Lucene search
K

9 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 4:45 a.m.5 views

CVE-2019-16768

In affected versions of Sylius, exception messages from internal exceptions like database exception are wrapped by \Symfony\Component\Security\Core\Exception\AuthenticationServiceException and propagated through the system to UI. Therefore, some internal system information may leak and be visible...

4.3CVSS6.5AI score0.00347EPSS
Exploits0References1
Circl
Circl
added 2024/03/07 4:12 p.m.1 views

CVE-2019-16768

creationtimestamp| type| source ---|---|--- 2024-03-07 16:12:06+00:00| seen| https://t.me/ctinow/202527...

4.3CVSS4.6AI score0.00347EPSS
Exploits0References1
Cvelist
Cvelist
added 2021/12/20 10:51 p.m.8 views

CVE-2020-16768

...

Exploits0
CVE
CVE
added 2021/12/20 10:51 p.m.26 views

CVE-2020-16768

CVE-2020-16768 entry is rejected/not used per the Initial Description.

6.7AI score
Exploits0
CVE
CVE
added 2019/12/05 8:0 p.m.66 views

CVE-2019-16768

CVE-2019-16768 affects Sylius: internal exception messages from login errors could leak system details to users. The root cause is exception messages from internal exceptions (e.g., database errors) being wrapped and surfaced in the UI via the login flow. Affected versions are fixed in Sylius rel...

4.3CVSS4.1AI score0.00347EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2018/09/10 4:0 a.m.40 views

CVE-2018-16768

CVE-2018-16768 affects WAVM (WebAssembly Virtual Machine). A heap-buffer-overflow in IR::FunctionValidationContext::end, triggered by a crafted input file up to 2018-07-26, may cause a denial of service (application crash) and possibly unspecified other impact. The vulnerability is documented acr...

8.8CVSS8.9AI score0.00295EPSS
Exploits1References1Affected Software1
NVD
NVD
added 2017/12/27 5:29 p.m.9 views

CVE-2017-16768

Cross-site scripting XSS vulnerability in User Policy editor in Synology MailPlus Server before 1.4.0-0415 allows remote authenticated users to inject arbitrary HTML via the name parameter...

4.8CVSS4.8AI score0.00184EPSS
Exploits0References1
CVE
CVE
added 2017/12/27 5:0 p.m.39 views

CVE-2017-16768

CVE-2017-16768 is a cross-site scripting (XSS) vulnerability in the User Policy editor of Synology MailPlus Server prior to version 1.4.0-0415. The issue allows remote authenticated users to inject arbitrary HTML via the name parameter, with impact described as partial integrity impact and low co...

4.8CVSS4.7AI score0.00184EPSS
Exploits0References1Affected Software1
Openbugbounty
Openbugbounty
added 2016/06/25 3:32 a.m.13 views

sunglasshut.com XSS vulnerability

Vulnerable URL: https://www.sunglasshut.com/UserRegistrationForm?new=Y="" aa =-1=10152 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 16768 VIP website status:| Yes Check sunglasshut.com SSL connection:| Grade: ...

6.3AI score
Exploits0
Rows per page
Query Builder