Exploit for Generation of Error Message Containing Sensitive Information in Ollama

Ollama File Existence Disclosure Vulnerability CVE-2024-39719...

Azure deployed machines fail to Power On due to Data Collection Rule Associations

When applying a Machine Profile to an Azure-based Machine Creation Services catalog, attempting to Start machines may result in one of the following errors: "code":"UnsupportedFeature","message":"Data Collection Rule Associations is not supported in the location of the targeted parent resource...

Huawei EulerOS: Security Advisory for git (EulerOS-SA-2025-1416)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Hashicorp Vault Community vulnerable to Generation of Error Message Containing Sensitive Information

Vault Community and Vault Enterprise Key/Value kv Version 2 plugin may unintentionally expose sensitive information in server and audit logs when users submit malformed payloads during secret creation or update operations via the Vault REST API. This vulnerability, identified as CVE-2025-4166, is...

CVE-2025-46575

There is an information disclosure vulnerability in the GoldenDB database product. Attackers can exploit error messages to obtain the system's sensitive information...

Fortra GoAnywhere 安全漏洞

Fortra GoAnywhere is a secure file transfer solution from Fortra USA. A security vulnerability exists in Fortra GoAnywhere versions prior to 7.8.0, which stems from an error message containing an absolute server path that could lead to application mapping ambiguity testing...

CVE-2025-46575

There is an information disclosure vulnerability in the GoldenDB database product. Attackers can exploit error messages to obtain the system's sensitive information...

CVE-2025-46574

There is an information disclosure vulnerability in the GoldenDB database product. Attackers can exploit error messages to obtain the system's sensitive information...

CVE-2025-46575

Technical details about CVE-2025-46575 are not publicly available in the provided connected documents. Monitor for updates from official advisories for affected products, fixes, and exploit information.

CVE-2025-46575 ZTE GoldenDB Database product has an information disclosure vulnerability

There is an information disclosure vulnerability in the GoldenDB database product. Attackers can exploit error messages to obtain the system's sensitive information...

CVE-2025-46574 ZTE GoldenDB Database product has an input validation vulnerability

There is an information disclosure vulnerability in the GoldenDB database product. Attackers can exploit error messages to obtain the system's sensitive information...

CVE-2025-46574 ZTE GoldenDB Database product has an input validation vulnerability

There is an information disclosure vulnerability in the GoldenDB database product. Attackers can exploit error messages to obtain the system's sensitive information...

CVE-2025-46574

CVE-2025-46574 involves the GoldenDB database product from ZTE, where an input validation vulnerability can lead to information disclosure. The connected sources consistently describe that attackers may cause the system to reveal sensitive data by exploiting how invalid inputs are handled, specif...

PT-2025-17973 · Goldendb · Goldendb

Name of the Vulnerable Software and Affected Versions: GoldenDB affected versions not specified Description: The issue is related to an information disclosure problem. Attackers can exploit error messages to obtain the system's sensitive information. Recommendations: At the moment, there is no...

PT-2025-17974 · Goldendb · Goldendb

Name of the Vulnerable Software and Affected Versions: GoldenDB affected versions not specified Description: The issue is related to an information disclosure problem. Attackers can exploit error messages to obtain the system's sensitive information. Recommendations: At the moment, there is no...

BIT-MOODLE-2024-43439 Moodle: reflected xss via h5p error message

A flaw was found in moodle. H5P error messages require additional sanitizing to prevent a reflected cross-site scripting XSS risk...

CVE-2025-25045

IBM InfoSphere Information 11.7 Server authenticated user to obtain sensitive information when a detailed technical error message is returned in a request. This information could be used in further attacks against the system...

CVE-2025-25045 IBM InfoSphere Information Server information disclosure

IBM InfoSphere Information 11.7 Server authenticated user to obtain sensitive information when a detailed technical error message is returned in a request. This information could be used in further attacks against the system...

CVE-2025-42604

CVE-2025-42604 affects Meon KYC solutions. The root cause is that debug mode is enabled in certain API endpoints, which an attacker could access to receive unauthorized API responses that disclose detailed system information. The available documents describe the vulnerability as an information di...

CVE-2025-42604 Detailed Error Response Vulnerability in Meon KYC solutions

This vulnerability exists in Meon KYC solutions due to debug mode is enabled in certain API endpoints. A remote attacker could exploit this vulnerability by accessing certain unauthorized API endpoints leading to detailed error messages as response leading to disclosure of system related...