Lucene search
K

3856 matches found

Hacker One
Hacker One
added 2018/06/29 10:11 p.m.29 views

U.S. Dept Of Defense: Corda Server XSS ████████

Summary: Cord server will display the error message if something isn't allowed to be used thus allowing xss Description: /scripts/ctredirector.dll allows users to call images or files. We can use the parameter @FILE to dictate a file or url, if it fails it'll display the url into the page. We the...

0.8AI score
Exploits0
IBM Security Bulletins
IBM Security Bulletins
added 2018/06/17 4:42 a.m.28 views

Security Bulletin: ClearQuest SQL Error Message Attack Vulnerability (CVE-2012-5765)

Summary IBM Rational ClearQuest Web client contains SQL Error Message Attack vulnerability. Vulnerability Details | Subscribe to My Notifications to be notified of important product support alerts like this. Follow this link for more information requires login with your IBM ID ---|--- CVE ID:...

5CVSS0.8AI score0.01354EPSS
Exploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2018/06/16 9:50 p.m.18 views

Security Bulletin: IBM Security Key Lifecycle Manager is affected by exposure of sensitive information in the error message it generates (CVE-2016-6094)

Summary IBM Security Key Lifecycle Manager generates an error message that includes sensitive information about its environment, users, or associated data. Vulnerability Details CVEID: CVE-2016-6094 DESCRIPTION: IBM Tivoli Key Lifecycle Manager generates an error message that includes sensitive...

4.3CVSS0.9AI score0.00941EPSS
Exploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2018/06/16 9:48 p.m.16 views

Security Bulletin: IBM Security Access Manager appliances are affected by an information exposure vulnerability (CVE-2016-3021)

Summary In certain circumstances, IBM Security Access Manager appliances may generate an error message that includes sensitive information about its environment, users, or associated data. Vulnerability Details CVEID: CVE-2016-3021 DESCRIPTION: IBM Security Access Manager for Web could allow an...

4CVSS1.5AI score0.01033EPSS
Exploits0Affected Software3
Citrix
Citrix
added 2018/06/14 12:0 a.m.7 views

Error: "Cannot Complete Your Request" Due to Call Back URL Misconfiguration on StoreFront

The following error is displayed due to call back URL misconfiguration on StoreFront: Cannot Complete Your Request...

7.1AI score
Exploits0
Citrix
Citrix
added 2018/06/14 12:0 a.m.7 views

Error: "Cannot Complete Your Request" After Publishing New App or Customizing App’s Icon on StoreFront

The following error is displayed after publishing a new application or customizing an application’s icon on StoreFront: Cannot Complete Your Request...

7.1AI score
Exploits0
Citrix
Citrix
added 2018/06/14 12:0 a.m.6 views

Error: "Cannot Complete Your Request" Due to Stopped StoreFront Services

The following error is displayed due to stopped StoreFront services: Cannot Complete Your Request...

7.1AI score
Exploits0
Citrix
Citrix
added 2018/06/14 12:0 a.m.5 views

Error: "Cannot Complete Your Request" Due to Self-Recycling of StoreFront Application Pools

The following error is displayed due to self-recycling of StoreFront application pools: Cannot Complete Your Request...

7.1AI score
Exploits0
Citrix
Citrix
added 2018/06/14 12:0 a.m.7 views

Error: "Cannot Complete Your Request" Due to Antivirus Firewall Blocking Connection on StoreFront

The following error is displayed due to antivirus firewall blocking connection on StoreFront: Cannot Complete Your Request...

7.1AI score
Exploits0
Citrix
Citrix
added 2018/06/13 12:0 a.m.6 views

Receiver 4.8: "Citrix HDX Engine is not responding"

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. 1 Published application will launch and after few minutes it'll crash with the error message "Citrix...

7AI score
Exploits0
OSV
OSV
added 2018/06/05 1:41 p.m.8 views

SUSE-SU-2018:1507-1 Security update for zziplib

This update for zziplib fixes the following issues: Security issue fixed: - CVE-2018-6542: Reject file if the size of the central directory is too big and display an error message bsc1079094...

6.5CVSS6AI score0.01244EPSS
Exploits1References3
OSV
OSV
added 2018/05/29 1:29 p.m.2 views

CVE-2017-1768

IBM Security Guardium Big Data Intelligence SonarG 3.1 generates an error message that includes sensitive information about its environment, users, or associated data. IBM X-Force ID: 136471...

4.3CVSS5.8AI score
Exploits0References3
Prion
Prion
added 2018/05/29 1:29 p.m.10 views

Design/Logic Flaw

IBM Security Guardium Big Data Intelligence SonarG 3.1 generates an error message that includes sensitive information about its environment, users, or associated data. IBM X-Force ID: 136471...

4CVSS4.2AI score0.01378EPSS
Exploits0References3Affected Software1
NVD
NVD
added 2018/05/29 1:29 p.m.13 views

CVE-2017-1768

IBM Security Guardium Big Data Intelligence SonarG 3.1 generates an error message that includes sensitive information about its environment, users, or associated data. IBM X-Force ID: 136471...

4.3CVSS4.3AI score0.01378EPSS
Exploits0References3
Openbugbounty
Openbugbounty
added 2018/05/24 3:47 a.m.40 views

drfrostmaths.com XSS vulnerability

Open Bug Bounty ID: OBB-621125 Description| Value ---|--- Affected Website:| drfrostmaths.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Exploits0
Tenable Nessus
Tenable Nessus
added 2018/05/24 12:0 a.m.37 views

openSUSE Security Update : enigmail (openSUSE-2018-495) (EFAIL)

This update for enigmail to version 2.0.5 fixes the following issues : Improvements on previous fixes on CVE-2017-17688, boo1093151 and CVE-2017-17689, boo1093152 EFAIL : - do not decrypt MIME parts unnecessarily - improve Error Message for Missing Message Modification Code %NASLMINLEVEL 70300 C...

5.9CVSS6.5AI score0.05572EPSS
Exploits3References4
OPENSUSE Linux
OPENSUSE Linux
added 2018/05/23 9:22 p.m.57 views

Security update for enigmail (moderate)

This update for enigmail to version 2.0.5 fixes the following issues: Improvements on previous fixes on CVE-2017-17688, boo1093151 and CVE-2017-17689, boo1093152 EFAIL: - do not decrypt MIME parts unnecessarily - improve Error Message for Missing Message Modification Code...

4.5AI score0.05572EPSS
Exploits3References2
Citrix
Citrix
added 2018/05/17 12:0 a.m.7 views

Error: "HTTP/1.1 Gateway Timeout" When Using NetScaler with Secure Web

After launching Secure Web Gateway, some websites report an error message "HTTP/1.1 Gateway Timeout". This is common with ADFS...

7.1AI score
Exploits0
CNVD
CNVD
added 2018/05/16 12:0 a.m.3 views

Atlassian Jira issue collector cross-site scripting vulnerability

Atlassian JIRA is a defect tracking management system from Atlassian Australia. The system is mainly used to track and manage all kinds of issues and defects in the workplace. issue collector is one of the issue collectors. A cross-site scripting vulnerability exists in the error message of a...

6.1CVSS6.3AI score0.37611EPSS
Exploits0References1
CNVD
CNVD
added 2018/05/11 12:0 a.m.2 views

Zend Server Zend Debugger Cross-Site Scripting Vulnerability

Zend Server is a PHP Web development application server from Zend Technologies , which simplifies the development and running of PHP applications in Windows and Linux environments.Zend Debugger is one of the debugging tools. A cross-site scripting vulnerability exists in Zend Debugger in versions...

6.1CVSS6.5AI score0.02705EPSS
Exploits0References1
Rows per page
Query Builder