Lucene search
+L

4028 matches found

Prion
Prion
added 2024/01/19 11:15 a.m.56 views

Information disclosure

Generation of Error Message Containing Sensitive Information vulnerability in Apache Tomcat.This issue affects Apache Tomcat: from 8.5.7 through 8.5.63, from 9.0.0-M11 through 9.0.43. Users are recommended to upgrade to version 8.5.64 onwards or 9.0.44 onwards, which contain a fix for the issue...

5CVSS6.9AI score0.14286EPSS
SaveExploits3References4Affected Software1
UbuntuCve
UbuntuCve
added 2024/01/19 11:15 a.m.98 views

CVE-2024-21733

Generation of Error Message Containing Sensitive Information vulnerability in Apache Tomcat.This issue affects Apache Tomcat: from 8.5.7 through 8.5.63, from 9.0.0-M11 through 9.0.43. Other, EOL versions may also be affected. Users are recommended to upgrade to version 8.5.64 onwards or 9.0.44...

5.3CVSS6.8AI score0.14286EPSS
SaveExploits3References6
Debian CVE
Debian CVE
added 2024/01/19 10:29 a.m.117 views

CVE-2024-21733

Generation of Error Message Containing Sensitive Information vulnerability in Apache Tomcat.This issue affects Apache Tomcat: from 8.5.7 through 8.5.63, from 9.0.0-M11 through 9.0.43. Other, EOL versions may also be affected. Users are recommended to upgrade to version 8.5.64 onwards or 9.0.44...

5.3CVSS7.2AI score0.14286EPSS
SaveExploits3
OSV
OSV
added 2024/01/19 10:29 a.m.49 views

CVE-2024-21733 Apache Tomcat: Leaking of unrelated request bodies in default error page

Generation of Error Message Containing Sensitive Information vulnerability in Apache Tomcat.This issue affects Apache Tomcat: from 8.5.7 through 8.5.63, from 9.0.0-M11 through 9.0.43. Other, EOL versions may also be affected. Users are recommended to upgrade to version 8.5.64 onwards or 9.0.44...

5.3CVSS6.7AI score
SaveExploits0References7
Metasploit
Metasploit
added 2024/01/17 7:50 p.m.164 views

Ansible Playbook Error Message File Reader

This module will read the first line of a file based on an error message from ansible-playbook with sudo privileges. ansible-playbook takes a yaml file as input, and if there is an error, such as a non-yaml file, it outputs the line where the error occurs. This can be exploited to read the first...

6.8AI score
SaveExploits0
Prion
Prion
added 2024/01/16 1:15 a.m.30 views

Design/Logic Flaw

Generation of Error Message Containing Sensitive Information vulnerability in Hitachi Device Manager on Windows, Linux Device Manager Agent modules.This issue affects Hitachi Device Manager: before 8.8.5-04...

5CVSS7.2AI score0.00408EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/01/16 12:59 a.m.15 views

CVE-2023-49107 Generation of Error Message Containing Sensitive Information Vulnerability in Hitachi Device Manager

Generation of Error Message Containing Sensitive Information vulnerability in Hitachi Device Manager on Windows, Linux Device Manager Agent modules.This issue affects Hitachi Device Manager: before 8.8.5-04...

5.3CVSS7.5AI score0.00408EPSS
SaveExploits0References1
CVE
CVE
added 2024/01/16 12:59 a.m.67 views

CVE-2023-49107

CVE-2023-49107 affects Hitachi Device Manager (Windows and Linux Device Manager Agent modules) prior to version 8.8.5-04. The vulnerability is a result of generating error messages that disclose sensitive information. Impact is described as exposure of sensitive information, with CVSS context ind...

7.5CVSS7.5AI score0.00408EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2024/01/16 12:00 a.m.32 views

Hitachi Device Manager Security Vulnerability

Hitachi Device Manager is a device management software from Hitachi, Japan. It is a solution for centralized management and monitoring of storage devices, designed to help users simplify storage resource management, optimize storage performance, and improve the reliability and availability of...

7.5CVSS6.6AI score0.00408EPSS
SaveExploits0References2
Citrix
Citrix
added 2024/01/15 12:00 a.m.18 views

Citrix Cloud: Admin may be unable to view the Citrix Daas console, it is greyed out.

Citrix Admin Console may be unable to view the Citrix DaaS. There may be a notification that "DaaS is unavailable" In the Citrix Cloud console for managing a DaaS deployment, all menu options below 'Home' are greyed out and inactive. Hovering over them shows the error message "DaaS is unavailable...

7AI score
SaveExploits0
Citrix
Citrix
added 2024/01/08 12:00 a.m.16 views

Webcam redirection in double hop is not working

Webcam is not working anymore in a double hop scenario. If the first hop VDA is 1912CU3 webcam redirects fine. However if first hop VDA is CVAD 1912 CU8 VDA then webcam redirection fails. With https://webcamtests.com/ when clicking on "Test my cam" an error is seen. "Your webcam is being used or...

7AI score
SaveExploits0
Citrix
Citrix
added 2024/01/05 12:00 a.m.19 views

Error "Enabling of SSLv3 is not supported on this platform" when enable SSLv3 in MPX 9110

Navigate to Traffic Management Load Balancing Virtual Servers , 2. Select and edit the SSL Virtual Server; 3. Click SSL Parameters , 4. Check SSLv3 option, 5. Error prompt: "Enabling of SSLv3 is not supported on this platform"...

7AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2024/01/03 12:00 a.m.32 views

GitLab < 14.7.7 (CVE-2022-1120)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - Missing filtering in an error message in GitLab CE/EE affecting all versions prior to 14.7.7, 14.8 prior to 14.8.5, and 14.9 prior to 14.9.2 exposed sensitive information when an include directive fai...

6.5CVSS6.5AI score0.01027EPSS
SaveExploits0References4
CVE
CVE
added 2023/12/28 7:03 a.m.54 views

CVE-2023-45701

HCL Launch is affected by CVE-2023-45701: a remote attacker can obtain sensitive information if a detailed technical error message is returned in the browser. This is an information-disclosure issue; the documents do not provide exploit details or definitive affected versions. No remediation or p...

6.5CVSS5.1AI score0.00484EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/12/28 7:03 a.m.32 views

CVE-2023-45701 HCL Launch is susceptible to sensitive information disclosure

HCL Launch could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system...

4.3CVSS6.4AI score0.00484EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/12/22 12:00 a.m.11 views

PT-2023-29774 · Unknown · Thirty Bees

Name of the Vulnerable Software and Affected Versions: thirty bees versions prior to 1.5.0 Description: A stored cross-site scripting XSS issue exists due to error mishandling in the admin/AdminRequestSqlController.php component, allowing attackers to execute arbitrary web script or HTML via the...

5.4CVSS5.3AI score0.00375EPSS
SaveExploits0References6
Prion
Prion
added 2023/12/20 2:15 a.m.32 views

Design/Logic Flaw

IBM Security Guardium Key Lifecycle Manager 4.3 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 271197...

5CVSS6AI score0.00757EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2023/12/20 1:45 a.m.37 views

CVE-2023-47703 IBM Security Guardium Key Lifecycle Manager information disclosure

IBM Security Guardium Key Lifecycle Manager 4.3 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 271197...

5.3CVSS4.9AI score0.00757EPSS
SaveExploits0References2
NVD
NVD
added 2023/12/20 12:15 a.m.33 views

CVE-2023-42013

IBM UrbanCode Deploy UCD 7.1 through 7.1.2.14, 7.2 through 7.2.3.7, and 7.3 through 7.3.2.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM...

5.3CVSS0.00713EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2023/12/19 11:47 p.m.42 views

CVE-2023-42013 IBM UrbanCode Deploy information disclosure

IBM UrbanCode Deploy UCD 7.1 through 7.1.2.14, 7.2 through 7.2.3.7, and 7.3 through 7.3.2.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM...

5.3CVSS5.1AI score0.00713EPSS
SaveExploits0References2
Rows per page
Query Builder