mysql: Server: Error Handling unspecified vulnerability (CPU Jan 2017)

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Error Handling. Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the...

Public store application on XenMobile gives error "500 server internal error "

There are can be multiple scenarios in which the issue can come 1. When publishing the public store app “Archibus Client” https://itunes.apple.com/au/app/archibus-mobile-client-2.0/id926252726?mt=8, the application details can be populated in XM console but the “500 Server Internal Error” at the...

mysql: Server: Error Handling unspecified vulnerability (CPU Jan 2017)

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Error Handling. Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the...

WEM Database Creation Error Message regarding "Path Specified" when creating WEM database

When attempting to create a WEMDatabase using the Database Management Utility Console, it failswith: "Database Creation Error" The Citrix WEM Database Management Utility Debug Log shows the following exception:"Exception - CreateVuemdb.Run : SqlDatabaseHelper. connection Error : 5133 | Directory...

DEBIAN-CVE-2017-10788

The DBD::mysql module through 4.043 for Perl allows remote attackers to cause a denial of service use-after-free and application crash or possibly have unspecified other impact by triggering 1 certain error responses from a MySQL server or 2 a loss of a network connection to a MySQL server. The...

Weblate: No Rate Limitation on Regenerate Api Key

Hi, I discovered that there is no request throttling or limit on api key regeneration. Though theres a little change while making a total of 30 requests in a few seconds, server error occurred then it continued. Screenshot F197872 In the screenshot 685 denotes a processed request and 6052 denotes...

OPC UA Server Error Detection (SCADA)

Binary data 700151.prm...

Weblate: Improper validation of unicode characters

Hi, I just saw a report of 229483 This issue still persist. When i tried some Unicode characters like smilies etc. It is working perfectly by displaying the Error message on the same page that Username may only contain letters, numbers or the following characters: @ . + - See 1.jpg for smilies...

Issues with public store microsoft dynamic application with per app VPN

,Able to launch the application successfully however after entering the url in the application it gives the error "Your server is not available or doesn’t support this application"...

How to pass the command injection vulnerability fix Yahoo subsidiary production servers-vulnerability warning-the black bar safety net

One, Foreword Time to get back to 5 May 20, the night before that, I spent several days time to study the Yahoo Messenger app, still can't figure out how it works, but annoying headache and neck pain and looking for me. So I decided to go for a walk, find a new target. Then I noticed a very...

Weblate: Improper validation of unicode characters

There are validation issues server side causing a server error when saving the account. Please specify what characters are permited...

Gratipay: Transferring incorrect data to the http://gip.rocks/v1 endpoint with correct Content-Type leads to local paths disclosure through the error message

Description Hi. I found the way to raise 500 Internal Server Error with some sensitive information disclosure some local paths of the python installation. The issue is not critical, however, you can prevent this information leak. Request: POST /v1 HTTP/1.1 Host: gip.rocks Cache-Control: max-age=0...

The remote server returned an error: (500) Internal Server Error

If you see "The remote server returned an error: 500 Internal Server Error" in any of the Unidesk failure messages, it means there is a problem with an ESX host. Keep in mind that vSphere will route filesystem requests to any available ESX host that has the requested VMFS mounted, including ones...

CVE-2017-3318: Undefined Security Weakness

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Error Handling. Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2017-00989)

Oracle MySQL Server is an open source relational database management system from Oracle. This database system is characterized by high performance, low cost, good reliability and so on. A local vulnerability exists in Oracle MySQL Server. An attacker can exploit the vulnerability to compromise th...

Starbucks: Starbucks.com is reachable via ip address thus possible to link any doamin to Starbucks.

It is possible for anybody to buy a domain name containing negative terms and point it to someone's website in order to damage their reputation. For instance someone could buy the domain child-pornography.com and point it to the address 107.162.135.91 which is the address behind starbucks.com To...

License Server Error: No Licenses Available for Specified Server Type

When the XenServer is attempted to be licensed you may come across error "The license-server did not issue a license for server "servername" because there were no license for the specified type available"...

Could not sign CSR Caused by: java.io.IOException: Cannot obtain certificate from certsrv authority: 401 Unauthorized

After configuring Client Certificate Authentication for XMS but you cannot request a certificate from the Issuing Server java.lang.RuntimeException: Could not create mobileconfig PA Credentials at com.sparus.nps.iphone.mobileconfig.MobileConfig.toPListMobileConfig.java:574 at...

Veris: Internal server error 500 at log.veris.in

INTRO: i have discovered an internal server error 500 at log.veris.in in sentry app & possible DoS injection with data garbage EXPLOITABILITY: Steps: 1After Sending this request Sentry is crash with an internal server error showing version of sentry and the capability of sending the issue with a...

Harvest: Users enumeration is possible through cycling through recurring[client_id] argument value.

Details: An attacker can enumerate the names of companies on your site by going to the URL https://harvesterxxx.harvestapp.com/recurringinvoices/new?utf8=%E2%9C%93&recurringclientid=4677449&newclientname= and cycling through the numerical value of the recurringclientid= argument, which will view...