The vulnerability of the XWiki platform, which involves exposing information in the wrong data area, allows a hacker to obtain the email addresses of all users.

The vulnerability of the XWiki Platform lies in the exposure of information in the error data area. Exploiting this vulnerability could allow a malicious actor to obtain the email addresses of all users...

PT-2023-8490 · Xwiki · Xwiki Platform

Name of the Vulnerable Software and Affected Versions: XWiki Platform versions 3.5-milestone-1 through 14.10.8 XWiki Platform versions 15.3-rc-1 and earlier Description: The issue is related to the disclosure of information in the error data area of the XWiki Platform, specifically in the...

PT-2023-2839 · 3S Smart Software Solutions · Codesys

Name of the Vulnerable Software and Affected Versions: Codesys versions affected versions not specified Description: The issue is related to the disclosure of information in an error data area, potentially allowing a remote attacker to impact data integrity. Recommendations: At the moment, there ...

A vulnerability in the web interface for operating systems ArubaOS, allowing a hacker to read arbitrary files

The vulnerability in the web interface for operating systems ArubaOS relates to the disclosure of information in the error data area. Exploiting this vulnerability allows a remote attacker to read arbitrary files...

The vulnerability of the Jenkins HTTP Request Plugin, related to the disclosure of information in the error data field, allows attackers to disclose the protected information.

The vulnerability of the Jenkins HTTP Request Plugin is related to the disclosure of information in the error data field. Exploiting this vulnerability allows a malicious actor to disclose the protected information remotely...

The vulnerability of extensions for providing access to InTouch Access Anywhere and Plant SCADA Access Anywhere, related to the disclosure of information in the error data area, allows a intruder to execute arbitrary OS commands.

The vulnerability of extensions for providing access to InTouch Access Anywhere and Plant SCADA Access Anywhere relates to the disclosure of information in the error area of data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary OS commands remotely...

The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to the disclosure of information in the error-prone data area, allows a perpetrator to gain access to confidential data.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to confusion between tag names and branches. Exploiting this vulnerability allows a malicious actor to gain access to confidential data...

The vulnerability of the IsNextToken function in the src/base/PdfToenizer.cpp component of the PDF processing software PoDoFo allows a malicious actor to access confidential data.

The vulnerability of the IsNextToken function in the src/base/PdfToenizer.cpp component of the PDF processing software library is related to the disclosure of information in the error-prone data area. Exploiting this vulnerability allows an attacker to gain access to confidential data remotely...

The vulnerability of the Microsoft Message Queuing (MSMQ) service on the Microsoft Windows operating system allows unauthorized access to protected information.

The vulnerability of the Microsoft Message Queuing MSMQ service on the Microsoft Windows operating system is related to the disclosure of information in the error data field. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerability of the NFS ONCRPC XDR driver for Windows operating systems allows attackers to disclose sensitive information.

The vulnerability of the NFS ONCRPC XDR driver for Windows operating systems is related to the disclosure of information in the erroneous data area. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose the protected information...

PT-2022-6487 · Git +2 · Git +2

Name of the Vulnerable Software and Affected Versions: Git versions through 2.35.1 Description: The issue is related to the disclosure of information in the error data area of the distributed version control system Git. This could present a security risk if information-disclosure auditing process...

PT-2022-1720 · Microsoft · Power Bi

Name of the Vulnerable Software and Affected Versions: Microsoft Power BI affected versions not specified Description: The issue is related to an information disclosure vulnerability in the Power BI client JS SDK, associated with the error data area. Exploitation of this issue may allow a remote...

PT-2022-1985 · Microsoft · Windows Remote Desktop Protocol Client +1

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Remote Desktop Protocol Client affected versions not specified Description: The vulnerability is related to the Remote Desktop Protocol Client in Microsoft Windows and involves the disclosure of information in an error data...

The vulnerability of the dictsort template pattern in the Django web framework allows a attacker to access confidential information.

The vulnerability of the dictsort template pattern in the Django web framework relates to the disclosure of information in the error data field. Exploiting this vulnerability can allow an attacker, operating remotely, to obtain confidential system information...

The vulnerability of the JDBC driver of the Kylin data processing platform allows a hacker to execute arbitrary code.

The vulnerability of the JDBC driver of the Kylin data processing platform is related to the disclosure of information in the error data area. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PT-2021-6313 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a driver vulnerability in the Storage Spaces Controller component of Windows operating systems, which involves the disclosure of information in an error data area...

PT-2021-6326 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a driver vulnerability in the Storage Spaces Controller component of Windows operating systems, which involves the disclosure of information in an error data area...

PT-2021-6190 · Microsoft · Windows +1

Name of the Vulnerable Software and Affected Versions: Microsoft Message Queuing MSMQ affected versions not specified Description: The issue is related to an information disclosure in the error data area of Microsoft Message Queuing MSMQ in the Microsoft Windows operating system. It may allow a...

The vulnerability of the SSH protocol implementation in the SolarWinds Serv-U File Server file server for Windows operating systems allows a perpetrator to execute arbitrary code or escalate their privileges.

The vulnerability of the SSH protocol implementation in the SolarWinds Serv-U File Server file server for Windows operating systems is related to the disclosure of information in the error data field. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or increase the...

PT-2021-6507 · Saltstack +2 · Saltstack Salt +2

Name of the Vulnerable Software and Affected Versions: SaltStack Salt versions prior to 3003.3 Description: The issue is related to information disclosure in the error data area of the Salt configuration management and remote execution system. Exploitation of this issue allows a remote attacker t...