3932 matches found
CVE-2022-0666
CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.microweber.org/ in Packagist microweber/microweber prior to 1.2.11...
CVE-2022-0666
CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.microweber.org/ in Packagist microweber/microweber prior to 1.2.11...
Crlf injection
CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.microweber.org/ in Packagist microweber/microweber prior to 1.2.11...
CVE-2022-0666
CVE-2022-0666 affects microweber/microweber prior to 1.2.11. The vulnerability is a CRLF Injection caused by lack of filtering in redirects (notably the redirect_to/redirectUrl path), leading to stack trace exposure. Nuclei and Veracode listings corroborate the issue and note potential impact suc...
CVE-2022-0666 CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.microweber.org/ in microweber/microweber
CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.microweber.org/ in Packagist microweber/microweber prior to 1.2.11...
CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.microweber.org/
Description The Introduction of a New Line Character lets the attacker the stack trace at demo.microweber.org/ This Attack becomes more significant because of its Less complication. The Stack trace discloses following information : 1. Backend Response code. 2. The Versions of Backend Laravel...
Information Disclosure
IBM MQ is vulnerable to information disclosure. The vulnerability exists due to a lack of sanitization of output data within trace files...
Information Disclosure
IBM MQ is vulnerable to information disclosure. An attacker is able to exploit the vulnerability by including sensitive data within trace...
CVE-2022-21226
Out-of-bounds read in the IntelR Trace Analyzer and Collector before version 2021.5 may allow an authenticated user to potentially enable information disclosure via local access...
CVE-2022-21218
Uncaught exception in the IntelR Trace Analyzer and Collector before version 2021.5 may allow an authenticated user to potentially enable information disclosure via local access...
CVE-2022-21218
Uncaught exception in the IntelR Trace Analyzer and Collector before version 2021.5 may allow an authenticated user to potentially enable information disclosure via local access...
CVE-2022-21226
Out-of-bounds read in the IntelR Trace Analyzer and Collector before version 2021.5 may allow an authenticated user to potentially enable information disclosure via local access...
CVE-2022-21133
Out-of-bounds read in the IntelR Trace Analyzer and Collector before version 2021.5 may allow an authenticated user to potentially enable denial of service via local access...
CVE-2022-21156
Access of uninitialized pointer in the IntelR Trace Analyzer and Collector before version 2021.5 may allow an authenticated user to potentially enable denial of service via local access...
CVE-2022-21133
Out-of-bounds read in the IntelR Trace Analyzer and Collector before version 2021.5 may allow an authenticated user to potentially enable denial of service via local access...
CVE-2022-21156
Access of uninitialized pointer in the IntelR Trace Analyzer and Collector before version 2021.5 may allow an authenticated user to potentially enable denial of service via local access...
Design/Logic Flaw
Out-of-bounds read in the IntelR Trace Analyzer and Collector before version 2021.5 may allow an authenticated user to potentially enable denial of service via local access...
Information disclosure
Out-of-bounds read in the IntelR Trace Analyzer and Collector before version 2021.5 may allow an authenticated user to potentially enable information disclosure via local access...
Design/Logic Flaw
Access of uninitialized pointer in the IntelR Trace Analyzer and Collector before version 2021.5 may allow an authenticated user to potentially enable denial of service via local access...
Information disclosure
Uncaught exception in the IntelR Trace Analyzer and Collector before version 2021.5 may allow an authenticated user to potentially enable information disclosure via local access...