UBUNTU-CVE-2017-11507

A cross site scripting XSS vulnerability exists in CheckMK versions 1.2.8x prior to 1.2.8p25 and 1.4.0x prior to 1.4.0p9, allowing an unauthenticated attacker to inject arbitrary HTML or JavaScript via the outputformat parameter, and the username parameter of failed HTTP basic authentication...

Cross site scripting

A cross site scripting XSS vulnerability exists in CheckMK versions 1.2.8x prior to 1.2.8p25 and 1.4.0x prior to 1.4.0p9, allowing an unauthenticated attacker to inject arbitrary HTML or JavaScript via the outputformat parameter, and the username parameter of failed HTTP basic authentication...

CVE-2017-11507

A cross site scripting XSS vulnerability exists in CheckMK versions 1.2.8x prior to 1.2.8p25 and 1.4.0x prior to 1.4.0p9, allowing an unauthenticated attacker to inject arbitrary HTML or JavaScript via the outputformat parameter, and the username parameter of failed HTTP basic authentication...

IBM Rational Rhapsody Design Manager Information Disclosure Vulnerability (CNVD-2017-38260)

IBM Rational Rhapsody Design Manager is a suite of collaborative design management software from IBM. The software supports the use of centralized system repositories with Web-based access to store, share, search, and manage design models as well as automated software design reviews. An informati...

CVE-2017-1240

CVE-2017-1240 affects IBM Rational Rhapsody Design Manager (RDM) within IBM CLM family. Affected versions: RDM 4.0–4.0.7, 5.0–5.0.2, and 6.0–6.0.4. Description in connected sources shows an information-disclosure flaw where sensitive data could be exposed via HTTP 500 Internal Server Error respon...

PT-2017-12540

Name of the Vulnerable Software and Affected Versions IBM Rhapsody DM affected versions not specified Description The issue could lead to the disclosure of sensitive information through HTTP 500 Internal Server Error responses. Recommendations At the moment, there is no information about a newer...

CVE-2017-1240: Exposure of Sensitive Information to an Unauthorized Actor

IBM Rhapsody DM products could reveal sensitive information in HTTP 500 Internal Server Error responses. IBM X-Force ID: 124359...

International Islamic University Chittagong: Another Internal Path Disclosure

Keeping your previous fixes in mind, I found another endpoint which is disclosing full internal path through 500 Internal Server error. POC-URL: http://119.18.148.140/iiuc/login/ Request: GET http://119.18.148.140/iiuc/login/ HTTP/1.1 Host: 119.18.148.140 Connection: keep-alive User-Agent:...

WEM error message "Specified license server is not available or appropriate licenses are not installed"

When configuring the license server within the WEM Administration Console, the following error appears: "Specified license server is not available or appropriate licenses are not installed. Retry or Cancel"...

Microsoft Windows Multiple Vulnerabilities (KB4041693)

This host is missing a critical security update according to Microsoft KB4041693 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

mysql: Server: Error Handling unspecified vulnerability (CPU Jan 2017)

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Error Handling. Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the...

Public store application on XenMobile gives error "500 server internal error "

There are can be multiple scenarios in which the issue can come 1. When publishing the public store app “Archibus Client” https://itunes.apple.com/au/app/archibus-mobile-client-2.0/id926252726?mt=8, the application details can be populated in XM console but the “500 Server Internal Error” at the...

mysql: Server: Error Handling unspecified vulnerability (CPU Jan 2017)

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Error Handling. Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the...

WEM Database Creation Error Message regarding "Path Specified" when creating WEM database

When attempting to create a WEMDatabase using the Database Management Utility Console, it failswith: "Database Creation Error" The Citrix WEM Database Management Utility Debug Log shows the following exception:"Exception - CreateVuemdb.Run : SqlDatabaseHelper. connection Error : 5133 | Directory...

DEBIAN-CVE-2017-10788

The DBD::mysql module through 4.043 for Perl allows remote attackers to cause a denial of service use-after-free and application crash or possibly have unspecified other impact by triggering 1 certain error responses from a MySQL server or 2 a loss of a network connection to a MySQL server. The...

Weblate: No Rate Limitation on Regenerate Api Key

Hi, I discovered that there is no request throttling or limit on api key regeneration. Though theres a little change while making a total of 30 requests in a few seconds, server error occurred then it continued. Screenshot F197872 In the screenshot 685 denotes a processed request and 6052 denotes...

OPC UA Server Error Detection (SCADA)

Binary data 700151.prm...

Weblate: Improper validation of unicode characters

Hi, I just saw a report of 229483 This issue still persist. When i tried some Unicode characters like smilies etc. It is working perfectly by displaying the Error message on the same page that Username may only contain letters, numbers or the following characters: @ . + - See 1.jpg for smilies...

Issues with public store microsoft dynamic application with per app VPN

,Able to launch the application successfully however after entering the url in the application it gives the error "Your server is not available or doesn’t support this application"...

How to pass the command injection vulnerability fix Yahoo subsidiary production servers-vulnerability warning-the black bar safety net

One, Foreword Time to get back to 5 May 20, the night before that, I spent several days time to study the Yahoo Messenger app, still can't figure out how it works, but annoying headache and neck pain and looking for me. So I decided to go for a walk, find a new target. Then I noticed a very...