Leakage Of Data Via Error Message

ranger-hive-plugin is vulnerable to leakage of data. When the authorization to Hive fails, the error message for denial of access to the table reveals all the columns in the table. The table should not be revealed to the unauthorized user...

Error: "The Gateway has EPA enabled, which is not supported on iOS devices" on iOS Receiver

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. The following error is displayed when logging on to iOS Receiver: The Gateway has EPA enabled, which...

CVE-2016-6094

IBM Tivoli Key Lifecycle Manager 2.0.1, 2.5, and 2.6 generates an error message that includes sensitive information about its environment, users, or associated data...

Information disclosure

IBM Tivoli Key Lifecycle Manager 2.0.1, 2.5, and 2.6 generates an error message that includes sensitive information about its environment, users, or associated data...

CVE-2016-6094

IBM Tivoli Key Lifecycle Manager (TKLM) and IBM Security Key Lifecycle Manager are affected by CVE-2016-6094 due to an error message that discloses environment, user, or data-related details. Connected IBM Security bulletin specifies affected versions: TKLM 2.0.1 to 2.0.1.8, SKLM 2.5 to 2.5.0.7, ...

WordPress: Wordpress 4.7.2 - Two XSS in Media Upload when file too large.

Description ------------------- An attacker can inject a malicious script in to the filename which a victim tries to upload leading to XSS inside the administrators control panel. Two different "file to large" cases end up in interpolating the file name and appending it into DOM unsanitized leadi...

Input validation

IBM Security Privileged Identity Manager Virtual Appliance could disclose sensitive information in generated error messages that would be available to an authenticated user...

CVE-2016-3021

IBM Security Access Manager for Web could allow an authenticated attacker to obtain sensitive information from error message using a specially crafted HTTP request...

The management console is unavailable because the root certificate is missing

Error: The management console is unavailable because a root certificate is missing. Go to Verisign and download the certificate “VerSign Class 3 Primary CA – G5”...

The vulnerability of the embedded software of the programmable logic controller OVEEN PLK110 allows a intruder to overwrite data stored in the stack or execute arbitrary code.

The vulnerability of the embedded software of the OVEEN PLC110 programmable logic controller lies in the lack of checks for the length of the file name during the generation of the error message when processing a read or write request for the file. This leads to buffer overflows in the stack...

xsscrapy - XSS/SQLi Spider

Fast, thorough, XSS/SQLi spider. Give it a URL and it'll test every link it finds for cross-site scripting and some SQL injection vulnerabilities. See FAQ for more details about SQLi detection. From within the main folder run: ./xsscrapy.py -u http://example.com If you wish to login then crawl:...

Error "Cannot Connect to Server" when configuring receiver externally

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. While configuring the receiver; We may get the error message still beacons are perfect to connect...

CVE-2016-9855

An issue was discovered in phpMyAdmin. By calling some scripts that are part of phpMyAdmin in an unexpected way, it is possible to trigger phpMyAdmin to display a PHP error message which contains the full path of the directory where phpMyAdmin is installed. During an execution timeout in the expo...

CVE-2016-9852

An issue was discovered in phpMyAdmin. By calling some scripts that are part of phpMyAdmin in an unexpected way, it is possible to trigger phpMyAdmin to display a PHP error message which contains the full path of the directory where phpMyAdmin is installed. During an execution timeout in the expo...

CVE-2016-9852

An issue was discovered in phpMyAdmin. By calling some scripts that are part of phpMyAdmin in an unexpected way, it is possible to trigger phpMyAdmin to display a PHP error message which contains the full path of the directory where phpMyAdmin is installed. During an execution timeout in the expo...

CVE-2016-9855

An issue was discovered in phpMyAdmin. By calling some scripts that are part of phpMyAdmin in an unexpected way, it is possible to trigger phpMyAdmin to display a PHP error message which contains the full path of the directory where phpMyAdmin is installed. During an execution timeout in the expo...

CVE-2016-9854

An issue was discovered in phpMyAdmin. By calling some scripts that are part of phpMyAdmin in an unexpected way, it is possible to trigger phpMyAdmin to display a PHP error message which contains the full path of the directory where phpMyAdmin is installed. During an execution timeout in the expo...

CVE-2016-9854

An issue was discovered in phpMyAdmin. By calling some scripts that are part of phpMyAdmin in an unexpected way, it is possible to trigger phpMyAdmin to display a PHP error message which contains the full path of the directory where phpMyAdmin is installed. During an execution timeout in the expo...

Unable to Add/Upload an SSL Certificate/Key Pair to the CloudBridge: “Execution Error”

When configuring an SSL Profile the ssl certificate/key pair must be previously uploaded. The following error message is displayed when trying to upload the Certificate file extension .cer: Please correct any problems and resubmit your request Execution error...

CVE-2016-9839

CVE-2016-9839 affects MapServer versions prior to 7.0.3, where OGR driver error messages may leak sensitive information when data connections fail. The vulnerability arises from overly verbose error output. In published advisories, Fedora/OpenVAS entries describe a security fix and map the issue ...