CVE-2015-4707

Cross-site scripting XSS vulnerability in IPython before 3.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving JSON error messages and the /api/notebooks path...

CVE-2015-4707

Cross-site scripting XSS vulnerability in IPython before 3.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving JSON error messages and the /api/notebooks path...

Unable to access Worx Store and getting errors "could not load store"

On iOS Device while accessing store "cannot complete your request" error message. On Android while accessing store getting error message while accessing store "could not load store" SecureHub Logs "2017-02-02T16:09:51.998+0400","SecureHub","ERROR...

CVE-2016-2964

IBM Sametime 8.5.2 and 9.0 under certain conditions provides an error message to a user that is too detailed and may reveal details about the application. IBM X-Force ID: 113813...

CVE-2016-2970

IBM Sametime 8.5 and 9.0 meetings server may provide detailed information in an error message that may provide details about the application to possible attackers. IBM X-Force ID: 113851...

CVE-2016-2970

IBM Sametime 8.5 and 9.0 meetings server may provide detailed information in an error message that may provide details about the application to possible attackers. IBM X-Force ID: 113851...

IBM Sametime Media Server Information Disclosure Vulnerability

IBM Sametime Media Server is a set of media servers for Sametime chat and conferencing from IBM in the United States. An information disclosure vulnerability exists in IBM Sametime Media Server versions 9 and 8.5, which stems from detailed application information appearing in error messages. An...

CVE-2016-2970

The CVE-2016-2970 entry concerns IBM Sametime 8.5 and 9.0 Meetings Server, where error messages may disclose detailed information about the application. The underlying issue is information disclosure via verbose error output, which could aid an attacker in understanding the software. Impact detai...

PT-2017-19316 · Osnexus · Quantastor

Name of the Vulnerable Software and Affected Versions: OSNEXUS QuantaStor versions prior to 4.3.1 Description: A flaw was found in the error message sent as a response for non-existent users on the system. This could allow an attacker to enumerate valid accounts by searching for common usernames...

Leakage Of Environment Variables

gitPython is vulnerable to the leakage of environment variables. The leakage happens through error messages because it does not use the unsafe variable in the expandpath method. The unsafe variable should be set to False to prevent this. However, the variable is set to True by default...

IBM Runbook Automation Information Disclosure Vulnerability

IBM Runbook Automation is a suite of automated operations software from IBM in the United States. The software is used to define, build, edit and manage systems and network operational processes, reducing manual tasks. An information disclosure vulnerability exists in IBM Runbook Automation that...

CVE-2017-1377

IBM Runbook Automation reveals sensitive information in error messages that could be used in further attacks against the system. IBM X-Force ID: 126874...

Design/Logic Flaw

IBM Runbook Automation reveals sensitive information in error messages that could be used in further attacks against the system. IBM X-Force ID: 126874...

CVE-2017-1377

Summary: CVE-2017-1377 affects IBM Runbook Automation. The vulnerability stems from error messages that reveal sensitive information about the application and database, which could be used to aid further attacks. The IBM security bulletin confirms the issue and provides remediation paths: if usin...

CVE-2017-1377

IBM Runbook Automation reveals sensitive information in error messages that could be used in further attacks against the system. IBM X-Force ID: 126874...

Cross-site Scripting (XSS)

Moodle is vulnerable to cross-site scripting XSS attacks. The error messages created by scheduled tasks get presented to admin users without sufficient filtering...

CVE-2016-6018

IBM Emptoris Contract Management 10.0 and 10.1 reveals detailed error messages in certain features that could cause an attacker to gain additional information to conduct further attacks. IBM X-Force ID: 116738...

Code injection

IBM Emptoris Contract Management 10.0 and 10.1 reveals detailed error messages in certain features that could cause an attacker to gain additional information to conduct further attacks. IBM X-Force ID: 116738...

CVE-2016-6018

IBM Emptoris Contract Management 10.0 and 10.1 reveals detailed error messages in certain features that could cause an attacker to gain additional information to conduct further attacks. IBM X-Force ID: 116738...

CVE-2016-6018

IBM Emptoris Contract Management 10.0 and 10.1 reveals detailed error messages in certain features that could cause an attacker to gain additional information to conduct further attacks. IBM X-Force ID: 116738...