Lucene search
+L

3890 matches found

Citrix
Citrix
added 2018/12/19 12:0 a.m.18 views

Getting an error "Your changes could not be saved due to an invalid configuration of the account"

After the installation of receiver with Single sign-on enabled, users get above error message...

7.1AI score
SaveExploits0
Prion
Prion
added 2018/12/13 4:29 p.m.17 views

Design/Logic Flaw

IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 generates an error message that includes sensitive information about its environment, users, or associated data. IBM X-Force ID: 149704...

4CVSS4.2AI score0.00976EPSS
SaveExploits0References2Affected Software1
OPENSUSE Linux
OPENSUSE Linux
added 2018/12/07 12:24 p.m.58 views

Security update for glib2 (moderate)

This update for glib2 fixes the following issues: Security issues fixed: - CVE-2018-16428: Do not do a NULL pointer dereference crash. Avoid that, at the cost of introducing a new translatable error message bsc1107121. - CVE-2018-16429: Fixed out-of-bounds read vulnerability...

7.5CVSS2.5AI score0.04693EPSS
SaveExploits2References3
CNVD
CNVD
added 2018/12/05 12:0 a.m.8 views

GitLab CE/EE Information Disclosure Vulnerability

GitLab is a set of open source applications developed using Ruby on Rails to implement a self-hosted Git version control system project repository, which has similar functionality to Github for accessing the contents of a project's files, commit history, bug lists, and more. An information...

7.5CVSS7.3AI score0.01461EPSS
SaveExploits1References1
OSV
OSV
added 2018/12/04 11:29 p.m.24 views

CVE-2018-18648

An issue was discovered in GitLab Community and Enterprise Edition before 11.2.7, 11.3.x before 11.3.8, and 11.4.x before 11.4.3. It has Information Exposure Through an Error Message...

7.5CVSS6.4AI score
SaveExploits0References2
NVD
NVD
added 2018/12/04 11:29 p.m.24 views

CVE-2018-18648

An issue was discovered in GitLab Community and Enterprise Edition before 11.2.7, 11.3.x before 11.3.8, and 11.4.x before 11.4.3. It has Information Exposure Through an Error Message...

7.5CVSS7.3AI score0.01461EPSS
SaveExploits1References2
Debian CVE
Debian CVE
added 2018/12/04 11:0 p.m.43 views

CVE-2018-18648

Removed by vendor...

7.5CVSS7.1AI score0.01461EPSS
SaveExploits1
Veeam
Veeam
added 2018/11/30 12:0 a.m.18 views

Certificate expiration date

Challenge The following error message appears when starting Veeam Backup and Replication console: Cause Veeam Backup and Replication self-signed certificate expires 11 months after installation. The certificate is renewed, but Veeam Backup Service still has information about the old one in the...

6.6AI score
SaveExploits0
Veeam
Veeam
added 2018/11/29 5:1 p.m.27 views

"Failed to detach SCSI lun" errors in vSphere after finishing Instant Recovery or File-level restore from storage snapshots

Challenge You might see "Failed to detach SCSI lun" errors in vSphere during the unexport phase when restoring items file-level restore from storage snapshot or doing an Instant Recovery from storage snapshot because of certain VMware behaviour. Both types of the restores include a step when...

7AI score
SaveExploits0
Citrix
Citrix
added 2018/11/27 12:0 a.m.9 views

Unable to remove store from StoreFront console

event 0: "An error occurred while running the command :'Remove-DSStore2' Cannot bind argument to the parameter 'VirtualPath' because it is an empty string...

7.2AI score
SaveExploits0
OSV
OSV
added 2018/11/14 9:29 a.m.8 views

CVE-2018-19190

The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via the error.php errormsg parameter...

6.1CVSS5.8AI score0.00843EPSS
SaveExploits1References2
Prion
Prion
added 2018/11/14 9:29 a.m.18 views

Code injection

The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via the error.php errormsg parameter...

4.3CVSS6AI score0.00843EPSS
SaveExploits1References2Affected Software1
Veracode
Veracode
added 2018/11/14 2:37 a.m.32 views

Cross-Site Scripting (XSS)

Apache Struts is vulnerable to cross-site scripting. A lack of validation in the parameter name allows a remote attacker to inject arbitrary Javascript through an error message. The vulnerability affects LookupDispatchAction, DispatchAction and ActionDispatcher...

4.3CVSS8.7AI score0.05328EPSS
SaveExploits0References11Affected Software1
Veracode
Veracode
added 2018/11/14 12:27 a.m.28 views

Cross-Site Scripting (XSS)

Apache Struts is vulnerable to cross-site scripting. Lack of input validation and sanitization on the query string allows a remote attacker to inject arbitrary Javascript into a victim's browser when the reuest handler generates an error message...

4.3CVSS8.8AI score0.25707EPSS
SaveExploits2References16Affected Software1
CNVD
CNVD
added 2018/11/14 12:0 a.m.9 views

PAYFORT payfort-php-SDK cross-site scripting vulnerability

PayFort is an online payment gateway. payfort-php-SDK is the PayFort payment gateway SDK. A cross-site scripting vulnerability exists in Amazon PAYFORT payfort-php-SDK on 2018-04-26 and earlier versions, which can be exploited by an attacker via the error.php errormsg parameter to conduct a...

6.1CVSS6.2AI score0.00843EPSS
SaveExploits1References1
Prion
Prion
added 2018/11/12 5:29 a.m.20 views

Path traversal

An issue was discovered in XiaoCms 20141229. /admin/index.php?c=database allows full path disclosure in a "failed to open stream" error message...

5CVSS5.2AI score0.00937EPSS
SaveExploits1References1Affected Software1
NVD
NVD
added 2018/11/09 1:29 a.m.30 views

CVE-2017-1119

IBM Marketing Operations 9.1.0, 9.1.2, and 10.1 could allow a remote attacker to obtain sensitive information. An attacker could send a specially-crafted request to cause an error message to be returned containing the full root path. An attacker could use this information to launch further attack...

4.3CVSS4.3AI score0.01318EPSS
SaveExploits0References2
Prion
Prion
added 2018/11/09 1:29 a.m.17 views

Design/Logic Flaw

IBM Marketing Operations 9.1.0, 9.1.2, and 10.1 could allow a remote attacker to obtain sensitive information. An attacker could send a specially-crafted request to cause an error message to be returned containing the full root path. An attacker could use this information to launch further attack...

4CVSS4.3AI score0.01318EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2018/11/09 1:29 a.m.3 views

CVE-2017-1119

IBM Marketing Operations 9.1.0, 9.1.2, and 10.1 could allow a remote attacker to obtain sensitive information. An attacker could send a specially-crafted request to cause an error message to be returned containing the full root path. An attacker could use this information to launch further attack...

4.3CVSS5.8AI score0.01318EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2018/11/09 12:0 a.m.30 views

CVE-2017-1119

IBM Marketing Operations 9.1.0, 9.1.2, and 10.1 could allow a remote attacker to obtain sensitive information. An attacker could send a specially-crafted request to cause an error message to be returned containing the full root path. An attacker could use this information to launch further attack...

4.3CVSS4.3AI score0.01318EPSS
SaveExploits0References2
Rows per page
Query Builder