353 matches found
PT-2018-12792
Name of the Vulnerable Software and Affected Versions 3CX version 15.5.8801.3 Description The issue concerns improper error handling in stack traces, which can lead to information leakage. This is demonstrated by the possibility of discovering a full pathname. Recommendations For version...
PT-2018-12791
Name of the Vulnerable Software and Affected Versions 3CX version 15.5.8801.3 Description The issue concerns a Reflected XSS vulnerability. It affects the Web server's propertyPath parameters in all stack traces. Recommendations For version 15.5.8801.3, avoid using the propertyPath parameters in...
CVE-2018-14906: Improper Neutralization of Input During Web Page Generation
The Web server in 3CX version 15.5.8801.3 is vulnerable to Reflected XSS on all stack traces' propertyPath parameters...
CVE-2018-14907: Generation of Error Message Containing Sensitive Information
The Web server in 3CX version 15.5.8801.3 is vulnerable to Information Leakage, because of improper error handling in Stack traces, as demonstrated by discovering a full pathname...
IBM Jazz Foundation Information Disclosure Vulnerability (CNVD-2018-23241)
IBM Rational Collaborative Lifecycle Management CLM is a set of collaborative lifecycle management solutions.Rational Quality Manager RQM is a set of collaborative, web-based quality management solutions. IBM Rational Collaborative Lifecycle Management CLM is a collaborative lifecycle management...
Information disclosure
IBM Jazz Foundation products could allow an authenticated user to obtain sensitive information from stack traces. IBM X-Force ID: 131852...
CVE-2017-1570
IBM Jazz Foundation products could allow an authenticated user to obtain sensitive information from stack traces. IBM X-Force ID: 131852...
CVE-2017-1570
CVE-2017-1570 affects IBM Jazz Foundation/Jazz-based CLM products, allowing an authenticated user to obtain sensitive information from stack traces. The IBM Security Bulletin documents the impact across Rational CLM/RQM/RTC/RRC families (and related Jazz Team Server components) with a base CVSS v...
CVE-2017-1570
IBM Jazz Foundation products could allow an authenticated user to obtain sensitive information from stack traces. IBM X-Force ID: 131852...
CVE-2017-1570: Exposure of Sensitive Information to an Unauthorized Actor
IBM Jazz Foundation products could allow an authenticated user to obtain sensitive information from stack traces. IBM X-Force ID: 131852...
PT-2017-14148
Name of the Vulnerable Software and Affected Versions IBM Jazz Foundation products affected versions not specified Description The issue allows an authenticated user to obtain sensitive information from stack traces. Recommendations At the moment, there is no information about a newer version tha...
Unspecified Information Disclosure Vulnerability in Multiple IBM Product Jazz Foundation based Applications
IBM Rational Collaborative Lifecycle Management is a set of collaborative lifecycle management solutions.Rational Quality Manager is a set of collaborative, Web-based quality management solutions. IBM Rational Collaborative Lifecycle Management is a collaborative lifecycle management solution,...
CVE-2017-1241
An unspecified vulnerability in IBM Jazz Foundation based applications might allow the display of stack trace information to an attacker. IBM X-Force ID: 124523...
Apache Atlas Information Disclosure Vulnerability (CNVD-2017-27445)
Apache Atlas is a set of scalable and extensible core functional governance services from the Apache USA Software Foundation. An information disclosure vulnerability exists in Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating that stems from an error response containing a stack trace. A...
PYSEC-2017-110
Error responses from Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating included stack trace, exposing excessive information...
PYSEC-2017-110
Error responses from Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating included stack trace, exposing excessive information...
CVE-2017-3154
Error responses from Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating included stack trace, exposing excessive information...
PT-2017-15690
Name of the Vulnerable Software and Affected Versions Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating Description The issue concerns error responses that include stack traces, potentially exposing excessive information. Recommendations For Apache Atlas versions 0.6.0-incubating and...