Vulnerabilities (CVE)

Filtered by CWE-497
Total 444 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-25179 1 Gehealthcare 224 1.5t Brivo Mr355, 1.5t Brivo Mr355 Firmware, 3.0t Signa Hd 16 and 221 more 2026-06-17 7.5 HIGH 9.8 CRITICAL
GE Healthcare Imaging and Ultrasound Products may allow specific credentials to be exposed during transport over the network.
CVE-2019-25230 1 Kentico 1 Xperience 2026-06-17 N/A 4.3 MEDIUM
An information disclosure vulnerability in Kentico Xperience allows authenticated users to view sensitive system objects through the live site widget properties dialog. Attackers can exploit this vulnerability to access unauthorized system information without proper access controls.
CVE-2019-25228 1 Kentico 1 Xperience 2026-06-17 N/A 5.3 MEDIUM
An information disclosure vulnerability in Kentico Xperience allows attackers to leak virtual context URLs via the HTTP Referer header when users interact with third-party domains. Sensitive virtual context information can be exposed to external domains through page builder interactions and link/image loading.
CVE-2019-10243 1 Eclipse 1 Kura 2026-06-17 5.0 MEDIUM 5.3 MEDIUM
In Eclipse Kura versions up to 4.0.0, Kura exposes the underlying Ui Web server version in its replies. This can be used as a hint by an attacker to specifically craft attacks to the web server run by Kura.