Lucene search
K

3856 matches found

Vulnrichment
Vulnrichment
added 2025/04/23 10:23 p.m.8 views

CVE-2025-25045 IBM InfoSphere Information Server information disclosure

IBM InfoSphere Information 11.7 Server authenticated user to obtain sensitive information when a detailed technical error message is returned in a request. This information could be used in further attacks against the system...

4.3CVSS5.9AI score0.00239EPSS
Exploits0References1
CVE
CVE
added 2025/04/23 10:23 p.m.66 views

CVE-2025-25045

IBM InfoSphere Information Server 11.7 is affected by CVE-2025-25045, a sensitive information disclosure caused by authenticated users receiving detailed technical error messages in requests. The IBM Security Bulletin confirms the vulnerability and lists affected product/version: InfoSphere Infor...

4.3CVSS4.1AI score0.00239EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2025/04/23 12:0 a.m.6 views

PT-2025-29008

Name of the Vulnerable Software and Affected Versions: Linux Kernel affected versions not specified Description: The Linux kernel contains an issue within the smartpqi module related to the smp processor id function. Calling smp processor id in preemptible kernels can lead to an error message and...

7.8CVSS8.5AI score0.03133EPSS
Exploits11References1839
CVE
CVE
added 2025/04/18 7:1 a.m.133 views

CVE-2025-38240

The CVE-2025-38240 entry concerns a NULL pointer dereference in Linux kernel Mediatek DP/HPD path (mtk_dp_wait_hpd_asserted) when mtk_dp->drm_dev is not yet assigned, leading to NULL dereferences if drm prints are emitted in the call path. The issue is mitigated by changing error messages to u...

5.5CVSS6.6AI score0.00216EPSS
Exploits0References5Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2025/04/15 3:59 a.m.11 views

Security Bulletin: Multiple vulnerabilities found in IBM EntireX.

Summary IBM EntireX has been updated in order to address multiple vulnerabilities. Vulnerability Details CVEID:CVE-2024-56812 DESCRIPTION: IBM EntireX could allow a local user to obtain sensitive information when a detailed technical error message is returned. This information could be used in...

6.5CVSS5AI score0.00435EPSS
Exploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2025/04/15 3:29 a.m.18 views

Security Bulletin: The IBM® Engineering Lifecycle Management is impacted by vulnerability which can allow remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser

Summary A vulnerability has been identified under which sensitive application information might be leaked to a remote attacker when a detailed technical error message is returned in the browser which is being used in IBM Engineering Lifecycle Management - IBM Jazz. This bulletin contains...

4.3CVSS4.6AI score0.00338EPSS
Exploits0Affected Software1
Positive Technologies
Positive Technologies
added 2025/04/14 12:0 a.m.2 views

PT-2025-16231

Name of the Vulnerable Software and Affected Versions: SoftCOM iKSORIS Internet Starter versions prior to 79.0 Description: The issue is related to client-side Denial of Service DoS attacks. An attacker can trick a user into using a URL with a d parameter set to an unhandled value, causing the...

6.5CVSS6.5AI score0.00269EPSS
Exploits0References8
CVE
CVE
added 2025/04/10 1:2 p.m.60 views

CVE-2024-11129

CVE-2024-11129 affects GitLab Enterprise Edition (GitLab EE) versions 17.1–17.8.7, 17.9–17.9.6, and 17.10–17.10.4. Status: is a vulnerability where an attacker can perform targeted searches with sensitive keywords to determine the count of issues containing the searched term. The description does...

7.5CVSS6.1AI score0.00298EPSS
Exploits0References2Affected Software1
Microsoft CVE
Microsoft CVE
added 2025/04/08 7:0 a.m.1 views

RabbitMQ has XSS Vulnerability in an Error Message in Management UI

...

6.1CVSS6.2AI score0.0019EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/04/06 5:21 p.m.28 views

CVE-2025-32238

Generation of Error Message Containing Sensitive Information vulnerability in vcita Online Booking & Scheduling Calendar for WordPress by vcita meeting-scheduler-by-vcita allows Retrieve Embedded Sensitive Data.This issue affects Online Booking & Scheduling Calendar for WordPress by vcita: from n...

4.3CVSS7.2AI score0.00405EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/04/04 3:59 p.m.6 views

CVE-2025-32238 WordPress Online Booking & Scheduling Calendar for WordPress by vcita plugin <= 4.5.5 - Sensitive Data Exposure vulnerability

Generation of Error Message Containing Sensitive Information vulnerability in vcita Online Booking & Scheduling Calendar for WordPress by vcita meeting-scheduler-by-vcita allows Retrieve Embedded Sensitive Data.This issue affects Online Booking & Scheduling Calendar for WordPress by vcita: from n...

4.3CVSS7.2AI score0.00405EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/04/04 3:59 p.m.14 views

CVE-2025-32238 WordPress Online Booking & Scheduling Calendar for WordPress by vcita plugin <= 4.5.5 - Sensitive Data Exposure vulnerability

Generation of Error Message Containing Sensitive Information vulnerability in vcita Online Booking & Scheduling Calendar for WordPress by vcita meeting-scheduler-by-vcita allows Retrieve Embedded Sensitive Data.This issue affects Online Booking & Scheduling Calendar for WordPress by vcita: from n...

4.3CVSS0.00405EPSS
Exploits0References1
CVE
CVE
added 2025/04/04 3:59 p.m.66 views

CVE-2025-32238

Technical specifics for CVE-2025-32238 (vcita WordPress plugin) are not provided in the connected documents. Public details about affected versions, impact, vectors, or fixes are not available here; monitor for updates from the vendor/security sources.

4.3CVSS7.2AI score0.00405EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2025/04/03 12:0 a.m.16 views

HCL Traveler 安全漏洞

HCL Traveler is a software from HCL India. It is used to provide automatic, bi-directional, wireless synchronization between HCL Domino servers and wireless handheld devices. A security vulnerability exists in HCL Traveler that originates from a Windows application accidentally disclosing interna...

4.3CVSS6.7AI score0.00235EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/03/31 12:38 p.m.11 views

CVE-2024-55895

IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system...

5.3CVSS3.4AI score0.00284EPSS
Exploits0References1
NVD
NVD
added 2025/03/29 1:15 p.m.10 views

CVE-2024-55895

IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system...

5.3CVSS0.00284EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/03/29 12:22 p.m.8 views

CVE-2024-55895 IBM InfoSphere Information Server information disclosure

IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system...

2.7CVSS6.1AI score0.00284EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/03/29 12:22 p.m.16 views

CVE-2024-55895 IBM InfoSphere Information Server information disclosure

IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system...

2.7CVSS0.00284EPSS
Exploits0References1
CVE
CVE
added 2025/03/29 12:22 p.m.69 views

CVE-2024-55895

CVE-2024-55895 affects IBM InfoSphere Information Server 11.7. The issue is information disclosure: a remote attacker could obtain sensitive information via a browser displaying detailed technical error messages. IBM’s security bulletin confirms the root cause as error messages leaking informatio...

5.3CVSS6.4AI score0.00284EPSS
Exploits0References1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2025/03/28 10:12 p.m.10 views

Security Bulletin: IBM InfoSphere Information Server is affected by an information disclosure vulnerability (CVE-2024-55895)

Summary An information disclosure vulnerability in IBM InfoSphere Information Server was addressed. Vulnerability Details CVEID:CVE-2024-55895 DESCRIPTION: IBM InfoSphere Information Server could allow a remote attacker to obtain sensitive information when a detailed technical error message is...

5.3CVSS6.3AI score0.00284EPSS
Exploits0Affected Software1
Rows per page
Query Builder