42 matches found
Design/Logic Flaw
Missing Custom Error Page in GitHub repository ikus060/rdiffweb prior to 2.4.2...
CVE-2022-3175
CVE-2022-3175 affects the rdiffweb project in the GitHub repository ikus060/rdiffweb prior to version 2.4.2. The vulnerability is a missing custom error page which leads to leakage of error information. The issue is resolved in version 2.4.2. Mitigation: upgrade to 2.4.2 or later. Exploitation de...
CVE-2022-3175 Missing Custom Error Page in ikus060/rdiffweb
Missing Custom Error Page in GitHub repository ikus060/rdiffweb prior to 2.4.2...
CVE-2022-3175
Missing Custom Error Page in GitHub repository ikus060/rdiffweb prior to 2.4.2...
CVE-2022-3175: Missing Custom Error Page
Missing Custom Error Page in GitHub repository ikus060/rdiffweb prior to 2.4.2...
Rdiffweb 安全漏洞
Rdiffweb is a web application by Patrik Dufresne, an individual developer in the USA. It provides quick access to your archives through an efficient web interface. A security vulnerability exists in Rdiffweb versions prior to 2.4.2, which stems from the loss of a custom error page...
GHSA-JMVV-524F-HJ5J Improper Handling of Exceptional Conditions in Apache Tomcat
The error page mechanism of the Java Servlet Specification requires that, when an error occurs and an error page is configured for the error that occurred, the original request and response are forwarded to the error page. This means that the request is presented to the error page with the origin...
Design/Logic Flaw
Missing custom error page vulnerability in Synology Web Station before 2.1.3-0139 allows remote attackers to conduct phishing attacks via a crafted URL...
CVE-2018-8913: Missing Custom Error Page
Missing custom error page vulnerability in Synology Web Station before 2.1.3-0139 allows remote attackers to conduct phishing attacks via a crafted URL...
Security Bulletin: Information Disclosure in IBM WebSphere Application Server Liberty (CVE-2016-0378)
Summary There is an Information Disclosure Vulnerability in IBM WebSphere Application Server Liberty. Vulnerability Details CVEID: CVE-2016-0378 DESCRIPTION: IBM WebSphere Application Server Liberty could allow a remote attacker to obtain sensitive information caused by improper handling of...
tomcat: Security constrained bypass in error page mechanism
A vulnerability was discovered in the error page mechanism in Tomcat's DefaultServlet implementation. A crafted HTTP request could cause undesired side effects, possibly including the removal or replacement of the custom error page...
tomcat: Security constrained bypass in error page mechanism
A vulnerability was discovered in the error page mechanism in Tomcat's DefaultServlet implementation. A crafted HTTP request could cause undesired side effects, possibly including the removal or replacement of the custom error page...
tomcat: Security constrained bypass in error page mechanism
A vulnerability was discovered in the error page mechanism in Tomcat's DefaultServlet implementation. A crafted HTTP request could cause undesired side effects, possibly including the removal or replacement of the custom error page...
tomcat: Security constrained bypass in error page mechanism
A vulnerability was discovered in the error page mechanism in Tomcat's DefaultServlet implementation. A crafted HTTP request could cause undesired side effects, possibly including the removal or replacement of the custom error page...
tomcat: Security constrained bypass in error page mechanism
A vulnerability was discovered in the error page mechanism in Tomcat's DefaultServlet implementation. A crafted HTTP request could cause undesired side effects, possibly including the removal or replacement of the custom error page...
tomcat: Security constrained bypass in error page mechanism
A vulnerability was discovered in the error page mechanism in Tomcat's DefaultServlet implementation. A crafted HTTP request could cause undesired side effects, possibly including the removal or replacement of the custom error page...
tomcat: Security constrained bypass in error page mechanism
A vulnerability was discovered in the error page mechanism in Tomcat's DefaultServlet implementation. A crafted HTTP request could cause undesired side effects, possibly including the removal or replacement of the custom error page...
PortSwigger Web Security: Misconfiguration: Missing Custom Error Page (CWE-12 & CWE-756)
Hi I found that custom errors for http://portswigger.net application framework are not configured., so application vulnerable to CWE-756 & CWE-12 https://cwe.mitre.org/data/definitions/12.html https://cwe.mitre.org/data/definitions/756.html - Impact: Default error pages gives detailed information...
Huwshimi.com's Fail Ninja
It’s always so easy to blame the ninjas, isn’t it? Still, we’ve gotta give props to the anime-inspired custom 404 error page for this Sydney, Australia based Web design firm, which claims that “A ninja stole this page.” Visitors are encouraged to “return when the moon has friends and the fox is...
CVE-2005-3357
modssl in Apache 2.0 up to 2.0.55, when configured with an SSL vhost with access control and a custom error 400 error page, allows remote attackers to cause a denial of service application crash via a non-SSL request to an SSL port, which triggers a NULL pointer dereference...