Lucene search
+L

3900 matches found

Citrix
Citrix
added 2019/11/22 12:0 a.m.12 views

Error: No Product Licenses Found on the License Server for the Selected Model

When configuring XenApp 6.5, the following error message is displayed: “No product licenses found on the license server for the selected model”...

7.2AI score
SaveExploits0
NVD
NVD
added 2019/11/20 5:15 p.m.21 views

CVE-2010-4659

Cross-site scripting XSS vulnerability in statusnet through 2010 in error message contents...

6.1CVSS6.1AI score0.00921EPSS
SaveExploits0References3
Prion
Prion
added 2019/11/20 5:15 p.m.21 views

Cross site scripting

Cross-site scripting XSS vulnerability in statusnet through 2010 in error message contents...

4.3CVSS6.2AI score0.00921EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2019/11/20 4:47 p.m.79 views

CVE-2010-4659

StatusNet (open-source PHP-based micro-blogging platform) contains a cross-site scripting (XSS) vulnerability in error message contents up through 2010. The root cause is insufficient validation of client-side data by the web application, enabling an attacker to execute client-side code via craft...

6.1CVSS6.1AI score0.00921EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2019/11/20 4:47 p.m.22 views

CVE-2010-4659

Cross-site scripting XSS vulnerability in statusnet through 2010 in error message contents...

6.1AI score0.00921EPSS
SaveExploits0References3
Veracode
Veracode
added 2019/11/18 3:47 a.m.14 views

Cross-Site Scripting (XSS)

KairosDB is vulnerable to cross-site scripting XSS. The vulnerability exists as the value of message is not sanitized when it is displayed when an error has occurred...

6.1CVSS1.5AI score0.00857EPSS
SaveExploits1References1Affected Software1
CNVD
CNVD
added 2019/11/18 12:0 a.m.11 views

KairosDB Cross-Site Scripting Vulnerability

KairosDB is a high-speed distributed scalable temporal database based on Cassandra. A cross-site scripting vulnerability exists in view.html in KairosDB 1.2.2 and earlier versions. The vulnerability stems from the showErrorMessage in js/graph.js, and can be exploited via view.html with the...

6.1CVSS6.1AI score0.00857EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2019/11/17 9:15 p.m.4 views

CVE-2019-19040

KairosDB through 1.2.2 has XSS in view.html because of showErrorMessage in js/graph.js, as demonstrated by view.html?q= with a '"sampling":"value":"...

6.1CVSS5.4AI score0.00857EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2019/11/17 12:0 a.m.10 views

PT-2019-15766 · Kairosdb · Kairosdb

Name of the Vulnerable Software and Affected Versions: KairosDB versions prior to 1.2.3 Description: The issue concerns an XSS vulnerability in the view.html file due to the showErrorMessage function in js/graph.js. This can be exploited by including a specific substring, such as...

6.1CVSS5.9AI score0.00857EPSS
SaveExploits1References6
Citrix
Citrix
added 2019/11/08 12:0 a.m.10 views

OS Layer Finalize fails with error "It looks like the packaging Machine has never been powered on".

While finalizing an OS layer edit in the App Layering appliance, you receive an error,"It looks like the packaging Machine has never been powered on." Can see the below error in ELM logs: 2019-11-01 09:53:36,890 ERROR 27 CpTaskResultMessag: Got Error type GlobalizedError. FailureReason: It looks...

7.1AI score
SaveExploits0
Prion
Prion
added 2019/11/06 6:15 p.m.16 views

Code injection

A Username Enumeration via Error Message issue was discovered in NiceHash Miner before 2.0.3.0 because an "EMAIL DOES NOT EXIST" error message occurs whenever a submitted email address is incorrect, but there is a different error message for invalid credentials with a correct email address...

4.3CVSS5.3AI score0.01044EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2019/11/06 5:19 p.m.30 views

CVE-2019-6122

A Username Enumeration via Error Message issue was discovered in NiceHash Miner before 2.0.3.0 because an "EMAIL DOES NOT EXIST" error message occurs whenever a submitted email address is incorrect, but there is a different error message for invalid credentials with a correct email address...

4.7AI score0.01044EPSS
SaveExploits1References2
CVE
CVE
added 2019/11/06 5:19 p.m.68 views

CVE-2019-6122

CVE-2019-6122 is a vulnerability in NiceHash Miner prior to 2.0.3.0 causing user enumeration through separate error messages: submitting a non-existent email triggers “EMAIL DOES NOT EXIST,” while valid emails with incorrect credentials yield a different error. This behavioral difference enables ...

4.3CVSS5.3AI score0.01044EPSS
SaveExploits1References2Affected Software1
Akamai Blog
Akamai Blog
added 2019/10/23 8:36 p.m.57 views

CPDoS Poisoning Attack

On October 22, 2019, a new method of web cache poisoning, called CPDoS or Cache Poisoned Denial of Service, was announced by researchers, Hoai Viet Nguyen and Luigi Lo Iacono. Targeting content delivery networks and other caching systems, the attack works by using a malicious header in the HTTP...

1.1AI score
SaveExploits0
NVD
NVD
added 2019/10/09 4:15 p.m.25 views

CVE-2019-4512

IBM Maximo Asset Management 7.6.1.1 generates an error message that includes sensitive information that could be used in further attacks against the system. IBM X-Force ID: 164554...

4.3CVSS4.2AI score0.00994EPSS
SaveExploits0References2
Prion
Prion
added 2019/10/09 4:15 p.m.23 views

Information disclosure

IBM Maximo Asset Management 7.6.1.1 generates an error message that includes sensitive information that could be used in further attacks against the system. IBM X-Force ID: 164554...

4CVSS4.2AI score0.00994EPSS
SaveExploits0References2Affected Software8
Cvelist
Cvelist
added 2019/10/09 3:0 p.m.30 views

CVE-2019-4512

IBM Maximo Asset Management 7.6.1.1 generates an error message that includes sensitive information that could be used in further attacks against the system. IBM X-Force ID: 164554...

4.3CVSS4.2AI score0.00994EPSS
SaveExploits0References2
Microsoft KB
Microsoft KB
added 2019/10/08 7:0 a.m.111 views

Description of the security update for SharePoint Server 2019: October 8, 2019

None None...

6.5CVSS6.5AI score0.02617EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2019/10/04 9:26 p.m.28 views

CVE-2009-0842

mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 allows remote attackers to read arbitrary invalid .map files via a full pathname in the map parameter, which triggers the display of partial file contents within an error message, as demonstrated by a /tmp/sekrut.map symlink...

10CVSS6.2AI score0.09011EPSS
SaveExploits7References3
Citrix
Citrix
added 2019/10/03 12:0 a.m.10 views

Unable to unlock iOS or iPadOS devices via Administration Console after upgrading to 13.1

Unable to unlock iPhone/iPad from Citrix Endpoint Management administration console after upgrading to iOS/iPadOS 13.1+. Note:No error message is displayed when command fails. The device ignores the command...

7.1AI score
SaveExploits0
Rows per page
Query Builder