Vulnerabilities > Information Exposure Through an Error Message

DATE CVE VULNERABILITY TITLE RISK
2024-09-12 CVE-2024-5435 Information Exposure Through an Error Message vulnerability in Gitlab
An issue has been discovered discovered in GitLab EE/CE affecting all versions starting from 15.10 before 17.1.7, all versions starting from 17.2 before 17.2.5, all versions starting from 17.3 before 17.3.2 will disclose user password from repository mirror configuration.
network
low complexity
gitlab CWE-209
6.5
2024-09-08 CVE-2024-8571 Information Exposure Through an Error Message vulnerability in Erjemin Roll CMS
A vulnerability was found in erjemin roll_cms up to 1484fe2c4e0805946a7bcf46218509fcb34883a9.
network
low complexity
erjemin CWE-209
5.3
2024-09-06 CVE-2024-7415 Information Exposure Through an Error Message vulnerability in Coffee2Code Remember ME Controls
The Remember Me Controls plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 2.0.1.
network
low complexity
coffee2code CWE-209
5.3
2024-08-29 CVE-2024-45440 Information Exposure Through an Error Message vulnerability in Drupal 20230509
core/authorize.php in Drupal 11.x-dev allows Full Path Disclosure (even when error logging is None) if the value of hash_salt is file_get_contents of a file that does not exist.
network
low complexity
drupal CWE-209
5.3
2024-08-29 CVE-2024-6551 Information Exposure Through an Error Message vulnerability in Givewp
The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 3.15.1.
network
low complexity
givewp CWE-209
5.3
2024-08-21 CVE-2024-41674 Information Exposure Through an Error Message vulnerability in Okfn Ckan
CKAN is an open-source data management system for powering data hubs and data portals.
network
low complexity
okfn CWE-209
5.3
2024-08-20 CVE-2024-43376 Information Exposure Through an Error Message vulnerability in Umbraco CMS 14.0.0/14.1.0/14.1.1
Umbraco is an ASP.NET CMS.
network
low complexity
umbraco CWE-209
5.3
2024-08-16 CVE-2023-47728 Information Exposure Through an Error Message vulnerability in IBM Cloud PAK for Security and Qradar Suite
IBM QRadar Suite Software 1.10.12.0 through 1.10.22.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the request.
network
low complexity
ibm CWE-209
6.5
2024-08-06 CVE-2024-39751 Information Exposure Through an Error Message vulnerability in IBM Infosphere Information Server 11.7
IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser.
network
low complexity
ibm CWE-209
4.3
2024-07-30 CVE-2024-5250 Information Exposure Through an Error Message vulnerability in Perforce Akana API
In versions of Akana API Platform prior to 2024.1.0 overly verbose errors can be found in SAML integrations
network
low complexity
perforce CWE-209
5.3