Lucene search
+L

353 matches found

Microsoft CVE
Microsoft CVE
•added 2025/09/03 9:29 p.m.•10 views

The frame iterator could get stuck in a loop when encountering certain wasm frames leading to incorrect stack traces. This vulnerability affects Firefox < 128 and Thunderbird < 128.

...

4.3CVSS9.2AI score0.0037EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2025/09/02 12:00 a.m.•7 views

Linux Distros Unpatched Vulnerability : CVE-2025-32044

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw has been identified in Moodle where, on certain sites, unauthenticated users could retrieve sensitive user dataincluding names, contact information, and...

7.5CVSS7AI score0.00514EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2025/08/18 12:00 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2019-17632

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Eclipse Jetty versions 9.4.21.v20190926, 9.4.22.v20191022, and 9.4.23.v20191118, the generation of default unhandled Error response content in text/html and...

6.1CVSS6.9AI score0.01905EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/08/12 12:00 a.m.•6 views

Linux Distros Unpatched Vulnerability : CVE-2024-6613

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The frame iterator could get stuck in a loop when encountering certain wasm frames leading to incorrect stack traces. This vulnerability affects Firefox 128 and...

5.5CVSS6.8AI score0.00186EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/08/07 12:00 a.m.•7 views

Linux Distros Unpatched Vulnerability : CVE-2024-6614

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The frame iterator could get stuck in a loop when encountering certain wasm frames leading to incorrect stack traces. This vulnerability affects Firefox 128 and...

4.3CVSS6.3AI score0.0037EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/05/23 8:01 a.m.•11 views

CVE-2024-6614

The frame iterator could get stuck in a loop when encountering certain wasm frames leading to incorrect stack traces. This vulnerability affects Firefox 128 and Thunderbird 128...

4.3CVSS3.6AI score0.0037EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 4:41 a.m.•15 views

CVE-2023-39264

By default, stack traces for errors were enabled, which resulted in the exposure of internal traces on REST API endpoints to users. This vulnerability exists in Apache Superset versions up to and including 2.1.0...

4.3CVSS6.8AI score0.01128EPSS
SaveExploits0
SUSE CVE
SUSE CVE
•added 2025/05/03 2:50 a.m.•14 views

SUSE CVE-2023-53093

In the Linux kernel, the following vulnerability has been resolved: tracing: Do not let histogram values have some modifiers Histogram values can not be strings, stacktraces, graphs, symbols, syscalls, or grouped in buckets or log. Give an error if a value is set to do so. Note, the histogram cod...

5.5CVSS6.3AI score0.00199EPSS
SaveExploits0References9
Snyk
Snyk
•added 2025/04/25 3:31 p.m.•7 views

Information Exposure

Overview moodle/moodle is a learning platform. Affected versions of this package are vulnerable to Information Exposure due to improper handling of error messages in the REST API. An attacker can access sensitive user data by exploiting stack traces returned from specific API calls. Note: This is...

8.7CVSS6.7AI score0.00514EPSS
SaveExploits1References2
osv-ubuntu
osv-ubuntu
•added 2025/04/25 3:15 p.m.•16 views

UBUNTU-CVE-2025-32044

A flaw has been identified in Moodle where, on certain sites, unauthenticated users could retrieve sensitive user data—including names, contact information, and hashed passwords—via stack traces returned by specific API calls. Sites with PHP configured with zend.exceptionignoreargs = 1 in the...

7.5CVSS5.7AI score0.00514EPSS
SaveExploits1References4
Mend
Mend
•added 2025/04/25 2:43 p.m.•9 views

CVE-2025-32044

A flaw has been identified in Moodle where, on certain sites, unauthenticated users could retrieve sensitive user data—including names, contact information, and hashed passwords—via stack traces returned by specific API calls. Sites with PHP configured with zend.exceptionignoreargs = 1 in the...

8.7CVSS0.00514EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/25 12:00 a.m.•4 views

CVE-2025-32044: Exposure of Sensitive Information to an Unauthorized Actor

A flaw has been identified in Moodle where, on certain sites, unauthenticated users could retrieve sensitive user data—including names, contact information, and hashed passwords—via stack traces returned by specific API calls. Sites with PHP configured with zend.exceptionignoreargs = 1 in the...

7.5CVSS7AI score0.00514EPSS
SaveExploits1References1
OSV
OSV
•added 2025/04/03 10:15 p.m.•15 views

CVE-2025-0279

HCL Traveler generates some error messages that provide detailed information about errors and failures, such as internal paths, file names, sensitive tokens, credentials, error codes, or stack traces. Attackers could exploit this information to gain insights into the system's architecture and...

4.3CVSS5.8AI score0.003EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/04/03 12:00 a.m.•21 views

PT-2025-14808 · Hcl · Hcl Traveler

Name of the Vulnerable Software and Affected Versions: HCL Traveler affected versions not specified Description: The issue concerns error messages generated by HCL Traveler that may contain sensitive information, including internal paths, file names, tokens, credentials, error codes, or stack...

4.3CVSS6.3AI score0.003EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/03 12:00 a.m.•11 views

CVE-2025-0279: Generation of Error Message Containing Sensitive Information

HCL Traveler generates some error messages that provide detailed information about errors and failures, such as internal paths, file names, sensitive tokens, credentials, error codes, or stack traces. Attackers could exploit this information to gain insights into the system's architecture and...

4.3CVSS5.8AI score0.003EPSS
SaveExploits0References1
NVD
NVD
•added 2025/03/11 1:15 a.m.•23 views

CVE-2025-23185

Due to improper error handling in SAP Business Objects Business Intelligence Platform, technical details of the application are revealed in exceptions thrown to the user and in stack traces. Only an attacker with administrator level privileges has access to this disclosed information, and they...

4.1CVSS0.00291EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/03/11 12:31 a.m.•39 views

CVE-2025-23185 Information Disclosure in SAP Business Objects Business Intelligence Platform

Due to improper error handling in SAP Business Objects Business Intelligence Platform, technical details of the application are revealed in exceptions thrown to the user and in stack traces. Only an attacker with administrator level privileges has access to this disclosed information, and they...

4.1CVSS0.00291EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/11 12:00 a.m.•6 views

CVE-2025-23185: Generation of Error Message Containing Sensitive Information

Due to improper error handling in SAP Business Objects Business Intelligence Platform, technical details of the application are revealed in exceptions thrown to the user and in stack traces. Only an attacker with administrator level privileges has access to this disclosed information, and they...

4.1CVSS5.5AI score0.00291EPSS
SaveExploits0References1
osv-bit
osv-bit
•added 2025/02/05 7:27 a.m.•18 views

BIT-SUPERSET-2023-39264 Apache Superset: Stack traces enabled by default

By default, stack traces for errors were enabled, which resulted in the exposure of internal traces on REST API endpoints to users. This vulnerability exists in Apache Superset versions up to and including 2.1.0...

4.3CVSS4.5AI score0.01128EPSS
SaveExploits0References2
OSV
OSV
•added 2025/01/11 2:15 p.m.•5 views

DEBIAN-CVE-2024-57838

In the Linux kernel, the following vulnerability has been resolved: s390/entry: Mark IRQ entries to fix stack depot warnings The stack depot filters out everything outside of the top interrupt context as an uninteresting or irrelevant part of the stack traces. This helps with stack trace...

7.1CVSS5.8AI score0.00216EPSS
SaveExploits0References1
Rows per page
Query Builder