4685 matches found
Arbitrary Code Execution
tt-rss is vulnerable to arbitrary code execution. The vulnerability exists as plugins/afproxyhttp/init.php mishandles the $REQUEST"url" in an error message...
GitLab Information Disclosure Vulnerability (CNVD-2021-26105)
GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. An information disclosure vulnerability exists in GitLab...
GitLab information leakage vulnerability
GitLab is an open source application developed using Ruby on Rails that implements a self-hosted Git project repository that can be accessed through a web interface for public and private projects.GitLab EE is GitLab Enterprise Edition. GitLab EE has an information disclosure vulnerability. The...
GitLab information leakage vulnerability
GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. An information disclosure vulnerability exists in GitLab...
CVE-2020-4628
IBM Cloud Pak for Security CP4S 1.3.0.1 and 1.4.0.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 185369...
Information disclosure
IBM Cloud Pak for Security CP4S 1.3.0.1 and 1.4.0.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 185369...
CVE-2020-4628
IBM Cloud Pak for Security CP4S 1.3.0.1 and 1.4.0.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 185369...
PT-2021-12144
Name of the Vulnerable Software and Affected Versions IBM Cloud Pak for Security CP4S versions 1.3.0.1 through 1.4.0.0 Description The issue allows a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used ...
CVE-2020-4628: Generation of Error Message Containing Sensitive Information
IBM Cloud Pak for Security CP4S 1.3.0.1 and 1.4.0.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 185369...
Security Bulletin: Cloud Pak for Security error message returns sensitive information (CVE-2020-4628)
Summary Some of the error messages displayed in by Cloud Pak for Security 1.4.0.0 and earlier versions could allow the attacker to obtain senstivite information as part of a technical error message that could be utilised in attacks against the system. This has been addressed in an update...
CVE-2020-4628
IBM Cloud Pak for Security CP4S 1.3.0.1 and 1.4.0.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 185369...
CVE-2020-4600
IBM Security Guardium Insights 2.0.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 184832...
CVE-2020-4599
IBM Security Guardium Insights 2.0.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 184824...
Information disclosure
IBM Security Guardium Insights 2.0.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 184824...
CVE-2020-4600
IBM Security Guardium Insights 2.0.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 184832...
PT-2021-12137
Name of the Vulnerable Software and Affected Versions IBM Security Guardium Insights version 2.0.2 Description A remote attacker could obtain sensitive information when a detailed technical error message is returned in the browser, potentially using this information for further attacks against th...
Backdoor.Win32.Kurbadur.a Remote Stack Buffer Overflow
Discovery / credits: malvuln - Malvuln.com c 2021 Original source: https://malvuln.com/advisory/821d3d5a9b15dc3388fe17f233cce296.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Kurbadur.a Vulnerability: Remote Stack Buffer Overflow Description: The malware liste...
CVE-2020-4599: Generation of Error Message Containing Sensitive Information
IBM Security Guardium Insights 2.0.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 184824...
CVE-2020-4600: Generation of Error Message Containing Sensitive Information
IBM Security Guardium Insights 2.0.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 184832...
CVE-2020-4599
IBM Security Guardium Insights 2.0.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 184824...