the XML dump of the guest doma…CVE-2020-14301libvirt · 1.2% likely
22. In app/Model/MispObject.php in MISP 2.4.141, an incorrect sharing group association could lead to information disclosure on an event edit. When an object has a sharing group assoc…CVE-2021-317801.2% likely
23. ovirt-engine before version 4.1.7.6 with log level set to DEBUG includes passwords in the log file without masking. Only administrators can change the log level and only administr…CVE-2017-15113Red Hat · CVSS 7.2 · 1.1% likely

    Red Hat

24. Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/httpCVE-2023-45289Go standard library · CVSS 4.3 · 1.1% likely

    Go standard library

25. AT91bootstrap before 3.9.2 does not properly wipe encryption and authentication keys from memory before passing control to a less privileged software component. This can be exploi…CVE-2020-116841.1% likely
26. net: ethernet: lantiq_etop: fix memory disclosureCVE-2024-49997Linux · 1.1% likely

    Linux

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.