3232 matches found
IBM Sametime Media Server Information Disclosure Vulnerability
IBM Sametime Media Server is a set of media servers for Sametime chat and conferencing from IBM in the United States. An information disclosure vulnerability exists in IBM Sametime Media Server versions 9 and 8.5, which stems from detailed application information appearing in error messages. An...
CVE-2016-2970
The CVE-2016-2970 entry concerns IBM Sametime 8.5 and 9.0 Meetings Server, where error messages may disclose detailed information about the application. The underlying issue is information disclosure via verbose error output, which could aid an attacker in understanding the software. Impact detai...
PT-2017-19316 · Osnexus · Quantastor
Name of the Vulnerable Software and Affected Versions: OSNEXUS QuantaStor versions prior to 4.3.1 Description: A flaw was found in the error message sent as a response for non-existent users on the system. This could allow an attacker to enumerate valid accounts by searching for common usernames...
Leakage Of Environment Variables
gitPython is vulnerable to the leakage of environment variables. The leakage happens through error messages because it does not use the unsafe variable in the expandpath method. The unsafe variable should be set to False to prevent this. However, the variable is set to True by default...
IBM Runbook Automation Information Disclosure Vulnerability
IBM Runbook Automation is a suite of automated operations software from IBM in the United States. The software is used to define, build, edit and manage systems and network operational processes, reducing manual tasks. An information disclosure vulnerability exists in IBM Runbook Automation that...
Design/Logic Flaw
IBM Runbook Automation reveals sensitive information in error messages that could be used in further attacks against the system. IBM X-Force ID: 126874...
CVE-2017-1377
IBM Runbook Automation reveals sensitive information in error messages that could be used in further attacks against the system. IBM X-Force ID: 126874...
CVE-2017-1377
Summary: CVE-2017-1377 affects IBM Runbook Automation. The vulnerability stems from error messages that reveal sensitive information about the application and database, which could be used to aid further attacks. The IBM security bulletin confirms the issue and provides remediation paths: if usin...
CVE-2017-1377
IBM Runbook Automation reveals sensitive information in error messages that could be used in further attacks against the system. IBM X-Force ID: 126874...
PT-2017-13089
Name of the Vulnerable Software and Affected Versions IBM Runbook Automation affected versions not specified Description The issue allows sensitive information to be revealed in error messages, which could potentially be used in further attacks against the system. Recommendations At the moment,...
CVE-2017-1377: Exposure of Sensitive Information to an Unauthorized Actor
IBM Runbook Automation reveals sensitive information in error messages that could be used in further attacks against the system. IBM X-Force ID: 126874...
Cross-site Scripting (XSS)
Moodle is vulnerable to cross-site scripting XSS attacks. The error messages created by scheduled tasks get presented to admin users without sufficient filtering...
CVE-2016-6018
IBM Emptoris Contract Management 10.0 and 10.1 reveals detailed error messages in certain features that could cause an attacker to gain additional information to conduct further attacks. IBM X-Force ID: 116738...
Code injection
IBM Emptoris Contract Management 10.0 and 10.1 reveals detailed error messages in certain features that could cause an attacker to gain additional information to conduct further attacks. IBM X-Force ID: 116738...
CVE-2016-6018
IBM Emptoris Contract Management 10.0 and 10.1 reveals detailed error messages in certain features that could cause an attacker to gain additional information to conduct further attacks. IBM X-Force ID: 116738...
CVE-2016-6018
IBM Emptoris Contract Management 10.0 and 10.1 reveals detailed error messages in certain features that could cause an attacker to gain additional information to conduct further attacks. IBM X-Force ID: 116738...
CVE-2016-6018: Exposure of Sensitive Information to an Unauthorized Actor
IBM Emptoris Contract Management 10.0 and 10.1 reveals detailed error messages in certain features that could cause an attacker to gain additional information to conduct further attacks. IBM X-Force ID: 116738...
PT-2017-8846
Name of the Vulnerable Software and Affected Versions IBM Emptoris Contract Management versions 10.0 through 10.1 Description The issue reveals detailed error messages in certain features, which could allow an attacker to gain additional information and conduct further attacks. Recommendations Fo...
CVE-2017-5000
EMC RSA Archer 5.4.1.3, 5.5.3.1, 5.5.2.3, 5.5.2, 5.5.1.3.1, 5.5.1.1 is affected by an information exposure through an error message vulnerability. A remote low privileged attacker may potentially exploit this vulnerability to use information disclosed in an error message to launch another more...