2798 matches found
CVE-2025-59399
CVE-2025-59399 affects libocpp versions prior to 0.28.0. The vulnerability stems from a secondary exception thrown during error message generation, causing a denial of service (EVerest crash). Multiple connected sources confirm the issue and point to upgrading to version 0.28.0 or later as the re...
PT-2025-42624
Name of the Vulnerable Software and Affected Versions Squid versions prior to 7.2 Squid versions 3.x through 3.5.28 Squid versions 4.x through 4.17 Squid versions 5.x through 5.9 Squid versions 6.x through 6.14 Squid versions 7.x through 7.1 Description Squid, a caching proxy for the Web, contain...
The Hidden Threat: How Sensitive Information Leakage Puts Your Business at Risk
You Don't Know What You Don't Know – And That's the Problem Picture this: Your development team has built a robust e-commerce platform. Your security team has implemented comprehensive protection measures. Your compliance team has checked all the boxes. Yet somewhere in your application stack, fu...
CVE-2025-53803
Generation of error message containing sensitive information in Windows Kernel allows an authorized attacker to disclose information locally...
CVE-2025-53803
Generation of error message containing sensitive information in Windows Kernel allows an authorized attacker to disclose information locally...
Information Disclosure
omeroweb is vulnerable to information disclosure. The vulnerability is due to error messages displayed during the Forgot Password reset process disclosing user information, which allows an attacker to enumerate or gain insights about valid users...
Linux Distros Unpatched Vulnerability : CVE-2011-3707
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - JanRain PHP OpenID library aka php-openid 2.2.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the...
Linux Distros Unpatched Vulnerability : CVE-2019-14884
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in Moodle 3.7 before 3.73, 3.6 before 3.6.7 and 3.5 before 3.5.9, where a reflected XSS possible from some fatal error messages...
CVE-2025-36003
IBM Security Verify Governance Identity Manager 10.0.2 could allow a remote attacker to obtain sensitive information when detailed technical error messages are returned. This information could be used in further attacks against the system...
Linux Distros Unpatched Vulnerability : CVE-2019-16392
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SPIP before 3.1.11 and 3.2 before 3.2.5 allows prive/formulaires/login.php XSS via error messages. CVE-2019-16392 Note that Nessus relies on the presence of the...
IBM Security Verify Governance Identity Manager Information Disclosure Vulnerability (CNVD-2025-23712)
IBM Security Verify Governance Identity Manager is IBM's identity governance and management solution for centralized management of enterprise user identities and access rights. An information disclosure vulnerability exists in IBM Security Verify Governance Identity Manager 10.0.2, which stems fr...
CVE-2025-36003
IBM Security Verify Governance Identity Manager 10.0.2 could allow a remote attacker to obtain sensitive information when detailed technical error messages are returned. This information could be used in further attacks against the system...
CVE-2025-36003
IBM Security Verify Governance Identity Manager 10.0.2 could allow a remote attacker to obtain sensitive information when detailed technical error messages are returned. This information could be used in further attacks against the system...
CVE-2025-36003 IBM Security Verify Governance Identity Manager information disclosure
IBM Security Verify Governance Identity Manager 10.0.2 could allow a remote attacker to obtain sensitive information when detailed technical error messages are returned. This information could be used in further attacks against the system...
CVE-2025-36003 IBM Security Verify Governance Identity Manager information disclosure
IBM Security Verify Governance Identity Manager 10.0.2 could allow a remote attacker to obtain sensitive information when detailed technical error messages are returned. This information could be used in further attacks against the system...
CVE-2025-36003
CVE-2025-36003 affects IBM Security Verify Governance with Identity Manager 10.0.2. The vulnerability arises from returning detailed technical error messages, enabling a remote attacker to obtain sensitive information about the system (information disclosure). Affected components include the Iden...
PT-2025-34955
Name of the Vulnerable Software and Affected Versions: IBM Security Verify Governance Identity Manager version 10.0.2 Description: IBM Security Verify Governance Identity Manager 10.0.2 may allow a remote attacker to obtain sensitive information through detailed technical error messages. This...
Linux Distros Unpatched Vulnerability : CVE-2011-4898
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wp-admin/setup-config.php in the installation component in WordPress 3.3.1 and earlier generates different error messages for requests lacking a dbname paramete...
CVE-2025-52619
HCL BigFix SaaS Authentication Service is affected by a sensitive information disclosure. Under certain conditions, error messages disclose sensitive version information about the underlying platform...