3229 matches found
CVE-2019-4636
IBM Security Secret Server 10.7 could disclose sensitive information to an authenticated user from generated error messages. IBM X-Force ID: 170013...
Code injection
IBM Security Secret Server 10.7 could disclose sensitive information to an authenticated user from generated error messages. IBM X-Force ID: 170013...
CVE-2019-4636
IBM Security Secret Server 10.7 could disclose sensitive information to an authenticated user from generated error messages. IBM X-Force ID: 170013...
CVE-2019-4636: Generation of Error Message Containing Sensitive Information
IBM Security Secret Server 10.7 could disclose sensitive information to an authenticated user from generated error messages. IBM X-Force ID: 170013...
PT-2020-11000
Name of the Vulnerable Software and Affected Versions IBM Security Secret Server version 10.7 Description The issue could disclose sensitive information to an authenticated user from generated error messages. Recommendations For IBM Security Secret Server version 10.7, update to a version that...
Code injection
Evoko Home 1.31 devices provide different error messages for failed login requests depending on whether the username is valid...
CVE-2020-7231
Evoko Home 1.31 devices provide different error messages for failed login requests depending on whether the username is valid...
Information Disclosure
type-graphql is vulnerable to information disclosure. The full resolver source is disclosed in error messages when no subscription topics are provided due to improper parsing of the target parameter in MissingSubscriptionTopicsError.ts...
SAP Enable Now Information Disclosure Vulnerability (CNVD-2020-09646)
SAP Enable Now is a collaborative content creation, management and sharing platform from SAP. The platform is mainly used for online learning and training in SAP and non-SAP systems. An information disclosure vulnerability exists in SAP Enable Now. An attacker could exploit this vulnerability to...
Information disclosure
SAP Enable Now, before version 1911, leaks information about network configuration in the server error messages, leading to Information Disclosure...
CVE-2019-0404
SAP Enable Now, before version 1911, leaks information about network configuration in the server error messages, leading to Information Disclosure...
PT-2019-11238
Name of the Vulnerable Software and Affected Versions: SAP Enable Now versions prior to 1911 Description: The issue leads to information disclosure due to the leakage of network configuration details in server error messages. Recommendations: For versions prior to 1911, update to version 1911 or...
CVE-2019-0404: Generation of Error Message Containing Sensitive Information
SAP Enable Now, before version 1911, leaks information about network configuration in the server error messages, leading to Information Disclosure...
PT-2020-9623
Name of the Vulnerable Software and Affected Versions Moodle versions 3.5 through 3.5.9 Moodle versions 3.6 through 3.6.7 Moodle versions 3.7 through 3.7.3 Description A reflected XSS is possible from some fatal error messages. This issue affects various versions of Moodle, allowing for potential...
CVE-2011-3600
The /webtools/control/xmlrpc endpoint in OFBiz XML-RPC event handler is exposed to External Entity Injection by passing DOCTYPE declarations with executable payloads that discloses the contents of files in the filesystem. In addition, it can also be used to probe for open network ports, and figur...
CVE-2011-4924
Cross-site scripting XSS vulnerability in Zope 2.8.x before 2.8.12, 2.9.x before 2.9.12, 2.10.x before 2.10.11, 2.11.x before 2.11.6, and 2.12.x before 2.12.3, 3.1.1 through 3.4.1. allows remote attackers to inject arbitrary web script or HTML via vectors related to the way error messages perform...
CVE-2011-4924
Cross-site scripting XSS vulnerability in Zope 2.8.x before 2.8.12, 2.9.x before 2.9.12, 2.10.x before 2.10.11, 2.11.x before 2.11.6, and 2.12.x before 2.12.3, 3.1.1 through 3.4.1. allows remote attackers to inject arbitrary web script or HTML via vectors related to the way error messages perform...
CVE-2011-4924: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Zope 2.8.x before 2.8.12, 2.9.x before 2.9.12, 2.10.x before 2.10.11, 2.11.x before 2.11.6, and 2.12.x before 2.12.3, 3.1.1 through 3.4.1. allows remote attackers to inject arbitrary web script or HTML via vectors related to the way error messages perform...
PT-2019-6709
Name of the Vulnerable Software and Affected Versions Zope versions 2.8.x through 2.8.11 Zope versions 2.9.x through 2.9.11 Zope versions 2.10.x through 2.10.10 Zope versions 2.11.x through 2.11.5 Zope versions 2.12.x through 2.12.2 Zope versions 3.1.1 through 3.4.1 Description A cross-site...
