3890 matches found
CVE-2016-5705
Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin 4.4.x before 4.4.15.7 and 4.6.x before 4.6.3 allow remote attackers to inject arbitrary web script or HTML via vectors involving 1 server-privileges certificate data fields on the user privileges page, 2 an "invalid JSON" error messa...
CVE-2016-5705
Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin 4.4.x before 4.4.15.7 and 4.6.x before 4.6.3 allow remote attackers to inject arbitrary web script or HTML via vectors involving 1 server-privileges certificate data fields on the user privileges page, 2 an "invalid JSON" error messa...
Design/Logic Flaw
phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 allows remote attackers to obtain sensitive information via vectors involving 1 an array value to FormDisplay.php, 2 incorrect data to validate.php, 3 unexpected data to Validator.php, 4 a missing config directory...
CVE-2016-5730
phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 allows remote attackers to obtain sensitive information via vectors involving 1 an array value to FormDisplay.php, 2 incorrect data to validate.php, 3 unexpected data to Validator.php, 4 a missing config directory...
CVE-2016-5705
Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin 4.4.x before 4.4.15.7 and 4.6.x before 4.6.3 allow remote attackers to inject arbitrary web script or HTML via vectors involving 1 server-privileges certificate data fields on the user privileges page, 2 an "invalid JSON" error messa...
CVE-2016-5731
CVE-2016-5731 is a cross‑site scripting (XSS) vulnerability in the phpMyAdmin OpenID authentication flow. The issue affects phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3, where an OpenID error message can be manipulated to inject arbitrary web script or HTML via...
Uber: Error Message on 404 page
Hi, I know this is not really...
MS16-075 and MS16-076: Description of the security update for Windows Netlogon and SMB Server: June 14, 2016
None None...
Error: "Gateway data from the request and the authentication token are not matching"
The following warning is displayed in the Event Viewer: Gateway data from the request and the authentication token are not matching...
Provisioning Server 7.6: Error- “vDisk is locked. 0xffff8017”
The vDisk is locked with the following error message: “vDisk is locked. 0xffff8017”...
ok.ru: Missing proper error message.
Steps to reproduce: 1.Load the URL: http://ok.ru/ in any browser. 2.Now goto Browser settings and disable the Cookies. 3.Try to login using valid credentials . 4.Observed that user is redirected to login page again without any proper error message . Technical Impact: This leads user to feel...
CVE-2016-4561
Cross-site scripting XSS vulnerability in the cgierror function in CGI.pm in ikiwiki before 3.20160506 might allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving an error message...
CVE-2016-4561
Cross-site scripting XSS vulnerability in the cgierror function in CGI.pm in ikiwiki before 3.20160506 might allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving an error message...
Cross site scripting
Cross-site scripting XSS vulnerability in the cgierror function in CGI.pm in ikiwiki before 3.20160506 might allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving an error message...
Cisco IOS-XE Fragmented Packet Resource Consumption Vulnerability
A vulnerability in the packet reassembly subsystem of Cisco IOS-XE could allow an unauthenticated, remote attacker to consume CPU resources which may lead to a denial of service DoS condition. The vulnerability is due to an error message that is triggered to the console and the syslog when a...
Shopify: staff memeber can install apps even if have limitied access
hey ; for example staff member have limit access to orders when this memeber want install app scope readorders ,error message showed : Oauth error invalidrequest: You do not have permission to access the requested scopes bug: ----- staff memeber can install app even if have limit access to scops...
Error: "Generate the new security key" on StoreFront
The following error is displayed when connecting to StoreFront: Generate the new security key...
Gratipay: Getting Error Message and in use python version 2.7 is exposed.
Getting Error Message and in use python version 2.7 is exposed. Application is unnecessarily exposing the following response headers and message which divulge its choice of web platform: Request is undecodable. /app/.heroku/python/lib/python2.7/encodings/utf8.py:16...
Veris: User enumeration via error message
Hi guys, Well, the issue is in authentication process, an attacker able to enumerate registered users on the site via brute forcing the login page, in case when user is not exist, system returns the following error message: "User not exist", in case when user exist, but incorrect password:...