49 matches found
Linux Distros Unpatched Vulnerability : CVE-2016-9853
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in phpMyAdmin. By calling some scripts that are part of phpMyAdmin in an unexpected way, it is possible to trigger phpMyAdmin to display...
CVE-2025-9005
The vulnerability CVE-2025-9005 affects mtons mblog up to version 3.5.0, where an unknown function in the /register endpoint can trigger information exposure via an error message. It can be exploited remotely; attack complexity is high and exploitation is not trivial. Public disclosure exists, wi...
Moodle 4.2.x < 4.2.11 Multiple Vulnerabilities
According to its self-reported version, the Moodle install hosted on the remote host is 4.1.x prior to 4.1.14, 4.2.x prior to 4.2.11, 4.3.x prior to 4.3.8, or 4.4.x prior to 4.4.4. It is, therefore, affected by multiple vulnerabilities. - An IDOR when fetching report schedules. - Some users can...
PT-2025-2724 · Ibm · Ibm Security Verify Access Container +1
Name of the Vulnerable Software and Affected Versions: IBM Security Verify Access Appliance and Container versions 10.0.0 through 10.0.8 Description: The issue allows a remote attacker to obtain sensitive information when a detailed technical error message is returned. This information could be...
Virames Vira-Investing 安全漏洞
Virames Vira-Investing is an application from Virames, Inc. A security vulnerability exists in Virames Vira-Investing prior to version 1.0.84.86 that stems from Vira-Investing's improper protection of outbound error messages and alert signals...
IBM Security Verify Information Queue 信息泄露漏洞
IBM Security Verify Information Queue is an integration product from IBM of America, Inc. Leverages Kafka technology and a publish/subscribe model to integrate data between IBM Security products. IBM Security Verify Information Queue version 10.0.2 is vulnerable to an information disclosure...
CVE-2022-26070
When handling a mismatched pre-authentication cookie, the application leaks the internal error message in the response, which contains the Splunk Enterprise local system path. The vulnerability impacts Splunk Enterprise versions before 8.1.0...
PT-2021-14494 · Npm · Node-Etsy-Client
Name of the Vulnerable Software and Affected Versions: node-etsy-client versions prior to 0.3.0 Description: The issue affects applications using node-etsy-client, where client error reports to end users may inadvertently expose API key values. Recommendations: For versions prior to 0.3.0, update...
ecshop advertising call page message header is written into the storms path-vulnerability warning-the black bar safety net
/affiche.php,php5 environmental error exposure program path, php4 environment to display the written information the charset parameter is not to do rigorous filtration result in an http message header truncated written...