Lucene search
+L

361 matches found

Prion
Prion
•added 2018/08/03 6:29 p.m.•33 views

Design/Logic Flaw

The Web server in 3CX version 15.5.8801.3 is vulnerable to Information Leakage, because of improper error handling in Stack traces, as demonstrated by discovering a full pathname...

5CVSS5.3AI score0.00961EPSS
SaveExploits1References1Affected Software1
NVD
NVD
•added 2018/08/03 6:29 p.m.•36 views

CVE-2018-14907

The Web server in 3CX version 15.5.8801.3 is vulnerable to Information Leakage, because of improper error handling in Stack traces, as demonstrated by discovering a full pathname...

5.3CVSS5.3AI score0.00961EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2018/08/03 6:00 p.m.•41 views

CVE-2018-14907

The Web server in 3CX version 15.5.8801.3 is vulnerable to Information Leakage, because of improper error handling in Stack traces, as demonstrated by discovering a full pathname...

5.3AI score0.00961EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2018/07/11 12:00 a.m.•1 views

PT-2018-3724

Name of the Vulnerable Software and Affected Versions Adobe Campaign Classic versions prior to 18.10.5-8984 Description The issue is related to improper error handling, which could allow a remote attacker to disclose protected information. Recommendations For Adobe Campaign Classic versions prior...

7.8CVSS0.03121EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/06/04 12:00 a.m.•5 views

CVE-2017-16014: Improper Check or Handling of Exceptional Conditions

Http-proxy is a proxying library. Because of the way errors are handled in versions before 0.7.0, an attacker that forces an error can crash the server, causing a denial of service...

7.5CVSS7.2AI score0.0166EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2018/04/12 12:00 a.m.•22 views

libavc DoS

The vulnerability of the libavc library in the Media Framework component of the Android operating system is related to improper error handling during memory allocation. Exploiting this vulnerability could allow a malicious actor to cause service failure remotely...

7.8CVSS7.7AI score0.00463EPSS
SaveExploits0References3Affected Software1
osv_cve
osv_cve
•added 2018/03/13 3:29 p.m.•20 views

CVE-2018-1000083

Ajenti version version 2 contains a Improper Error Handling vulnerability in Login JSON request that can result in The requisition leaks a path of the server. This attack appear to be exploitable via By sending a malformed JSON, the tool responds with a traceback error that leaks a path of the...

5.3CVSS5.7AI score0.01549EPSS
SaveExploits1References1
NVD
NVD
•added 2018/03/13 3:29 p.m.•28 views

CVE-2018-1000083

Ajenti version version 2 contains a Improper Error Handling vulnerability in Login JSON request that can result in The requisition leaks a path of the server. This attack appear to be exploitable via By sending a malformed JSON, the tool responds with a traceback error that leaks a path of the...

5.3CVSS5.3AI score0.01549EPSS
SaveExploits1References1
osv_pysec
osv_pysec
•added 2018/03/13 3:29 p.m.•38 views

PYSEC-2018-112

Ajenti version version 2 contains a Improper Error Handling vulnerability in Login JSON request that can result in The requisition leaks a path of the server. This attack appear to be exploitable via By sending a malformed JSON, the tool responds with a traceback error that leaks a path of the...

5.3CVSS3.3AI score0.01549EPSS
SaveExploits1References3
Prion
Prion
•added 2018/03/13 3:29 p.m.•30 views

Input validation

Ajenti version version 2 contains a Improper Error Handling vulnerability in Login JSON request that can result in The requisition leaks a path of the server. This attack appear to be exploitable via By sending a malformed JSON, the tool responds with a traceback error that leaks a path of the...

5CVSS5.3AI score0.01549EPSS
SaveExploits1References1Affected Software1
CVE
CVE
•added 2018/03/13 3:00 p.m.•76 views

CVE-2018-1000083

CVE-2018-1000083 affects Ajenti version 2. The vulnerability is an improper error handling in the Login JSON request that can disclose the server path through a traceback when a malformed JSON is sent. Exploitation details are not provided in the connected documents beyond the error-path disclosu...

5.3CVSS5.2AI score0.01549EPSS
SaveExploits1References1Affected Software1
Mend
Mend
•added 2018/03/13 3:00 p.m.•7 views

CVE-2018-1000083

Ajenti version version 2 contains a Improper Error Handling vulnerability in Login JSON request that can result in The requisition leaks a path of the server. This attack appear to be exploitable via By sending a malformed JSON, the tool responds with a traceback error that leaks a path of the...

6.9CVSS0.01549EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2018/03/13 3:00 p.m.•39 views

CVE-2018-1000083

Ajenti version version 2 contains a Improper Error Handling vulnerability in Login JSON request that can result in The requisition leaks a path of the server. This attack appear to be exploitable via By sending a malformed JSON, the tool responds with a traceback error that leaks a path of the...

5.3AI score0.01549EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
•added 2018/01/18 12:00 a.m.•21 views

Linux kernel hdpvr_probe Heap Buffer Overflow DoS

The vulnerability of the hdpvrprobe function drivers/media/usb/hdpvr/hdpvr-core.c in the Linux kernel is related to improper error handling. Exploiting this vulnerability can allow a local attacker to cause service failures or other effects through a specially crafted USB device...

6.8CVSS6.8AI score0.00409EPSS
SaveExploits0References16Affected Software1
Mend
Mend
•added 2017/12/05 4:00 p.m.•3 views

CVE-2016-1252

The apt package in Debian jessie before 1.0.9.8.4, in Debian unstable before 1.4beta2, in Ubuntu 14.04 LTS before 1.0.1ubuntu2.17, in Ubuntu 16.04 LTS before 1.2.15ubuntu0.2, and in Ubuntu 16.10 before 1.3.2ubuntu0.1 allows man-in-the-middle attackers to bypass a repository-signing protection...

8.2CVSS0.07248EPSS
SaveExploits3References8
NVD
NVD
•added 2017/11/30 9:29 a.m.•37 views

CVE-2017-12353

A vulnerability in the Multipurpose Internet Mail Extensions MIME scanner of Cisco AsyncOS Software for Cisco Email Security Appliances ESA could allow an unauthenticated, remote attacker to bypass configured user filters on the device. The vulnerability is due to improper error handling of a...

5.8CVSS5.8AI score0.01638EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2017/11/22 12:19 p.m.•61 views

CVE-2017-16644

The hdpvrprobe function in drivers/media/usb/hdpvr/hdpvr-core.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service improper error handling and system crash or possibly have unspecified other impact via a crafted USB device...

7.2CVSS6.3AI score0.00409EPSS
SaveExploits0References1
Mend
Mend
•added 2017/11/07 11:00 p.m.•2 views

CVE-2017-16644

The hdpvrprobe function in drivers/media/usb/hdpvr/hdpvr-core.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service improper error handling and system crash or possibly have unspecified other impact via a crafted USB device...

7.2CVSS0.00409EPSS
SaveExploits0References7
UbuntuCve
UbuntuCve
•added 2017/11/07 12:00 a.m.•35 views

CVE-2017-16644

The hdpvrprobe function in drivers/media/usb/hdpvr/hdpvr-core.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service improper error handling and system crash or possibly have unspecified other impact via a crafted USB device...

7.2CVSS6.5AI score0.00409EPSS
SaveExploits0References6
NVD
NVD
•added 2017/10/24 9:29 p.m.•19 views

CVE-2017-1583

IBM WebSphere Application Server IBM Liberty for Java for Bluemix 3.13could allow a remote attacker to obtain sensitive information caused by improper error handling by MyFaces in JSF...

7.5CVSS7.2AI score0.0319EPSS
SaveExploits0References4
Rows per page
Query Builder