Medium: postgresql8

Issue Overview: An information leak flaw was found in the way the PostgreSQL database server handled certain error messages. An authenticated database user could possibly obtain the results of a query they did not have privileges to execute by observing the constraint violation error messages...

PT-2015-5412

Name of the Vulnerable Software and Affected Versions ASP.NET in Microsoft .NET Framework versions 1.1 SP1 through 4.5.2 Description An information disclosure issue exists due to improper handling of certain requests when custom error messages are disabled. This could allow an attacker to view...

Microsoft ASP.NET Information Disclosure (MS15-041; CVE-2015-1648)

An information disclosure vulnerability exists in Microsoft .NET Framework. The vulnerability is due to improper requests sanitization on servers with error messages disabled. A remote attacker can exploit this vulnerability by sending specially crafted requests to the vulnerable server...

Citrix NetScaler Nitro API Cross-Site Scripting Vulnerability

Citrix NetScaler is a network traffic management product. A cross-site scripting vulnerability exists in the Citrix NetScaler Nitro API, which allows remote attackers to exploit the vulnerability to obtain sensitive information or hijack a user's session, due to the program using the wrong...

postgresql: information leak through constraint violation errors

An information leak flaw was found in the wathe PostgreSQL database server handled certain error messages. An authenticated database user could possibly obtain the results of a query they did not have privileges to execute by observing the constraint violation error messages produced when the que...

Websense TRITON AP-WEB and V-Series Module Cross-Site Scripting Vulnerability

Websense TRITON AP-WEB and V-Series are both products of Websense, Inc. The TRITON AP-WEB is available as a unified solution for local, remote, mobile, and cloud users through the V-Series, which is a V-Series module used in Websense applications. A cross-site scripting vulnerability exists in...

Medium: postgresql92

Issue Overview: A buffer overflow flaw was found in the way PostgreSQL handled certain numeric formatting. An authenticated database user could use a specially crafted timestamp formatting template to cause PostgreSQL to crash or, under certain conditions, execute arbitrary code with the...

Mandriva Linux Security Advisory : postgresql (MDVSA-2015:048)

Multiple vulnerabilities has been discovered and corrected in postgresql : Stephen Frost discovered that PostgreSQL incorrectly displayed certain values in error messages. An authenticated user could gain access to seeing certain values, contrary to expected permissions CVE-2014-8161. Andres...

USN-2499-1: PostgreSQL vulnerabilities

Stephen Frost discovered that PostgreSQL incorrectly displayed certain values in error messages. An authenticated user could gain access to seeing certain values, contrary to expected permissions. CVE-2014-8161 Andres Freund, Peter Geoghegan and Noah Misch discovered that PostgreSQL incorrectly...

postgresql: multiple issues

CVE-2014-8161 information leak Some server error messages show the values of columns that violate a constraint, such as a unique constraint. If the user does not have SELECT privilege on all columns of the table, this could mean exposing values that the user should not be able to see. Adjust the...

CVE-2015-0404

Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote attackers to affect integrity via unknown vectors related to Error Messages...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote attackers to affect integrity via unknown vectors related to Error Messages...

CVE-2015-0404

Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote attackers to affect integrity via unknown vectors related to Error Messages...

CVE-2015-0404

CVE-2015-0404 affects Oracle E-Business Suite (11.5.10.2, 12.0.6, 12.1.3, 12.2.2, 12.2.3, 12.2.4) in the Oracle Applications Framework component. The vulnerability, described as an unspecified issue related to Error Messages, allows remote attackers to affect integrity via unknown vectors. Connec...

CVE-2015-0404: Undefined Security Weakness

Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote attackers to affect integrity via unknown vectors related to Error Messages...

PT-2015-4615

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 11.5.10.2, 12.0.6, 12.1.3, 12.2.2, 12.2.3, 12.2.4 Description The issue affects the integrity of the system, allowing remote attackers to exploit it via unknown vectors related to Error Messages. Recommendation...

Authentication flaw

The login function in Softaculous Webuzo before 2.1.4 provides different error messages for invalid authentication attempts depending on whether the user account exists, which allows remote attackers to enumerate usernames via a series of requests...

mysql: Remote Preauth User Enumeration flaw

Oracle MySQL 5.5.38 and earlier, 5.6.19 and earlier, and MariaDB 5.5.28a, 5.3.11, 5.2.13, 5.1.66, and possibly other versions, generates different error messages with different time delays depending on whether a user name exists, which allows remote attackers to enumerate valid usernames...

Design/Logic Flaw

McAfee Network Data Loss Prevention NDLP before 9.2.2 allows local users to obtain sensitive information by reading unspecified error messages...

PT-2014-8599

Name of the Vulnerable Software and Affected Versions McAfee Network Data Loss Prevention NDLP versions prior to 9.2.2 Description The issue allows local users to obtain sensitive information by reading unspecified error messages. Recommendations For versions prior to 9.2.2, update to version 9.2...