3209 matches found
PT-2024-23211
Name of the Vulnerable Software and Affected Versions HCL BigFix Compliance version 2.0.11 Description The issue concerns the generation of error messages that contain sensitive information. Detailed error messages can provide enticing information or expose details about the environment, users, o...
CVE-2024-52043 User enumeration in HubHub
Generation of Error Message Containing Sensitive Information in HumHub GmbH & Co. KG - HumHub on Linux allows: Excavation user enumeration.This issue affects all released HumHub versions: through 1.16.2...
jenkins: Exposure of multi-line secrets through error messages
A flaw was found in Jenkins. Certain versions do not redact multi-line secret values in error messages generated for form submissions involving the secretTextarea form field...
jenkins: Exposure of multi-line secrets through error messages
A flaw was found in Jenkins. Certain versions do not redact multi-line secret values in error messages generated for form submissions involving the secretTextarea form field...
jenkins: Exposure of multi-line secrets through error messages
A flaw was found in Jenkins. Certain versions do not redact multi-line secret values in error messages generated for form submissions involving the secretTextarea form field...
jenkins: Exposure of multi-line secrets through error messages
A flaw was found in Jenkins. Certain versions do not redact multi-line secret values in error messages generated for form submissions involving the secretTextarea form field...
Mattermost Server 9.5.x < 9.5.9 / 9.10.x < 9.10.2 / 9.11.x < 9.11.1 Multiple Vulnerabilities
The version of Mattermost Server installed on the remote host is prior to 9.5.9, 9.10.2, or 9.11.1. It is, therefore, affected by multiple vulnerabilities. - Mattermost versions 9.10.x = 9.10.2, 9.11.x = 9.11.1, 9.5.x = 9.5.9 fail to sanitize user inputs in the frontend that are used for...
PT-2024-34288 · Posti · Posti Shipping
Name of the Vulnerable Software and Affected Versions: Posti Shipping versions 3.10.2 and earlier Description: The issue allows the retrieval of embedded sensitive data due to the generation of error messages containing sensitive information. Recommendations: For Posti Shipping versions 3.10.2 an...
GHSA-762V-RQ7Q-FF97 Mattermost Server vulnerable to application crash from attacker-generated large response
Mattermost versions 9.10.x = 9.10.2, 9.11.x = 9.11.1 and 9.5.x = 9.5.9 fail to prevent detailed error messages from being displayed in Playbooks which allows an attacker to generate a large response and cause an amplified GraphQL response which in turn could cause the application to crash by...
Mattermost Server vulnerable to application crash from attacker-generated large response
Mattermost versions 9.10.x = 9.10.2, 9.11.x = 9.11.1 and 9.5.x = 9.5.9 fail to prevent detailed error messages from being displayed in Playbooks which allows an attacker to generate a large response and cause an amplified GraphQL response which in turn could cause the application to crash by...
CVE-2024-47401
Mattermost versions 9.10.x = 9.10.2, 9.11.x = 9.11.1 and 9.5.x = 9.5.9 fail to prevent detailed error messages from being displayed in Playbooks which allows an attacker to generate a large response and cause an amplified GraphQL response which in turn could cause the application to crash by...
CVE-2024-47401 DoS via Amplified GraphQL Response in Playbooks
Mattermost versions 9.10.x = 9.10.2, 9.11.x = 9.11.1 and 9.5.x = 9.5.9 fail to prevent detailed error messages from being displayed in Playbooks which allows an attacker to generate a large response and cause an amplified GraphQL response which in turn could cause the application to crash by...
CVE-2024-47401
Mattermost versions 9.10.x = 9.10.2, 9.11.x = 9.11.1 and 9.5.x = 9.5.9 fail to prevent detailed error messages from being displayed in Playbooks which allows an attacker to generate a large response and cause an amplified GraphQL response which in turn could cause the application to crash by...
CVE-2024-47401
CVE-2024-47401 affects Mattermost Playbooks in versions 9.10.x up to 9.10.2, 9.11.x up to 9.11.1, and 9.5.x up to 9.5.9. The issue arises because the product does not prevent detailed error messages from being displayed, enabling an attacker to generate a large response and trigger an amplified G...
CVE-2024-47401 DoS via Amplified GraphQL Response in Playbooks
Mattermost versions 9.10.x = 9.10.2, 9.11.x = 9.11.1 and 9.5.x = 9.5.9 fail to prevent detailed error messages from being displayed in Playbooks which allows an attacker to generate a large response and cause an amplified GraphQL response which in turn could cause the application to crash by...
CVE-2024-47401 DoS via Amplified GraphQL Response in Playbooks
Mattermost versions 9.10.x = 9.10.2, 9.11.x = 9.11.1 and 9.5.x = 9.5.9 fail to prevent detailed error messages from being displayed in Playbooks which allows an attacker to generate a large response and cause an amplified GraphQL response which in turn could cause the application to crash by...
PT-2024-35536
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue arises when loading the amd pmc module with enable stb=1, resulting in error messages in the kernel ring buffer, including SMU cmd failed and ioremap warnings. This occurs when...
openvpn -- too long a username or password from a client can confuse openvpn servers
Frank Lichtenheld reports: OpenVPN v2.6.13 ... improve server-side handling of clients sending usernames or passwords longer than USERPASSLEN - this would not result in a crash, buffer overflow or other security issues, but the server would then misparse incoming IV variables and produce misleadi...