3233 matches found
User enumeration with error messages - ownCloud
This issue occurs at sending a password reset E-Mail, where a difference in error messages could allow an attacker to determine if the username is valid or not Affected Software ownCloud Server 9.1.3 CVE-2017-5865 core/d2f47acb38675d2798fe9e9b6294981f24613d40 ownCloud Server 9.0.7 CVE-2017-5865...
Flooding logfiles with a 1 Bit BMP File - ownCloud
An Attacker can upload a 1 Bit BMP File and the server hangs and doesn't stop to populate a logfile Affected Software ownCloud Server 9.1.3 CVE-2017-5867 core/0f1da72db6cd3ca08d166d96c57f39b8563d048f ownCloud Server 9.0.7 CVE-2017-5867 core/69fcf706fc7125c028b87fe8224a544ff124dc4b ownCloud Server...
Server: User enumeration with error messages
This issue occurs at sending a password reset E-Mail, where a difference in error messages could allow an attacker to determine if the username is valid or not For more information please consult the official advisory. This advisory is licensed CC BY-SA 4.0...
CVE-2016-5988
IBM Security Privileged Identity Manager Virtual Appliance could disclose sensitive information in generated error messages that would be available to an authenticated user...
CVE-2016-5988
IBM Security Privileged Identity Manager Virtual Appliance could disclose sensitive information in generated error messages that would be available to an authenticated user...
CVE-2016-3021
IBM Security Access Manager for Web could allow an authenticated attacker to obtain sensitive information from error message using a specially crafted HTTP request...
CVE-2016-3021
IBM Security Access Manager for Web could allow an authenticated attacker to obtain sensitive information from error message using a specially crafted HTTP request...
PT-2017-8300
Name of the Vulnerable Software and Affected Versions IBM Security Access Manager for Web affected versions not specified Description The issue allows an authenticated attacker to obtain sensitive information from error messages using a specially crafted HTTP request. Recommendations At the momen...
CVE-2016-5988: Exposure of Sensitive Information to an Unauthorized Actor
IBM Security Privileged Identity Manager Virtual Appliance could disclose sensitive information in generated error messages that would be available to an authenticated user...
CVE-2017-2592
An information-disclosure flaw was found in oslo.middleware. Software using the CatchError class could include sensitive values in a traceback's error message. System users could exploit this flaw to obtain sensitive information from OpenStack component error logs for example, keystone tokens...
Unable to boot target device to a server with error " Connecting to the Provisioning services. Please wait"
PVS:7.6: Facing issue with target...
DEBIAN-CVE-2016-9839
In MapServer before 7.0.3, OGR driver error messages are too verbose and may leak sensitive information if data connection fails...
CVE-2016-9839
In MapServer before 7.0.3, OGR driver error messages are too verbose and may leak sensitive information if data connection fails...
Design/Logic Flaw
In MapServer before 7.0.3, OGR driver error messages are too verbose and may leak sensitive information if data connection fails...
CVE-2016-9839
In MapServer before 7.0.3, OGR driver error messages are too verbose and may leak sensitive information if data connection fails...
CVE-2016-9839
In MapServer before 7.0.3, OGR driver error messages are too verbose and may leak sensitive information if data connection fails...
CVE-2016-9839
In MapServer before 7.0.3, OGR driver error messages are too verbose and may leak sensitive information if data connection fails...
CVE-2016-9839: Exposure of Sensitive Information to an Unauthorized Actor
In MapServer before 7.0.3, OGR driver error messages are too verbose and may leak sensitive information if data connection fails...
Nextcloud: Login Hints on Admin Panel
Hi, Hope you are doing fine. I wanted to inform you regarding the enabling of the login hints on your wp-admin panelhttps://nextcloud.com/wp-login.php. Vulnerability: The admin panel shows very "specific" hint information if a hacker tries for a bruteforcing attack. Steps to reproduce: 1. Navigat...
SSRF Team Calendars
The following endpoint has an SSRF that can be used to enumerate internal network resources that are not publicly exposed to the internet. noformat PUT /wiki/rest/calendar-services/1.0/calendar/subcalendars.json noformat PoC Using the "Team Calendar" macro, select the "Subscribe by URL" option...