Mozilla Firefox backlink vulnerability

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the U.S. A backlink vulnerability exists in Mozila Firefox, which stems from an error message generated when resolving symbolic links such as file:///proc/self/fd/1, where the symbolic link resolves to a buffer containin...

ansible-freeipa bug fix and enhancement update

An update is available for ansible-freeipa. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The ansible-freeipa package provides Ansible roles and playbooks to...

PT-2022-25192 · Opencrx · Opencrx

Name of the Vulnerable Software and Affected Versions: OpenCRX versions prior to 5.2.2 Description: The issue allows an attacker to determine if a username, email, or ID is valid due to the difference in error messages received during a password reset. This is a result of password enumeration...

CVE-2022-38107

Sensitive information could be displayed when a detailed technical error message is posted. This information could disclose environmental details...

CVE-2022-38107

CVE-2022-38107 affects SolarWinds SQL Sentry (v2021.10.18 and earlier per CNNVD). The issue arises from the ability to display sensitive information when a detailed technical error message is posted, potentially disclosing environmental details. Public documents do not confirm exploit code or act...

CVE-2022-38107 Sensitive Data Disclosure Vulnerability

Sensitive information could be displayed when a detailed technical error message is posted. This information could disclose environmental details...

CVE-2022-38107: Generation of Error Message Containing Sensitive Information

Sensitive information could be displayed when a detailed technical error message is posted. This information could disclose environmental details...

Microsoft Windows Local Security Authority Subsystem Service (LSASS) security vulnerability

Microsoft Windows Local Security Authority Subsystem Service is an internal program of Microsoft Corporation USA that runs Windows system security policies. It verifies user identity, manages user password changes, and generates access characters when a user logs on to a computer standalone or...

kkFileView Cross-Site Script Vulnerability

Keking kkFileView is a Spring-Boot project from Keking Technology Keking, a Chinese company that builds online previews of files and documents. A security vulnerability exists in kkFileView v4.1.0, which stems from the errorMsg parameter being vulnerable to cross-site scripting...

CVE-2022-2760

In affected versions of Octopus Deploy it is possible to reveal the Space ID of spaces that the user does not have access to view in an error message when a resource is part of another Space...

CVE-2022-2760

CVE-2022-2760 describes an information-disclosure issue in Octopus Deploy: when a resource is part of another Space, an error message can reveal the Space ID of spaces the user is not authorized to view. The available connected documents do not specify affected versions, exact root-cause details ...

PT-2022-18510 · Unknown · Octopus Deploy

Name of the Vulnerable Software and Affected Versions: Octopus Deploy affected versions not specified Description: The issue allows revealing the Space ID of spaces that the user does not have access to view in an error message when a resource is part of another Space. Recommendations: At the...

ZZCMS index php information leakage vulnerability

ZZCMS is a content management system CMS by the ZZCMS team in China. An information disclosure vulnerability exists in ZZCMS 2022, which stems from the program's inadequate protection of sensitive information, and can be exploited by an attacker to send a request to "/admin/index php?Server" to...

CVE-2022-2760

In affected versions of Octopus Deploy it is possible to reveal the Space ID of spaces that the user does not have access to view in an error message when a resource is part of another Space...

CVE-2022-2760: Generation of Error Message Containing Sensitive Information

In affected versions of Octopus Deploy it is possible to reveal the Space ID of spaces that the user does not have access to view in an error message when a resource is part of another Space...

Number withdrawal

Hyperledger Fabric is an enterprise licensed distributed ledger framework. It is used to develop solutions and applications. A denial of service vulnerability exists in versions of Hyperledger Fabric prior to 2.4.0 that stems from not properly handling incoming error messages, which can be...

CVE-2021-27774: Generation of Error Message Containing Sensitive Information

User input included in error response, which could be used in a phishing attack...

Information disclosure

IBM Maximo Asset Management 7.6.1.1 and 7.6.1.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 210163...

CVE-2021-38924

IBM Maximo Asset Management 7.6.1.1 and 7.6.1.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 210163...

CVE-2021-38924: Generation of Error Message Containing Sensitive Information

IBM Maximo Asset Management 7.6.1.1 and 7.6.1.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 210163...