Lucene search
+L

3233 matches found

NVD
NVD
•added 2014/01/21 6:55 p.m.•25 views

CVE-2013-0157

a mount and b umount in util-linux 2.14.1, 2.17.2, and probably other versions allow local users to determine the existence of restricted directories by 1 using the --guess-fstype command-line option or 2 attempting to mount a non-existent device, which generates different error messages dependin...

2.1CVSS6AI score0.00375EPSS
SaveExploits0References6
osv_debian
osv_debian
•added 2014/01/21 6:55 p.m.•16 views

DEBIAN-CVE-2013-0157

a mount and b umount in util-linux 2.14.1, 2.17.2, and probably other versions allow local users to determine the existence of restricted directories by 1 using the --guess-fstype command-line option or 2 attempting to mount a non-existent device, which generates different error messages dependin...

2.1CVSS6.6AI score0.00375EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2014/01/21 6:55 p.m.•20 views

CVE-2013-0157

a mount and b umount in util-linux 2.14.1, 2.17.2, and probably other versions allow local users to determine the existence of restricted directories by 1 using the --guess-fstype command-line option or 2 attempting to mount a non-existent device, which generates different error messages dependin...

6AI score
SaveExploits0References6
osv_ubuntu
osv_ubuntu
•added 2014/01/21 6:55 p.m.•18 views

UBUNTU-CVE-2013-0157

a mount and b umount in util-linux 2.14.1, 2.17.2, and probably other versions allow local users to determine the existence of restricted directories by 1 using the --guess-fstype command-line option or 2 attempting to mount a non-existent device, which generates different error messages dependin...

2.1CVSS6.7AI score0.00375EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2014/01/21 6:55 p.m.•32 views

CVE-2013-0157

a mount and b umount in util-linux 2.14.1, 2.17.2, and probably other versions allow local users to determine the existence of restricted directories by 1 using the --guess-fstype command-line option or 2 attempting to mount a non-existent device, which generates different error messages dependin...

2.1CVSS6.8AI score0.00375EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2014/01/21 6:00 p.m.•33 views

CVE-2013-0157

a mount and b umount in util-linux 2.14.1, 2.17.2, and probably other versions allow local users to determine the existence of restricted directories by 1 using the --guess-fstype command-line option or 2 attempting to mount a non-existent device, which generates different error messages dependin...

2.1CVSS3.5AI score0.00375EPSS
SaveExploits0
osv_debian
osv_debian
•added 2014/01/21 1:55 a.m.•26 views

DEBIAN-CVE-2010-5294

Multiple cross-site scripting XSS vulnerabilities in the requestfilesystemcredentials function in wp-admin/includes/file.php in WordPress before 3.0.2 allow remote servers to inject arbitrary web script or HTML by providing a crafted error message for a 1 FTP or 2 SSH connection attempt...

4.3CVSS6AI score0.01398EPSS
SaveExploits1References1
CVE
CVE
•added 2014/01/05 8:00 p.m.•104 views

CVE-2012-2898

CVE-2012-2898 affects Google Chrome for iOS prior to 21.0.1180.82 on iPad devices. The vulnerability enables remote attackers to spoof the Omnibox URL by exploiting SSL error message handling, a URL-bar spoofing issue related to CVE-2012-0674. The Chrome update 21.0.1180.82 (Chrome for iOS) addre...

5CVSS6.1AI score0.0069EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2014/01/05 12:00 a.m.•8 views

PT-2014-2256

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 21.0.1180.82 on iOS on iPad devices Description The issue allows remote attackers to spoof the Omnibox URL via vectors involving SSL error messages. Recommendations For Google Chrome versions prior to 21.0.1180....

5CVSS0.0069EPSS
SaveExploits0References3
NVD
NVD
•added 2013/12/31 8:55 p.m.•30 views

CVE-2012-0263

monitor/index.php in op5 Monitor and op5 Appliance before 5.5.1 allows remote authenticated users to obtain sensitive information such as database and user credentials via error messages that are triggered by 1 a malformed hoststatustypes parameter to status/service/all or 2 a crafted request to...

4CVSS5.8AI score0.01941EPSS
SaveExploits1References6
Cvelist
Cvelist
•added 2013/12/31 8:00 p.m.•37 views

CVE-2012-0263

monitor/index.php in op5 Monitor and op5 Appliance before 5.5.1 allows remote authenticated users to obtain sensitive information such as database and user credentials via error messages that are triggered by 1 a malformed hoststatustypes parameter to status/service/all or 2 a crafted request to...

5.8AI score0.01941EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2013/12/31 12:00 a.m.•8 views

CVE-2012-0263: Exposure of Sensitive Information to an Unauthorized Actor

monitor/index.php in op5 Monitor and op5 Appliance before 5.5.1 allows remote authenticated users to obtain sensitive information such as database and user credentials via error messages that are triggered by 1 a malformed hoststatustypes parameter to status/service/all or 2 a crafted request to...

4CVSS5.8AI score0.01941EPSS
SaveExploits1References2
osv_ubuntu
osv_ubuntu
•added 2013/12/21 12:55 a.m.•18 views

UBUNTU-CVE-2013-7082

Cross-site scripting XSS vulnerability in the errorAction method in the ActionController base class in TYPO3 Flow formerly FLOW3 1.1.x before 1.1.1 and 2.0.x before 2.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified input, which is returned in an error message...

4.3CVSS5.9AI score0.01187EPSS
SaveExploits0References3
NVD
NVD
•added 2013/12/14 10:55 p.m.•30 views

CVE-2013-6970

Cisco WebEx Meeting Center allows remote attackers to obtain sensitive information by reading verbose error messages within server responses, aka Bug ID CSCul35928...

5CVSS6.2AI score0.01369EPSS
SaveExploits0References4
Prion
Prion
•added 2013/12/14 10:55 p.m.•31 views

Design/Logic Flaw

Cisco WebEx Meeting Center allows remote attackers to obtain sensitive information by reading verbose error messages within server responses, aka Bug ID CSCul35928...

5CVSS6.7AI score0.01369EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2013/12/14 12:00 a.m.•7 views

PT-2013-6211

Name of the Vulnerable Software and Affected Versions Cisco WebEx Meeting Center affected versions not specified Description The issue allows remote attackers to obtain sensitive information by reading verbose error messages within server responses. Recommendations At the moment, there is no...

5CVSS0.01369EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2013/12/14 12:00 a.m.•8 views

CVE-2013-6970: Exposure of Sensitive Information to an Unauthorized Actor

Cisco WebEx Meeting Center allows remote attackers to obtain sensitive information by reading verbose error messages within server responses, aka Bug ID CSCul35928...

5CVSS5.8AI score0.01369EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2013/12/14 12:00 a.m.•6 views

PT-2013-6209

Name of the Vulnerable Software and Affected Versions Cisco WebEx Training Center affected versions not specified Description The issue allows remote attackers to enumerate attendees by analyzing different error messages for registration attempts, depending on whether the e-mail address exists...

5CVSS0.02457EPSS
SaveExploits1References6
Tenable Nessus
Tenable Nessus
•added 2013/12/14 12:00 a.m.•25 views

Fedora 20 : monitorix-3.4.0-1.fc20 (2013-22649)

3.4.0 - 02-Dec-2013 ==================== - Added a complete statistical Memcached graph. 27 - Added support for different BIND stats versions 2 and 3 right now. thanks to Ivo Brhel, ivb AT volny.cz - Added two new alerts in the 'disk' graph in order to know if a disk drive has exceeded or reached...

10CVSS6.8AI score0.0409EPSS
SaveExploits4References4
Cisco
Cisco
•added 2013/12/13 3:08 p.m.•30 views

Cisco WebEx Training Center Registered Attendee Email Enumeration Vulnerability

A vulnerability in the training registration page in Cisco WebEx Training Center could allow an unauthenticated, remote attacker to enumerate email addresses of registered attendees. The vulnerability is due to registration error messages that allow a user to determine that an email address...

5CVSS1.3AI score0.02457EPSS
SaveExploits1References1
Rows per page
Query Builder