Lucene search
+L

3890 matches found

Cvelist
Cvelist
added 2017/08/29 9:0 p.m.27 views

CVE-2016-2964

IBM Sametime 8.5.2 and 9.0 under certain conditions provides an error message to a user that is too detailed and may reveal details about the application. IBM X-Force ID: 113813...

5.1AI score0.01271EPSS
SaveExploits0References3
CVE
CVE
added 2017/08/29 9:0 p.m.51 views

CVE-2016-2964

CVE-2016-2964 affects IBM Sametime versions 8.5.2 and 9.0. The vulnerability arises when an error message shown to a user is overly detailed and may reveal internal details about the application, leading to potential information disclosure. According to the linked sources, this impacts confidenti...

5.3CVSS5.1AI score0.01271EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2017/08/29 1:35 a.m.24 views

CVE-2016-2970

IBM Sametime 8.5 and 9.0 meetings server may provide detailed information in an error message that may provide details about the application to possible attackers. IBM X-Force ID: 113851...

4.3CVSS4.3AI score0.01093EPSS
SaveExploits0References4
Prion
Prion
added 2017/08/29 1:35 a.m.19 views

Design/Logic Flaw

IBM Sametime 8.5 and 9.0 meetings server may provide detailed information in an error message that may provide details about the application to possible attackers. IBM X-Force ID: 113851...

4CVSS6.2AI score0.01093EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2017/08/28 8:0 p.m.31 views

CVE-2016-2970

IBM Sametime 8.5 and 9.0 meetings server may provide detailed information in an error message that may provide details about the application to possible attackers. IBM X-Force ID: 113851...

4.3AI score0.01093EPSS
SaveExploits0References4
OSV
OSV
added 2017/08/28 7:29 p.m.6 views

CVE-2017-9978

On the OSNEXUS QuantaStor v4 virtual appliance before 4.3.1, a flaw was found with the error message sent as a response for users that don't exist on the system. An attacker could leverage this information to fine-tune and enumerate valid accounts on the system by searching for common usernames...

5.3CVSS5.8AI score0.04746EPSS
SaveExploits6References4
Cvelist
Cvelist
added 2017/08/28 7:0 p.m.22 views

CVE-2017-9978

On the OSNEXUS QuantaStor v4 virtual appliance before 4.3.1, a flaw was found with the error message sent as a response for users that don't exist on the system. An attacker could leverage this information to fine-tune and enumerate valid accounts on the system by searching for common usernames...

5.5AI score0.04746EPSS
SaveExploits6References4
Hacker One
Hacker One
added 2017/08/26 7:54 p.m.27 views

Legal Robot: Improper error message

Hi team, First of all congrats for good work to enforced the new password security policy during registration but the password error banner is not updated as per the changes. During registration it only shows the error when i enter the password if is is less than 8 chars. but if i enter the 8+...

2.3AI score
SaveExploits0
Veracode
Veracode
added 2017/08/25 5:50 a.m.12 views

Cross-Site Scripting (XSS)

swiftmailer/swiftmailer is vulnerable to cross-site scripting XSS. The vulnerability exists because \lib\classes\Swift\Mime\Headers\MailboxHeader.php uses unfiltered email address to print in the error message...

6.1AI score
SaveExploits0
NVD
NVD
added 2017/08/18 7:29 p.m.20 views

CVE-2017-9680

In all Qualcomm products with Android releases from CAF using the Linux kernel, if a pointer argument coming from userspace is invalid, a driver may use an uninitialized structure to log an error message...

7.5CVSS7.2AI score0.00519EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2017/08/16 3:0 p.m.28 views

CVE-2016-5853

In an audio driver in all Qualcomm products with Android releases from CAF using the Linux kernel, when a sanity check encounters a length value not in the correct range, an error message is printed, but code execution continues in the same way as for a correct length value...

7AI score0.00785EPSS
SaveExploits0References4
Hacker One
Hacker One
added 2017/08/14 11:6 a.m.33 views

Legal Robot: Incorrect error message

URL: https://app.legalrobot.com/sign-in In register page, When i enter more than 32 character in first name and last name fileld it says password length must be less than 32 characters. Why does password error showing in Name field???...

1.7AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2017/08/09 12:0 a.m.11 views

Fedora 25 : subversion (2017-b9e4c24094)

This update includes the latest stable release of Apache Subversion, version 1.9.6. User-visible changes: Client-side bugfixes : - cp/mv: improve error message when target is an unversioned dir - merge: reduce memory usage with large amounts of mergeinfo issue 4667 Server-side bugfixes : -...

5.4AI score
SaveExploits0References3
Citrix
Citrix
added 2017/08/08 12:0 a.m.14 views

"Access to your company network is not currently available" Error message while accessing Secure Hub XenMobile Store

Attempts to access the Store in Secure Hub causes an error "Access to your company network is not currently available". Please find the snapshot of an error message. Logs 2017-08-04T16:21:53.886+0200 ",X1AuthController,INFO 4,-AuthController getCertificateForURL:callback:,"Providing the certifica...

7AI score
SaveExploits0
Citrix
Citrix
added 2017/08/07 12:0 a.m.13 views

Receiver for Windows 4.8, error "The specified module could not be found."

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Unable to launch Published Desktops, it fails to launch with error"The specified module could not be...

7AI score
SaveExploits0
Hacker One
Hacker One
added 2017/08/05 5:41 a.m.27 views

Legal Robot: User enumeration from failed login error message

A security researcher reported an issue around user enumeration through examination of the failed registration error message. Since this change was reported, Legal Robot has switched to a method wherein any registration attempts for accounts that already exist will be redirected to the same...

1.3AI score
SaveExploits0
OSV
OSV
added 2017/07/31 9:29 p.m.5 views

CVE-2017-1370

IBM Jazz Reporting Service JRS 5.0 and 6.0 could disclose sensitive information, including user credentials, through an error message from the Report Builder administrator configuration page. IBM X-Force ID: 126863...

4.9CVSS5.7AI score0.01198EPSS
SaveExploits0References3
Prion
Prion
added 2017/07/31 9:29 p.m.13 views

Design/Logic Flaw

IBM Jazz Reporting Service JRS 5.0 and 6.0 could disclose sensitive information, including user credentials, through an error message from the Report Builder administrator configuration page. IBM X-Force ID: 126863...

4CVSS4.9AI score0.01198EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2017/07/31 9:29 p.m.25 views

CVE-2017-1370

IBM Jazz Reporting Service JRS 5.0 and 6.0 could disclose sensitive information, including user credentials, through an error message from the Report Builder administrator configuration page. IBM X-Force ID: 126863...

4.9CVSS4.9AI score0.01198EPSS
SaveExploits0References3
CVE
CVE
added 2017/07/31 9:0 p.m.51 views

CVE-2017-1370

CVE-2017-1370 affects IBM Jazz Reporting Service (JRS) versions 5.0–6.0 (as shipped with RRDI/Rational Insight). The vulnerability allows disclosure of sensitive information, including user credentials, via an error message on the Report Builder administrator configuration page. IBM security bull...

4.9CVSS4.9AI score0.01198EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder