2800 matches found
PT-2025-34347 · 'Профископ' · Codescoring
Уязвимость платформы безопасной разработки программного обеспечения CodeScoring связана с утечкой информации в сообщениях об ошибках. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, раскрыть защищаемую информацию путём клонирования исходного кода...
GHSA-CQM8-RG2P-JFCF Infinispan CLI vulnerable to Generation of Error Message Containing Sensitive Information
A flaw was found in Infinispan CLI. A sensitive password, decoded from a Base64-encoded Kubernetes secret, is processed in plaintext and included in a command string that may expose the data in an error message when a command is not found...
Information Exposure
Overview Affected versions of this package are vulnerable to Information Exposure via the execute function in the CliRuntimeRunner.java file, which is included in a command string and may be exposed in an error message if a command is not found. An attacker can obtain sensitive credential...
CVE-2025-5731 Infinispan: credential leakage in infinispan cli
A flaw was found in Infinispan CLI. A sensitive password, decoded from a Base64-encoded Kubernetes secret, is processed in plaintext and included in a command string that may expose the data in an error message when a command is not found...
DEBIAN-CVE-2025-44203
In HotelDruid 3.0.0 and 3.0.7, the unauthenticated database-setup endpoint creadb.php can be reached before setup is completed and performs database creation without locking. By sending many concurrent requests, an attacker can trigger a race condition during which verbose SQL error messages...
CVE-2025-44203
In HotelDruid 3.0.0 and 3.0.7, the unauthenticated database-setup endpoint creadb.php can be reached before setup is completed and performs database creation without locking. By sending many concurrent requests, an attacker can trigger a race condition during which verbose SQL error messages...
Security Bulletin: IBM Guardium Data Protection is affected by multiple vulnerabilities.
Summary IBM Guardium Data Protection has addressed these vulnerabilities in an update. Vulnerability Details CVEID:CVE-2025-29908 DESCRIPTION: Netty QUIC codec is a QUIC codec for netty which makes use of quiche. An issue was discovered in the codec. A hash collision vulnerability in the hash map...
Exploit for Uncontrolled Resource Consumption in Digitaldruid Hoteldruid
CVE-2025-44203 HotelDruid 3.0.0 / 3.0.7 Sensitive Information...
CVE-2025-49187
For failed login attempts, the application returns different error messages depending on whether the login failed due to an incorrect password or a non-existing username. This allows an attacker to guess usernames until they find an existing one...
CVE-2025-49187
For failed login attempts, the application returns different error messages depending on whether the login failed due to an incorrect password or a non-existing username. This allows an attacker to guess usernames until they find an existing one...
CVE-2025-49187 User enumeration
For failed login attempts, the application returns different error messages depending on whether the login failed due to an incorrect password or a non-existing username. This allows an attacker to guess usernames until they find an existing one...
CVE-2025-49187
The CVE-2025-49187 issue is a username-enumeration vulnerability observable during failed logins: the system returns different error messages for incorrect passwords versus non-existing usernames. This behavior allows an attacker to determine which usernames exist in the system. Affected context ...
CVE-2025-49187 User enumeration
For failed login attempts, the application returns different error messages depending on whether the login failed due to an incorrect password or a non-existing username. This allows an attacker to guess usernames until they find an existing one...
PT-2025-25312
Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description The issue allows an attacker to guess usernames by exploiting different error messages returned for incorrect passwords versus non-existing usernames during failed login attempts...
Security Bulletin: Multiple vulnerabilities in IBM MQ affect IBM Robotic Process Automation for Cloud Pak.
Summary Multiple vulnerabilities in IBM MQ affect IBM Robotic Process Automation for Cloud Pak. IBM MQ is used as a message queue for IBM Robotic Process Automation for Cloud Pak. This bulletin identifies the fixes to resolve these vulnerabilities. Vulnerability Details CVEID:CVE-2024-51471...
CVE-2024-56342
IBM Verify Identity Access Digital Credentials 24.06 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system...
CVE-2024-56342
CVE-2024-56342 affects IBM Verify Identity Access Digital Credentials 24.06. Affected component: the product’s detailed technical error messages leak sensitive information to remote attackers, enabling information disclosure. Impact is limited to information exposure (no integrity/availability im...
CVE-2024-8008
A reflected cross-site scripting XSS vulnerability exists in multiple WSO2 products due to insufficient output encoding in error messages generated by the JDBC user store connection validation request. A malicious actor can inject a specially crafted payload into the request, causing the browser ...
PT-2025-23997 · Ibm · Ibm Verify Identity Access Digital Credentials
Name of the Vulnerable Software and Affected Versions: IBM Verify Identity Access Digital Credentials version 24.06 Description: The issue allows a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in...
CVE-2025-40653
User enumeration vulnerability in M3M Printer Server Web. This issue occurs during user authentication, where a difference in error messages could allow an attacker to determine whether a username is valid or not, allowing a brute force attack on valid usernames...