Atlassian JIRA < 3.12.1 Multiple Vulnerabilities

Binary data 4329.prm...

Design/Logic Flaw

OpenBiblio 0.5.2-pre4 and earlier allows remote attackers to obtain sensitive information via a direct request for 1 shared/footer.php, 2 circ/mbrfields.php, or 3 admin/custommarcformfields.php, which reveals the path in various error messages...

CVE-2007-6408

IBM Tivoli Provisioning Manager Express provides unspecified information in error messages when 1 attempted duplication of a username occurs when creating an account or 2 when trying to login using a valid username, which makes it easier for remote attackers to enumerate usernames...

Default credentials

IBM Tivoli Provisioning Manager Express provides unspecified information in error messages when 1 attempted duplication of a username occurs when creating an account or 2 when trying to login using a valid username, which makes it easier for remote attackers to enumerate usernames...

DSA-1426-1 qt-x11-free - several vulnerabilities

Bulletin has no description...

CVE-2004-2755

Cross-site scripting XSS vulnerability in Symantec Web Security 2.5, 3.0.0, and 3.0.1 before build 62 allows remote attackers to inject arbitrary web script or HTML via the query string in blocked URLs that are listed in 1 error or 2 block page messages...

CVE-2007-5942

Bandersnatch 0.4 allows remote attackers to obtain sensitive information via a malformed request for index.php with 1 a certain func parameter value; or 2 certain func, jid, page, and limit parameter values; which reveals the path in various error messages...

CVE-2007-5942

Bandersnatch 0.4 allows remote attackers to obtain sensitive information via a malformed request for index.php with 1 a certain func parameter value; or 2 certain func, jid, page, and limit parameter values; which reveals the path in various error messages...

Design/Logic Flaw

Bandersnatch 0.4 allows remote attackers to obtain sensitive information via a malformed request for index.php with 1 a certain func parameter value; or 2 certain func, jid, page, and limit parameter values; which reveals the path in various error messages...

Ubuntu 5.10 / 6.06 LTS : xinit vulnerability (USN-364-1)

A race condition existed that would allow other local users to see error messages generated during another user's X session. This could allow potentially sensitive information to be leaked. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu...

CVE-2002-2410

openwebmail.pl in Open WebMail 1.7 and 1.71 reveals sensitive information in error messages and generates different responses whether a user exists or not, which allows remote attackers to identify valid usernames via brute force attacks and obtain certain configuration and version information...

CVE-2002-2410

OpenWebMail is affected: Open WebMail 1.7 and 1.71 expose sensitive information via error messages and respond differently for existing vs non-existent users, enabling remote username enumeration and disclosure of certain configuration and version information. Affected component: openwebmail.pl. ...

CVE-2007-4861

SAXON 5.4 is affected by multiple path disclosure flaws when display_errors is enabled. Exploitation vectors include direct requests to news.php, improper handling of newsid in admin/edit-item.php, and other scripts under admin/, rss/, and the installation root, which reveal server paths in error...

CVE-2002-2318

Cross-site scripting XSS vulnerability in Falcon web server 2.0.0.1009 through 2.0.0.1021 allows remote attackers to inject arbitrary web script or HTML via the URI, which is inserted into 301 error messages and executed by 404 error messages...

CVE-2002-2318

CVE-2002-2318 affects Falcon Web Server 2.0.0.1009 through 2.0.0.1021. The vulnerability is a cross-site scripting (XSS) flaw where an attacker can inject arbitrary script/HTML via the request URI, which is then embedded in 301 error messages and rendered by 404 error responses. The underlying ca...

CVE-2003-1399

Removed by vendor...

CVE-2003-1399

eject 2.0.10, when installed setuid on systems such as SuSE Linux 7.3, generates different error messages depending on whether a specified file exists or not, which allows local users to obtain sensitive information...

CVE-2004-2706

The vulnerability CVE-2004-2706 affects Gyach Enhanced (Gyach-E) before 1.0.4. An remote attacker can trigger a denial of service (crash) by sending conference packets containing error messages. Mitigation: upgrade Gyach-E to version 1.0.4 or later, per referenced entries. The connected documents...

Design/Logic Flaw

SimpNews 2.41.03 allows remote attackers to obtain sensitive information via 1 an invalid lang parameter to admin/index.php; or a direct request to 2 admin/dbginfos.php, 3 admin/heading.php, or 4 evsearch.php; which reveals the path in various error messages...

Design/Logic Flaw

SimpGB 1.46.02 allows remote attackers to obtain sensitive information via 1 an invalid lang parameter to admin/index.php or 2 a direct request to admin/trailer.php, which reveals the path in various error messages...