Lucene search
+L

4705 matches found

osv_ghsa
osv_ghsa
•added 2022/01/21 11:37 p.m.•52 views

GHSA-4XWW-6H7V-29JG User enumeration in livehelperchat

livehelperchat is vulnerable to Generation of Error Message Containing Sensitive Information. There is an observable discrepancy between errors generated for users that exist and those that do not...

7.3CVSS5.1AI score0.00929EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
•added 2022/01/21 11:37 p.m.•45 views

User enumeration in livehelperchat

livehelperchat is vulnerable to Generation of Error Message Containing Sensitive Information. There is an observable discrepancy between errors generated for users that exist and those that do not...

7.3CVSS1.4AI score0.00929EPSS
SaveExploits1References4Affected Software1
CNVD
CNVD
•added 2022/01/14 12:00 a.m.•43 views

IBM Security Verify Information Disclosure Vulnerability (CNVD-2022-08045)

IBM Security Verify Access is a service from IBM USA that improves user access security. The service enables secure and simple access to platforms such as Web, mobile, IoT, and cloud technologies through the use of risk-based access, single sign-on, integrated access management controls, identity...

4CVSS2.5AI score0.00966EPSS
SaveExploits0Affected Software2
Citrix
Citrix
•added 2022/01/14 12:00 a.m.•23 views

Error: "Invalid File Format" while submitting a CSR on tools.xm.citrix.com

When submitting the CSR the Admin Receives: "Error: Invalid File format" CSR is generated viaIIS according to the documentation: https://docs.citrix.com/en-us/xenmobile/server/authentication/apns.html...

7.1AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2022/01/12 12:00 a.m.•45 views

Juniper Junos OS Vulnerability (JSA11270)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11270 advisory. - A Generation of Error Message Containing Sensitive Information vulnerability in the CLI of Juniper Networks Junos OS allows a locally authenticated attacker with low...

7.8CVSS7.5AI score0.00243EPSS
SaveExploits0References2
Veracode
Veracode
•added 2022/01/11 7:00 a.m.•33 views

Information Disclosure

nocodb is vulnerable to information disclosure.The library does not properly sanitize the error message of the password rest when requesting a password reset for a given email address, allowing an attacker to enumerate the registered users email addresses...

5.3CVSS4.5AI score0.01412EPSS
SaveExploits1References3Affected Software1
Prion
Prion
•added 2022/01/10 2:10 p.m.•34 views

Information disclosure

IBM Security Verify 10.0.0, 10.0.1.0, and 10.0.2.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 209515...

4CVSS4.6AI score0.00966EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
•added 2022/01/10 12:00 a.m.•22 views

Soketi security vulnerabilities

soketi is a C application ported to Node.js. soketi suffers from a denial of service vulnerability that stems from not properly handling incoming error messages, which can be exploited by attackers to cause a denial of service in the application...

7.5CVSS5.6AI score0.01676EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2022/01/07 5:55 p.m.•48 views

CVE-2021-38894

IBM Security Verify 10.0.0, 10.0.1.0, and 10.0.2.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 209515...

2.7CVSS3.4AI score0.00966EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/07 12:00 a.m.•9 views

CVE-2021-38894: Generation of Error Message Containing Sensitive Information

IBM Security Verify 10.0.0, 10.0.1.0, and 10.0.2.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 209515...

4CVSS5.9AI score0.00966EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/01/07 12:00 a.m.•10 views

PT-2022-10796

Name of the Vulnerable Software and Affected Versions IBM Security Verify versions 10.0.0 through 10.0.2.0 Description A remote attacker could obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against...

4CVSS0.00966EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
•added 2022/01/06 10:22 p.m.•38 views

showdoc is vulnerable to Generation of Error Message Containing Sensitive Information

showdoc is vulnerable to Generation of Error Message Containing Sensitive Information...

5.3CVSS1.5AI score0.01001EPSS
SaveExploits1References4Affected Software1
Veracode
Veracode
•added 2022/01/05 9:58 a.m.•26 views

Information Disclosure

livehelperchat is vulnerable to information disclosure. The vulnerability exists in forgotpasswordsent.tpl.php because the error message indicates the password reset email sent which allows an attacker to gain access to sensitive information of an existing account...

5.3CVSS2.6AI score0.00929EPSS
SaveExploits1References3Affected Software1
NVD
NVD
•added 2022/01/04 7:15 a.m.•50 views

CVE-2022-0083

livehelperchat is vulnerable to Generation of Error Message Containing Sensitive Information...

7.3CVSS0.00929EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2022/01/04 6:15 a.m.•62 views

CVE-2022-0083 Generation of Error Message Containing Sensitive Information in livehelperchat/livehelperchat

livehelperchat is vulnerable to Generation of Error Message Containing Sensitive Information...

7.3CVSS5.5AI score0.00929EPSS
SaveExploits1References2
The Hacker News
The Hacker News
•added 2022/01/03 3:43 a.m.•92 views

Microsoft Issues Fix for Exchange Y2K22 Bug That Crippled Email Delivery Service

Microsoft, over the weekend, rolled out a fix to address an issue that caused email messages to get stuck on its Exchange Server platforms due to what it blamed on a date validation error at around the turn of the year. "The problem relates to a date check failure with the change of the new year...

2AI score
SaveExploits0
NVD
NVD
•added 2022/01/03 3:15 a.m.•41 views

CVE-2022-0079

showdoc is vulnerable to Generation of Error Message Containing Sensitive Information...

5.3CVSS0.01001EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2022/01/03 3:00 a.m.•31 views

CVE-2022-0079 Generation of Error Message Containing Sensitive Information in star7th/showdoc

showdoc is vulnerable to Generation of Error Message Containing Sensitive Information...

5.3CVSS5.4AI score0.01001EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2022/01/03 3:00 a.m.•44 views

CVE-2022-0079 Generation of Error Message Containing Sensitive Information in star7th/showdoc

showdoc is vulnerable to Generation of Error Message Containing Sensitive Information...

5.3CVSS5.5AI score0.01001EPSS
SaveExploits1References2
Citrix
Citrix
•added 2021/12/30 12:00 a.m.•42 views

the PVS Target VMs cannot boot due to the following error message: --- Stop Code: SYSTEM THREAD EXCEPTION NOT HANDLED What Failed: CVhdMp.sys

The PVS Target VMs cannot boot due to the following error message: Stop Code: SYSTEM THREAD EXCEPTION NOT HANDLED What Failed: CVhdMp.sys...

7.1AI score
SaveExploits0
Rows per page
Query Builder