Lucene search
+L

8230 matches found

CVE
CVE
added 2023/12/15 10:14 a.m.95 views

CVE-2023-6839

CVE-2023-6839 affects WSO2 API Manager. The issue stems from improper error handling in a REST API resource, which can cause server-side errors to disclose an internal WSO2-specific package name in the HTTP response. Documented impacts indicate confidentiality exposure (information disclosed via ...

5.3CVSS5.2AI score0.00525EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/12/15 10:14 a.m.16 views

CVE-2023-6839

Due to improper error handling, a REST API resource could expose a server side error containing an internal WSO2 specific package name in the HTTP response...

5.3CVSS7AI score0.00525EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/12/15 12:00 a.m.10 views

PT-2023-32787 · Wso2 · Wso2

Name of the Vulnerable Software and Affected Versions: WSO2 affected versions not specified Description: The issue is related to improper error handling in a REST API resource, which could expose a server-side error containing an internal WSO2 specific package name in the HTTP response...

5.3CVSS5AI score0.00525EPSS
SaveExploits0References5
Veracode
Veracode
added 2023/12/13 6:48 p.m.31 views

Denial Of Service (DoS)

nuxt-api-party is vulnerable to Denial of Service DoS. The vulnerability could be exploited via crafting a malicious URL and setting high retry attempts, which allows an attacker to trigger a recursive error handling loop, crashing the server and potentially disrupting service for legitimate user...

7.5CVSS6.7AI score0.00804EPSS
SaveExploits1References3Affected Software1
NVD
NVD
added 2023/12/13 7:15 a.m.49 views

CVE-2023-46671

An issue was discovered by Elastic whereby sensitive information may be recorded in Kibana logs in the event of an error. Elastic has released Kibana 8.11.1 which resolves this issue. The error message recorded in the log may contain account credentials for the kibanasystem user, API Keys, and...

8CVSS0.00656EPSS
SaveExploits0References1
OSV
OSV
added 2023/12/13 7:02 a.m.13 views

CVE-2023-46675 Kibana Insertion of Sensitive Information into Log File

An issue was discovered by Elastic whereby sensitive information may be recorded in Kibana logs in the event of an error or in the event where debug level logging is enabled in Kibana. Elastic has released Kibana 8.11.2 which resolves this issue. The messages recorded in the log may contain Accou...

8CVSS6.6AI score
SaveExploits0References3
Citrix
Citrix
added 2023/12/13 12:00 a.m.16 views

Error: Provisioning Scheme already has another task running in PowerShell

NOTE : This article contains information about removing virtual machines in bulk directly from PowerShell Removing multiple virtual machines at a time can be done using Remove-ProvVM but if not done with the correct syntax, it will generate errors indicating that the provisioning scheme already h...

6.7AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2023/12/12 12:00 a.m.10 views

The vulnerability in the proxy.php script of the Collabora Online built-in document editing server allows attackers to perform cross-site scripting attacks.

The vulnerability of the proxy.php script in the built-in document editing server Collabora Online – CODE Server richdocumentcode is related to the lack of measures taken to protect the web page structure during error messages processing. Exploiting this vulnerability allows a malicious actor to...

7.5CVSS6AI score0.0041EPSS
SaveExploits0References5Affected Software1
OpenVAS
OpenVAS
added 2023/12/12 12:00 a.m.28 views

Huawei EulerOS: Security Advisory for grpc (EulerOS-SA-2023-3332)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.7AI score0.00666EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2023/12/11 12:00 a.m.14 views

The vulnerability of 5G MediaTek wireless communication modules, related to improper error handling, allows attackers to trigger service interruptions.

The vulnerability of 5G wireless communication modules from MediaTek is related to improper error handling. Exploiting this vulnerability can allow attackers to cause service failures when receiving improperly formatted RRC messages...

7.8CVSS7.2AI score0.01369EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2023/12/11 12:00 a.m.10 views

The vulnerability of 5G MediaTek wireless communication modules, related to improper error handling, allows attackers to trigger service interruptions.

The vulnerability of 5G wireless communication modules from MediaTek is related to improper error handling. Exploiting this vulnerability can allow attackers to cause service failures when receiving improperly formatted RRC messages...

7.8CVSS7.2AI score0.01355EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2023/12/11 12:00 a.m.10 views

The vulnerability of 5G MediaTek wireless communication modules, related to improper error handling, allows attackers to trigger service interruptions.

The vulnerability of 5G wireless communication modules from MediaTek is related to improper error handling. Exploiting this vulnerability can allow attackers to cause service failures when receiving improperly formatted RRC messages...

7.8CVSS7.2AI score0.01369EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2023/12/11 12:00 a.m.11 views

The vulnerability of 5G MediaTek wireless communication modules, related to improper error handling, allows attackers to trigger service interruptions.

The vulnerability of 5G wireless communication modules from MediaTek is related to improper error handling. Exploiting this vulnerability can allow attackers to cause service failures when receiving improperly formatted RRC messages...

7.8CVSS7.2AI score0.01355EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2023/12/11 12:00 a.m.14 views

The vulnerability of 5G MediaTek wireless communication modules, related to improper error handling, allows attackers to trigger service interruptions.

The vulnerability of 5G wireless communication modules from MediaTek is related to improper error handling. Exploiting this vulnerability can allow attackers to cause service failures when receiving improperly formatted RRC messages...

7.8CVSS7.2AI score0.01355EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2023/12/11 12:00 a.m.11 views

The vulnerability of 5G MediaTek wireless communication modules, related to improper error handling, allows attackers to trigger service interruptions.

The vulnerability of 5G wireless communication modules from MediaTek is related to improper error handling. Exploiting this vulnerability can allow attackers to cause service failures when receiving improperly formatted RRC messages...

7.8CVSS7.2AI score0.01369EPSS
SaveExploits0References3
OSV
OSV
added 2023/12/08 12:30 a.m.57 views

GHSA-9R6P-HG4G-5GXP Microweber missing standardized error handling mechanism

Missing Standardized Error Handling Mechanism in GitHub repository microweber/microweber prior to 2.0.0...

3.1CVSS4.2AI score0.0049EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
added 2023/12/08 12:30 a.m.31 views

Microweber missing standardized error handling mechanism

Missing Standardized Error Handling Mechanism in GitHub repository microweber/microweber prior to 2.0.0...

4.3CVSS6.9AI score0.0049EPSS
SaveExploits1References4Affected Software1
NVD
NVD
added 2023/12/08 12:15 a.m.44 views

CVE-2023-6599

Missing Standardized Error Handling Mechanism in GitHub repository microweber/microweber prior to 2.0...

4.3CVSS0.0049EPSS
SaveExploits1References2
CVE
CVE
added 2023/12/08 12:00 a.m.54 views

CVE-2023-6599

CVE-2023-6599 concerns microweber/microweber prior to 2.0, due to a missing standardized error handling mechanism. Connected documents corroborate this as the core issue across multiple feeds (GHSA, Red Hat, NVD, OSV, CVE lists). A separate Veracode entry indicates practical impact: an informatio...

4.3CVSS4.3AI score0.0049EPSS
SaveExploits1References2Affected Software1
OSV
OSV
added 2023/12/08 12:00 a.m.27 views

CVE-2023-6599 Missing Standardized Error Handling Mechanism in microweber/microweber

Missing Standardized Error Handling Mechanism in GitHub repository microweber/microweber prior to 2.0...

3.1CVSS5.9AI score
SaveExploits0References4
Rows per page
Query Builder