Lucene search
+L

59 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/08 12:00 a.m.•1 views

CVE-2023-27904: Undefined Security Weakness

Jenkins 2.393 and earlier, LTS 2.375.3 and earlier prints an error stack trace on agent-related pages when agent connections are broken, potentially revealing information about Jenkins configuration that is otherwise inaccessible to attackers...

5.3CVSS5.7AI score0.00724EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
•added 2023/02/27 8:00 a.m.•9 views

A cryptographic vulnerability exists in Node.js <19.2.0 <18.14.1 <16.19.1 <14.21.3 that in some cases did does not clear the OpenSSL error stack after operations that may set it. This may lead to false positive errors during subsequent cryptographic operations that happen to be on the same thread. This in turn could be used to cause a denial of service.

...

7.5CVSS6.9AI score0.02209EPSS
SaveExploits1
OSV
OSV
•added 2023/02/23 8:15 p.m.•8 views

DEBIAN-CVE-2023-23919

A cryptographic vulnerability exists in Node.js 19.2.0, 18.14.1, 16.19.1, 14.21.3 that in some cases did does not clear the OpenSSL error stack after operations that may set it. This may lead to false positive errors during subsequent cryptographic operations that happen to be on the same thread...

7.5CVSS6.9AI score0.02209EPSS
SaveExploits1References1
OSV
OSV
•added 2023/02/23 8:15 p.m.•8 views

ALPINE-CVE-2023-23919

A cryptographic vulnerability exists in Node.js 19.2.0, 18.14.1, 16.19.1, 14.21.3 that in some cases did does not clear the OpenSSL error stack after operations that may set it. This may lead to false positive errors during subsequent cryptographic operations that happen to be on the same thread...

7.5CVSS6.7AI score0.02209EPSS
SaveExploits1References1
OSV
OSV
•added 2023/02/23 8:15 p.m.•12 views

AZL-13684 CVE-2023-23919 affecting package nodejs for versions less than 16.19.1-1

A cryptographic vulnerability exists in Node.js 19.2.0, 18.14.1, 16.19.1, 14.21.3 that in some cases did does not clear the OpenSSL error stack after operations that may set it. This may lead to false positive errors during subsequent cryptographic operations that happen to be on the same thread...

7.5CVSS6.9AI score0.02209EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/23 12:00 a.m.•3 views

CVE-2023-23919: Undefined Security Weakness

A cryptographic vulnerability exists in Node.js 19.2.0, 18.14.1, 16.19.1, 14.21.3 that in some cases did does not clear the OpenSSL error stack after operations that may set it. This may lead to false positive errors during subsequent cryptographic operations that happen to be on the same thread...

7.5CVSS5.7AI score0.02209EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2023/02/23 12:00 a.m.•10 views

CVE-2023-23919

A cryptographic vulnerability exists in Node.js 19.2.0, 18.14.1, 16.19.1, 14.21.3 that in some cases did does not clear the OpenSSL error stack after operations that may set it. This may lead to false positive errors during subsequent cryptographic operations that happen to be on the same thread...

7.3AI score0.02209EPSS
SaveExploits1References3
SUSE CVE
SUSE CVE
•added 2023/02/21 1:59 a.m.•9 views

SUSE CVE-2023-23919

A cryptographic vulnerability exists in Node.js 19.2.0, 18.14.1, 16.19.1, 14.21.3 that in some cases did does not clear the OpenSSL error stack after operations that may set it. This may lead to false positive errors during subsequent cryptographic operations that happen to be on the same thread...

7.5CVSS6.6AI score0.02209EPSS
SaveExploits1References10
Github Security Blog
Github Security Blog
•added 2022/05/24 5:15 p.m.•27 views

Diavante vue-storefront-api and storefront-api disclose stack trace

In Divante vue-storefront-api through 1.11.1 and storefront-api through 1.0-rc.1, as used in VueStorefront PWA, unexpected HTTP requests lead to an exception that discloses the error stack trace, with absolute file paths and Node.js module names...

5.3CVSS6.8AI score0.1515EPSS
SaveExploits1References6Affected Software2
OSV
OSV
•added 2020/04/17 7:15 p.m.•28 views

CVE-2020-11883

In Divante vue-storefront-api through 1.11.1 and storefront-api through 1.0-rc.1, as used in VueStorefront PWA, unexpected HTTP requests lead to an exception that discloses the error stack trace, with absolute file paths and Node.js module names...

5.3CVSS6.7AI score
SaveExploits0References2
Cvelist
Cvelist
•added 2020/04/17 6:39 p.m.•56 views

CVE-2020-11883

In Divante vue-storefront-api through 1.11.1 and storefront-api through 1.0-rc.1, as used in VueStorefront PWA, unexpected HTTP requests lead to an exception that discloses the error stack trace, with absolute file paths and Node.js module names...

5.2AI score0.1515EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/04/17 12:00 a.m.•4 views

CVE-2020-11883: Generation of Error Message Containing Sensitive Information

In Divante vue-storefront-api through 1.11.1 and storefront-api through 1.0-rc.1, as used in VueStorefront PWA, unexpected HTTP requests lead to an exception that discloses the error stack trace, with absolute file paths and Node.js module names...

5.3CVSS6AI score0.1515EPSS
SaveExploits1References2
CNVD
CNVD
•added 2018/10/16 12:00 a.m.•9 views

Artifex Ghostscript Security Bypass Vulnerability

Artifex Ghostscript is an open source Postscript a page description language and programming language used in the electronics industry and desktop publishing parser from Artifex Software that displays Postscript files and prints them on non-Postscript printers. Postscript file. A security bypass...

6.3CVSS9.2AI score0.0273EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2018/02/02 9:29 a.m.•31 views

CVE-2018-6544

pdfloadobjstm in pdf/pdf-xref.c in Artifex MuPDF 1.12.0 could reference the object stream recursively and therefore run out of error stack, which allows remote attackers to cause a denial of service via a crafted PDF document...

5.5CVSS6.8AI score0.01571EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/07/17 12:00 a.m.•3 views

CVE-2017-7683: Exposure of Sensitive Information to an Unauthorized Actor

Apache OpenMeetings 1.0.0 displays Tomcat version and detailed error stack trace, which is not secure...

7.5CVSS5.8AI score0.01996EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2017/07/14 3:00 p.m.•44 views

CVE-2017-7683

Apache OpenMeetings 1.0.0 displays Tomcat version and detailed error stack trace, which is not secure...

7.7AI score0.01996EPSS
SaveExploits0References1
OSV
OSV
•added 2017/07/05 6:29 p.m.•17 views

CVE-2016-9700

IBM Jazz Foundation could allow an authenticated attacker to obtain sensitive information from error message stack traces. IBM X-Force ID: 119528...

4.3CVSS5.8AI score0.0069EPSS
SaveExploits0References2
Hacker One
Hacker One
•added 2015/02/03 10:12 p.m.•41 views

Whisper: Error stack trace

Open wid param broken http://prod.whisper.sh/whispers/replies?uid=050e3617a744474140874730dbe5055367c5c5&wid=04d27d987de7f897580096b099815691cd4a89%27%22&sme=false and got error stack trace...

0.6AI score
SaveExploits0
Hacker One
Hacker One
•added 2014/12/20 10:58 p.m.•38 views

Enter: Error stack trace

Make request removed csrf token in POST data POST /settings HTTP/1.1 Host: wallet.robocoin.com User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10.9; rv:34.0 Gecko/20100101 Firefox/34.0 Accept: / Accept-Language: ru-RU,ru;q=0.8,en-US;q=0.5,en;q=0.3 Accept-Encoding: gzip, deflate Content-Type:...

6.9AI score
SaveExploits0
Rows per page
Query Builder