CVE-2017-2592

An information-disclosure flaw was found in oslo.middleware. Software using the CatchError class could include sensitive values in a traceback's error message. System users could exploit this flaw to obtain sensitive information from OpenStack component error logs for example, keystone tokens...

Unable to boot target device to a server with error " Connecting to the Provisioning services. Please wait"

PVS:7.6: Facing issue with target...

DEBIAN-CVE-2016-9839

In MapServer before 7.0.3, OGR driver error messages are too verbose and may leak sensitive information if data connection fails...

CVE-2016-9839

In MapServer before 7.0.3, OGR driver error messages are too verbose and may leak sensitive information if data connection fails...

CVE-2016-9839

In MapServer before 7.0.3, OGR driver error messages are too verbose and may leak sensitive information if data connection fails...

Design/Logic Flaw

In MapServer before 7.0.3, OGR driver error messages are too verbose and may leak sensitive information if data connection fails...

CVE-2016-9839

In MapServer before 7.0.3, OGR driver error messages are too verbose and may leak sensitive information if data connection fails...

CVE-2016-9839

In MapServer before 7.0.3, OGR driver error messages are too verbose and may leak sensitive information if data connection fails...

Nextcloud: Login Hints on Admin Panel

Hi, Hope you are doing fine. I wanted to inform you regarding the enabling of the login hints on your wp-admin panelhttps://nextcloud.com/wp-login.php. Vulnerability: The admin panel shows very "specific" hint information if a hacker tries for a bruteforcing attack. Steps to reproduce: 1. Navigat...

SSRF Team Calendars

The following endpoint has an SSRF that can be used to enumerate internal network resources that are not publicly exposed to the internet. noformat PUT /wiki/rest/calendar-services/1.0/calendar/subcalendars.json noformat PoC Using the "Team Calendar" macro, select the "Subscribe by URL" option...

Server: Reflected XSS in Gallery application

The gallery app was not properly sanitizing exception messages from the ownCloud server. Due to an endpoint where an attacker could influence the error message this lead to a reflected Cross-Site-Scripting vulnerability. For more information please consult the official advisory. This advisory is...

IBM Security Guardium Information Disclosure Vulnerability

IBM Security Guardium is a data activity monitor product from IBM USA. The product offers features such as automated controls for compliance and protection against internal and external threats. IBM Security Guardium suffers from an information disclosure vulnerability. A remote attacker could...

Magento Community Edition 2.x < 2.0.6 Multiple Vulnerabilities

Binary data 9694.prm...

Magento Community Edition < 1.9.2.2 Multiple Vulnerabilities

Binary data 9678.prm...

Oracle MySQL 5.6.x < 5.6.30 Multiple Vulnerabilities

Binary data 9611.prm...

Oracle MySQL 5.7.x < 5.7.12 Multiple Vulnerabilities

Binary data 9615.prm...

IBM Security Identity Manager Virtual Appliance Information Disclosure Vulnerability (CNVD-2016-06940)

IBM Security Identity Manager ISIM is a suite of identity management and governance solutions from IBM in the United States. The solution automates the creation, modification, re-authentication and termination of user privileges throughout the user lifecycle and supports policy-based password...

CVE-2016-6145

The SQL interface in SAP HANA DB 1.00.091.00.1418659308 provides different error messages for failed login attempts depending on whether the username exists and is locked when the detailederroronconnect option is not supported or is configured as "False," which allows remote attackers to enumerat...

Moodle 2.8.x < 2.8.12 / 2.9.x < 2.9.6 / 3.0.x < 3.0.4 Multiple Vulnerabilities

Binary data 9427.prm...

Ian Dunn: User enumeration in wp-admin

Hi, I have found that in the page wp-admin possible to perform user enumeration though differences in error massages: if user exist the site will return :" ERROR: The password you entered for the username admin is incorrect." if user not exit: Invalid username...