4703 matches found
CVE-2023-47728 IBM QRadar Suite Software information disclosure
IBM QRadar Suite Software 1.10.12.0 through 1.10.22.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the request. This information could be used in further attacks again...
CVE-2023-47728 IBM QRadar Suite Software information disclosure
IBM QRadar Suite Software 1.10.12.0 through 1.10.22.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the request. This information could be used in further attacks again...
CVE-2023-47728: Generation of Error Message Containing Sensitive Information
IBM QRadar Suite Software 1.10.12.0 through 1.10.22.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the request. This information could be used in further attacks again...
Exploit for Observable Discrepancy in 42Gears Suremdm
CVE-2023-3897 Username enumeration is possible through Bypassi...
CVE-2024-42252
In the Linux kernel, the following vulnerability has been resolved: closures: Change BUGON to WARNON If a BUGON can be hit in the wild, it shouldn't be a BUGON For reference, this has popped up once in the CI, and we'll need more info to debug it: 03240 ------------ cut here ------------ 03240...
CVE-2024-6892: Improper Neutralization of Script in an Error Message Web Page
Attackers can craft a malicious link that once clicked will execute arbitrary JavaScript in the context of the Journyx web application...
CVE-2024-39751
IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 297429...
CVE-2024-39751 IBM InfoSphere Information Server information disclosure
IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 297429...
CVE-2024-39751: Generation of Error Message Containing Sensitive Information
IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 297429...
Update Rollup 2 for Windows Small Business Server 2011 Standard is available
Update Rollup 2 for Windows Small Business Server 2011 Standard is available Applies To Windows Small Business Server 2011 Standard Summary Update Rollup 2 for Windows Small Business Server 2011 Standard is now available. This update rollup contains all the updates that were included in the...
MS10-092: Vulnerability in Task Scheduler could allow for elevation of privilege
MS10-092: Vulnerability in Task Scheduler could allow for elevation of privilege Applies To Windows 7 Enterprise Windows 7 Home Basic Windows 7 Home Premium Windows 7 Professional Windows 7 Ultimate Windows Server 2008 R2 for Itanium-Based Systems Windows Server 2008 R2 Standard Windows Server 20...
MS11-017: Description of the security update for Remote Desktop client 6.1 and Remote Desktop client 6.0: March 8, 2011
MS11-017: Description of the security update for Remote Desktop client 6.1 and Remote Desktop client 6.0: March 8, 2011 Applies To Windows Server 2008 Service Pack 2 Windows Server 2008 Datacenter Windows Server 2008 Enterprise Windows Server 2008 Standard Windows Server 2008 Web Edition Windows...
MS05-012: Vulnerability in OLE and COM could allow remote code execution
MS05-012: Vulnerability in OLE and COM could allow remote code execution Applies To Windows Microsoft has released security bulletin MS05-012. The security bulletin contains all the relevant information about the security update, including file manifest information and deployment options. To view...
MS04-022: A vulnerability in Task Scheduler could allow code execution
MS04-022: A vulnerability in Task Scheduler could allow code execution Applies To Windows Microsoft has released security bulletin MS04-022. The security bulletin contains all the relevant information about the security update, including file manifest information and deployment options. To view t...
MS07-017: Vulnerability in GDI could allow remote code execution
MS07-017: Vulnerability in GDI could allow remote code execution Applies To Microsoft Windows Server 2003 Service Pack 1 Microsoft Windows Server 2003 Service Pack 2 Microsoft Windows XP Media Center Edition 2005 Microsoft Windows XP Professional x64 Edition Windows Vista Ultimate Windows Vista...
OneDrive Pastejacking
OneDrive Pastejacking: The crafty phishing and downloader campaign By Rafael Pena · July 29, 2024 Over the past few weeks, the Trellix Advanced Research Center has observed a sophisticated Phishing/downloader campaign targeting Microsoft OneDrive users. This campaign heavily relies on social...
CVE-2024-6520: Improper Neutralization of Input During Web Page Generation
The Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via custom error message in all versions up to, and including, 5.1.19 due to insufficient input sanitization and output escaping. This makes ...
IBM Datacap Navigator Information Disclosure Vulnerability (CNVD-2024-33366)
IBM Datacap Navigator is a Web client for Datacap from International Business Machines IBM. An information disclosure vulnerability exists in IBM Datacap Navigator, which can be exploited by an attacker to obtain sensitive information when a detailed technical error message is returned in a brows...
IBM InfoSphere Information Server Information Disclosure
The vulnerability of the IBM InfoSphere Information Server software platform is related to the leakage of information in error messages. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...