CVE-2022-38107 Sensitive Data Disclosure Vulnerability

Sensitive information could be displayed when a detailed technical error message is posted. This information could disclose environmental details...

PT-2022-24205 · Solarwinds · Sql Sentry

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: Sensitive information could be displayed when a detailed technical error message is posted, potentially disclosing environmental details. Recommendations: At the moment, there is no...

SolarWinds SQL Sentry 安全漏洞

SolarWinds SQL Sentry is a SQL Server performance monitoring tool from SolarWinds USA. It is designed to help you quickly identify problems and optimize performance. A security vulnerability exists in SolarWinds SQL Sentry version 2021.10.18 and earlier versions, which stems from the possibility ...

Microsoft Windows TCP/IP component denial of service vulnerability

Microsoft Windows TCP/IP component is a component of Microsoft Corporation USA that provides TCP/IP configuration functionality for Windows.A denial of service vulnerability exists in Microsoft Windows TCP/IP, which stems from a failure to properly handle incoming error messages. An attacker coul...

Microsoft Windows Secure Channel Denial of Service Vulnerability

Microsoft Windows is a set of operating systems for personal devices from Microsoft Corporation USA. A denial of service vulnerability exists in Microsoft Windows Secure Channel, which stems from a failure to properly handle incoming error messages and can be exploited by attackers to cause a...

Microsoft Windows Event Logging Service Denial of Service Vulnerability

A denial of service vulnerability exists in Microsoft Windows Event Logging Service, an operating system used by Microsoft for personal devices. The vulnerability stems from a failure to properly handle incoming error messages, and an attacker could exploit the vulnerability to cause a denial of...

Microsoft Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability

Microsoft Windows Local Security Authority Subsystem Service is an internal program of Microsoft Corporation USA that runs Windows system security policies. It verifies user identity, manages user password changes, and generates access characters when a user logs on to a computer standalone or...

Microsoft Windows Secure Channel 安全漏洞

Microsoft Windows is a set of operating systems for personal devices from Microsoft Corporation USA. A denial of service vulnerability exists in Microsoft Windows Secure Channel, which stems from a failure to properly handle incoming error messages and can be exploited by attackers to cause a...

Microsoft Windows Event Logging Service 资源管理错误漏洞

A denial of service vulnerability exists in Microsoft Windows Event Logging Service, an operating system used by Microsoft for personal devices. The vulnerability stems from a failure to properly handle incoming error messages, and an attacker could exploit the vulnerability to cause a denial of...

Microsoft Windows Local Session Manager (LSM) 安全漏洞

A denial of service vulnerability exists in Microsoft Windows Local Session Manager LSM, which stems from a failure to properly handle incoming error messages and can be exploited by attackers to cause application denial of service...

Apple iOS 输入验证错误漏洞

A denial-of-service vulnerability exists in versions of Apple iOS prior to 16.0.3, which stems from a failure to properly handle incoming error messages and could be exploited to launch a denial-of-service attack via a maliciously crafted email...

The vulnerability of Mozilla Firefox, Mozilla Firefox ESR, and the email client Thunderbird relates to the leakage of information in error messages, allowing an intruder to disclose protected information.

The vulnerabilities of Mozilla Firefox, Mozilla Firefox ESR, and the email client Thunderbird are related to the leakage of information in error messages. Exploiting these vulnerabilities can allow an attacker to disclose sensitive information that is protected by these systems...

Octopus Deploy 安全漏洞

Octopus Deploy is an automation tool for .NET, Java and other application development and deployment from Octopus Deploy Australia. A security vulnerability exists in Octopus Deploy that stems from the possibility of displaying the space ID of a space that the user is not authorized to view in an...

GO-2022-0980 Exposure of Vault secrets via error messages in github.com/hashicorp/consul-template

The text of errors returned by Template.Execute can contain Vault secrets, potentially revealing these secrets in logs or error reports...

CVE-2021-38924

IBM Maximo Asset Management 7.6.1.1 and 7.6.1.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 210163...

PT-2022-10805 · Ibm · Ibm Maximo Asset Management

Name of the Vulnerable Software and Affected Versions: IBM Maximo Asset Management versions 7.6.1.1 through 7.6.1.2 Description: The issue allows a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in...

CVE-2022-34882

Information Exposure Through an Error Message vulnerability in Hitachi RAID Manager Storage Replication Adapter allows remote authenticated users to gain sensitive information. This issue affects: Hitachi RAID Manager Storage Replication Adapter 02.01.04 versions prior to 02.03.02 on Windows;...

NoSQL Injection Authentication Bypass

A NoSQL injection occurs when a value originating from the client's request is used within a NoSQL call without prior sanitisation. This can allow cyber-criminals to execute arbitrary NoSQL code and thus steal data, or use the additional functionality of the database server to take control of...

Ubuntu: Security Advisory (USN-364-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

AZL-10716 CVE-2021-42523 affecting package colord for versions less than 1.4.4-9

There are two Information Disclosure vulnerabilities in colord, and they lie in colord/src/cd-device-db.c and colord/src/cd-profile-db.c separately. They exist because the 'errmsg' of 'sqlite3exec' is not releasing after use, while libxml2 emphasizes that the caller needs to release it...