Change Password Option Not Working for Users Connecting to StoreFront

Users are able to log into StoreFront 2.5 successfully, but are unable to change passwords. Once a user clicks the change password menu option, they get error:Cannot complete your request. The user is then presented with a logon button. Event logs do not indicate issue. The StoreFront 2.5...

CVE-2015-7445

IBM Multi-Enterprise Integration Gateway 1.0 through 1.0.0.1 and B2B Advanced Communications 1.x before 1.0.0.4, when guest access is configured, allow remote authenticated users to obtain sensitive information by reading error messages in responses...

Design/Logic Flaw

IBM Multi-Enterprise Integration Gateway 1.0 through 1.0.0.1 and B2B Advanced Communications 1.x before 1.0.0.4, when guest access is configured, allow remote authenticated users to obtain sensitive information by reading error messages in responses...

CVE-2015-7445

IBM Multi-Enterprise Integration Gateway 1.0 through 1.0.0.1 and B2B Advanced Communications 1.x before 1.0.0.4, when guest access is configured, allow remote authenticated users to obtain sensitive information by reading error messages in responses...

CVE-2015-7445: Exposure of Sensitive Information to an Unauthorized Actor

IBM Multi-Enterprise Integration Gateway 1.0 through 1.0.0.1 and B2B Advanced Communications 1.x before 1.0.0.4, when guest access is configured, allow remote authenticated users to obtain sensitive information by reading error messages in responses...

PT-2016-3782

Name of the Vulnerable Software and Affected Versions IBM Multi-Enterprise Integration Gateway versions 1.0 through 1.0.0.1 B2B Advanced Communications versions 1.x before 1.0.0.4 Description The issue allows remote authenticated users to obtain sensitive information by reading error messages in...

CVE-2015-8669

libraries/config/messages.inc.php in phpMyAdmin 4.0.x before 4.0.10.12, 4.4.x before 4.4.15.2, and 4.5.x before 4.5.3.1 allows remote attackers to obtain sensitive information via a crafted request, which reveals the full path in an error message...

SUSE SLED11 / SLES11 Security Update : krb5 (SUSE-SU-2015:2294-1)

The krb5 package was updated to fix the following security and non security issues : - CVE-2015-2695: Fixed missing functions that were still vulnerable bsc954270. - Fixed a memory leak in the handling of error messages bsc954470. Note that Tenable Network Security has extracted the preceding...

SUSE-SU-2015:2294-1 Security update for krb5

The krb5 package was updated to fix the following security and non security issues: - CVE-2015-2695: Fixed missing functions that were still vulnerable bsc954270. - Fixed a memory leak in the handling of error messages bsc954470...

Attackers Embracing Steganography to Hide Communication

Encouraged by patterns carried out on a larger scale recently, researchers believe digital steganography has arrived as a legitimate method for attackers to use when it comes to obscuring communication between command and control servers. In a presentation last week at Black Hat Europe researcher...

Information disclosure

Infinite Automation Mango Automation 2.5.x and 2.6.x before 2.6.0 build 430 provides different error messages for failed login attempts in unspecified circumstances, which allows remote attackers to obtain sensitive information via a series of requests...

CVE-2015-7902

Infinite Automation Mango Automation 2.5.x and 2.6.x before 2.6.0 build 430 provides different error messages for failed login attempts in unspecified circumstances, which allows remote attackers to obtain sensitive information via a series of requests...

CVE-2015-0143

IBM OpenPages GRC Platform 6.2 before IF7, 6.2.1 before 6.2.1.1 IF5, 7.0 before FP4, and 7.1 before FP1 allows remote authenticated users to obtain sensitive information by reading error messages...

CVE-2015-0143

IBM OpenPages GRC Platform is vulnerable to information disclosure via error messages for authenticated users. Affected versions include 6.2 through 7.1 (specifically 6.2 before IF7, 6.2.1 before 6.2.1.1 IF5, 7.0 before FP4, and 7.1 before FP1). The underlying issue is exposure of sensitive infor...

CVE-2015-0143: Exposure of Sensitive Information to an Unauthorized Actor

IBM OpenPages GRC Platform 6.2 before IF7, 6.2.1 before 6.2.1.1 IF5, 7.0 before FP4, and 7.1 before FP1 allows remote authenticated users to obtain sensitive information by reading error messages...

PT-2015-4501

Name of the Vulnerable Software and Affected Versions IBM OpenPages GRC Platform versions 6.2 before IF7 IBM OpenPages GRC Platform versions 6.2.1 before 6.2.1.1 IF5 IBM OpenPages GRC Platform versions 7.0 before FP4 IBM OpenPages GRC Platform versions 7.1 before FP1 Description The issue allows...

F5 Networks BIG-IP : Insufficient validation of ICMP error messages (SOL4583)

The remote BIG-IP device is missing a patch required by a security advisory. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from F5 Networks BIG-IP Solution SOL4583. The text description of this plugin is C F5 Networks...

MGASA-2015-0310 Updated qemu package fixes security vulnerability

Matt Tait discovered that QEMU incorrectly handled the virtual PCNET driver. A malicious guest could use this issue to cause a denial of service, or possibly execute arbitrary code on the host as the user running the QEMU process CVE-2015-3209. Kurt Seifried discovered that QEMU incorrectly handl...

PT-2017-6795

Name of the Vulnerable Software and Affected Versions IPython versions prior to 3.2 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via vectors involving JSON error messages and the "api/contents" path. Recommendations For IPython versio...

PT-2017-6796

Name of the Vulnerable Software and Affected Versions IPython versions prior to 3.2 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via vectors involving JSON error messages and the "api/notebooks" path. Recommendations For versions prio...