268 matches found
CVE-2021-3039
An information exposure through log file vulnerability exists in the Palo Alto Networks Prisma Cloud Compute Console where a secret used to authorize the role of the authenticated user is logged to a debug log file. Authenticated Operator role and Auditor role users with access to the debug log...
CVE-2021-21537
Dell Hybrid Client exposes an information disclosure vulnerability in versions prior to 1.5. An attacker with local access (no authentication) could view and exfiltrate sensitive data from the system. Affected product: Dell Hybrid Client (prior to 1.5). Root cause: information exposure in the cli...
CVE-2021-21376
OMERO.web is open source Django-based software for managing microscopy imaging. OMERO.web before version 5.9.0 loads various information about the current user such as their id, name and the groups they are in, and these are available on the main webclient pages. This represents an information...
Information disclosure
OMERO.web is open source Django-based software for managing microscopy imaging. OMERO.web before version 5.9.0 loads various information about the current user such as their id, name and the groups they are in, and these are available on the main webclient pages. This represents an information...
PYSEC-2021-31
OMERO.web is open source Django-based software for managing microscopy imaging. OMERO.web before version 5.9.0 loads various information about the current user such as their id, name and the groups they are in, and these are available on the main webclient pages. This represents an information...
Design/Logic Flaw
In JetBrains TeamCity before 2020.2, an ECR token could be exposed in a build's parameters...
Security Bulletin: IBM Tivoli Common Reporting: TCR, a part of IBM Jazz for Service Management (JazzSM) is vulnerable to an information exposure vulnerability (CVE-2020-4643)
Summary WebSphere Application Server is vulnerable to an information exposure vulnerability. This has been addressed. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions Affected Products| Versions ---|--- IBM Tivoli Common...
Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server, which is a required product for IBM Tivoli Network Manager IP Edition (CVE-2020-4643)
Summary IBM WebSphere Application Server is a required product for IBM Tivoli Network Manager version 4.2. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed ...
Oracle Linux 8 : nodejs:12 (ELSA-2020-4272)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-4272 advisory. nodejs 1:12.18.4-2 - Resolves: RHBZ1883966 - nodejs-devel not installable due to missing brotli - Some spec fixes 12.18.4-1 - Rebase to 12.18.4...
Security Bulletin: WebSphere Application Server which is a component of IBM Cloud Pak for Applications is vulnerable to an information exposure vulnerability (CVE-2020-4629)
Summary WebSphere Application Server is shipped as a component of IBM Cloud Pak for Applications. There is a information exposure vulnerability in the WebSphere Application Server. Information about security vulnerabilities affecting WebSphere Application Server have been published in a security...
Security Bulletin: WebSphere Application Server is vulnerable to an information exposure vulnerability (CVE-2020-4643)
Summary WebSphere Application Server is vulnerable to an information exposure vulnerability. This has been addressed. Vulnerability Details CVEID: CVE-2020-4643 DESCRIPTION: IBM WebSphere Application Server is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A...
CVE-2020-24622
In Sonatype Nexus Repository 3.26.1, an S3 secret key can be exposed by an admin user...
Security Bulletin: Multiple vulnerabilities in IBM WebSphere Appilcation Server and WebSphere Application Server Liberty affects IBM Engineering ELM products on IBM Jazz technology.
Summary There are multiple vulnerabilities in IBM WebSphere Application Server and WebSphere Application Server Liberty that affect IBM Engineering Products based on IBM Jazz technology. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Product...
Security Bulletin: A security vulnerability has been identified in WebSphere Application Server shipped with WebSphere Remote Server (CVE-2020-4449)
Summary WebSphere Application Server is shipped with WebSphere Remote Server. Information about a security vulnerability affecting WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section...
Logic flaw vulnerability in JLCMS of Beijing Liangjing Zhicheng Technology Co.
LJCMS is a PHP+MYSQL based enterprise website system. There is a logic flaw vulnerability in JLCMS of Beijing Liang Jing Zhi Cheng Technology Co., Ltd. that can be exploited by attackers to obtain other people's user address information...
beavrs.org GDPR PII Exposure vulnerability
Open Bug Bounty ID: OBB-1086137 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
EulerOS 2.0 SP3 : NetworkManager (EulerOS-SA-2019-2636)
According to the version of the NetworkManager packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - GNOME NetworkManager version 1.10.2 and earlier contains a Information Exposure CWE-200 vulnerability in DNS resolver that can result in...
CVE-2019-13557
CVE-2019-13557 affects Philips Tasy EMR and Tasy WebPortal. The information-exposure vulnerability exists in Tasy EMR 3.02.1744 and earlier and Tasy WebPortal 3.02.1757 and earlier, allowing a remote attacker to access system and configuration information. Public sources (NVD) assign a low‑to‑mod...
CVE-2019-3763
The RSA Identity Governance and Lifecycle software and RSA Via Lifecycle and Governance products prior to 7.1.0 P08 contain an information exposure vulnerability. The Office 365 user password may get logged in a plain text format in the Office 365 connector debug log file. An authenticated...