Lucene search
K

7 matches found

Veracode
Veracode
added 2026/05/04 10:52 a.m.6 views

Information Exposure

org.springframework.grpc, spring-grpc-core is vulnerable to information exposure through error messages. The vulnerability is due to returning raw server-side AuthenticationException messages in the gRPC status description, which allows an attacker to gather authentication failure details and...

5.3CVSS5.8AI score0.00061EPSS
Exploits0References3Affected Software2
OSV
OSV
added 2026/04/28 3:30 p.m.2 views

GHSA-37W2-Q6VH-45V6 Spring gRPC AuthenticationException messages are reflected to remote client

The raw message of every server-side AuthenticationException is returned to the unauthenticated remote caller in the gRPC status description. This allows an attacker to obtain information about the authentication failure, which may be useful for further attacks. Affected versions: Spring gRPC:...

3.7CVSS5.8AI score0.00061EPSS
Exploits0References3
NVD
NVD
added 2026/04/28 3:16 p.m.2 views

CVE-2026-40969

The raw message of every server-side AuthenticationException is returned to the unauthenticated remote caller in the gRPC status description. This allows an attacker to obtain information about the authentication failure, which may be useful for further attacks. Affected versions: Spring gRPC:...

5.3CVSS0.00061EPSS
Exploits0References1
CVE
CVE
added 2026/04/28 2:54 p.m.5 views

CVE-2026-40969

CVE-2026-40969 affects Spring gRPC 1.0.0–1.0.2, where the server-side AuthenticationException message is echoed in the gRPC status description returned to unauthenticated remote callers. This information disclosure could aid in understanding authentication failures and may assist subsequent attac...

5.3CVSS5.3AI score0.00061EPSS
Exploits0References1Affected Software1
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2019-0773

Malware in sbrugna...

4.3CVSS4.7AI score0.00347EPSS
Exploits0References5
Packet Storm
Packet Storm
added 2018/08/16 12:0 a.m.64 views

OpenSSH 7.x Username Enumeration

!/usr/bin/env python Copyright c 2018 Matthew Daley Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files the "Software", to deal in the Software without restriction, including without limitation the rights to use, copy,...

7.4AI score
Exploits0
OSV
OSV
added 2016/01/13 12:31 p.m.6 views

SUSE-SU-2016:0101-1 Security update for openstack-glance

This update for openstack-glance provides the following fixes: - Catch NotAuthenticated exception in import task. bsc947735, CVE-2015-5286 - Cleanup chunks for deleted image if token expired. bsc947735, CVE-2015-5286 - Prevent image status being directly modified via v1. bsc945994, CVE-2015-5251 ...

6.8CVSS6.2AI score0.00328EPSS
Exploits0References6
Rows per page
Query Builder