Zope XSS Vulnerability

Cross-site scripting XSS vulnerability in Zope 2.8.x before 2.8.12, 2.9.x before 2.9.12, 2.10.x before 2.10.11, 2.11.x before 2.11.6, and 2.12.x before 2.12.3, 3.1.1 through 3.4.1. allows remote attackers to inject arbitrary web script or HTML via vectors related to the way error messages perform...

GHSA-VH6G-786F-HXXP Zope XSS Vulnerability

Cross-site scripting XSS vulnerability in Zope 2.8.x before 2.8.12, 2.9.x before 2.9.12, 2.10.x before 2.10.11, 2.11.x before 2.11.6, and 2.12.x before 2.12.3, 3.1.1 through 3.4.1. allows remote attackers to inject arbitrary web script or HTML via vectors related to the way error messages perform...

IBM Sterling B2B Integrator 安全漏洞

IBM Sterling B2B Integrator is a suite of software from IBM USA that integrates critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B processes with diverse partner communities. An information disclosure vulnerability exists in IBM Sterlin...

CVE-2021-39033

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5 and 6.1.0.0 through 6.1.1.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system...

Microsoft Windows Secure Channel Denial of Service Vulnerability

Microsoft Windows is a set of operating systems for use on personal devices from the American company Microsoft. A denial of service vulnerability exists in Microsoft Windows Secure Channel. The vulnerability stems from a failure to properly handle incoming error messages and can be exploited by ...

Microsoft .NET Framework Denial of Service Vulnerability (CNVD-2022-60136)

Microsoft .NET Framework is a comprehensive and consistent programming model from Microsoft Corporation USA and a Windows Store, Windows Phone, Windows Server, and Microsoft Azure applications. The platform includes the C and Visual Basic programming languages, a public language runtime library,...

Microsoft Windows Defender Denial of Service Vulnerability

A denial-of-service vulnerability exists in Microsoft Windows Defender, a suite of antivirus software that comes with Windows from Microsoft. The vulnerability stems from a failure to properly handle incoming error messages, and can be exploited by attackers to cause a denial of service...

Microsoft Windows Cluster Shared Volume (CSV) Denial of Service Vulnerability

Microsoft Windows Cluster Shared Volume CSV is a feature of Microsoft Corporation USA. A denial of service vulnerability exists in Microsoft Windows Cluster Shared Volume CSV. The vulnerability stems from an input error message not being handled correctly and can be exploited by an attacker to...

Microsoft Defender 输入验证错误漏洞

A denial-of-service vulnerability exists in Microsoft Windows Defender, a suite of antivirus software that comes with Windows from Microsoft. The vulnerability stems from a failure to properly handle incoming error messages, and can be exploited by attackers to cause a denial of service...

Dell Technologies Dell PowerScale OneFS 安全漏洞

Dell PowerScale OneFS is a denial-of-service vulnerability in Dell PowerScale OneFS, a PowerScale OneFS operating system that provides a scale-out NAS, which is caused by a failure to properly handle incoming error messages in SmartConnect and can be exploited to cause a denial of service of the...

Microsoft .NET Framework输入验证错误漏洞

Microsoft .NET Framework is a comprehensive and consistent programming model from Microsoft Corporation USA and a Windows Store, Windows Phone, Windows Server, and Microsoft Azure applications. The platform includes the C and Visual Basic programming languages, a public language runtime library,...

Denial Of Service (DoS)

Spring Expression is vulnerable to denial of service. The vulnerability exists due to the creation of large array in a SpEL and sending meaningless error messages to the user which allows an attacker to send crafted SpEL expressions that leads to an out ouf bound error causing an application cras...

The vulnerability of the Git-based software platform for collaborative code development on GitLab allows a hacker to gain access to confidential data.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the display of an email address in error messages. Exploiting this vulnerability allows a malicious actor to gain access to confidential data...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei, China. A denial-of-service vulnerability exists in the Huawei HarmonyOS application framework, which provides a microkernel-based, full-scenario distributed operating system. The vulnerability stems from a failure to properly handle incoming...

PT-2022-13670 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions prior to 14.7.7 GitLab CE/EE versions 14.8 prior to 14.8.5 GitLab CE/EE versions 14.9 prior to 14.9.2 Description: The issue concerns missing filtering in an error message, which exposes sensitive information when an...

GitLab Community Edition和GitLab Enterprise Edition 信息泄露漏洞

GitLab Enterprise Edition is a content management system.GitLab Community Edition is a community edition of GitLab by GitLab, Inc. An information disclosure vulnerability exists in GitLab Community Edition CE and Enterprise Edition EE due to a lack of filtering in error messages. When the include...

IBM Engineering Requirements Quality Assistant Denial of Service Vulnerability

IBM Engineering Requirements Quality Assistant is a Watson AI-based software from IBM USA used to assist developers in improving the quality of engineering requirements. The application significantly reduces the cost of finding defects, facilitates early detection of requirements errors in the...

libcaca Denial of Service Vulnerability

libcaca is an open source software library that converts images to color ASCII artwork. libcaca suffers from a denial of service vulnerability that stems from not properly handling incoming error messages, which can be exploited by remote attackers to cause a denial of service...

CVE-2021-35251

Sensitive information could be displayed when a detailed technical error message is posted. This information could disclose environmental details about the Web Help Desk installation...

libcaca 数字错误漏洞

libcaca is an open source software library that converts images to color ASCII artwork. libcaca suffers from a denial of service vulnerability that stems from not properly handling incoming error messages, which can be exploited by remote attackers to cause a denial of service...