Vulnerabilities > Information Exposure Through an Error Message
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2024-03-22 | CVE-2022-32756 | Information Exposure Through an Error Message vulnerability in IBM Security Verify Directory 10.0.0 IBM Security Verify Directory 10.0.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. | 2.7 |
2024-02-02 | CVE-2024-21866 | Information Exposure Through an Error Message vulnerability in Rapidscada Rapid Scada In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, the affected product responds back with an error message containing sensitive data if it receives a specific malformed request. | 5.3 |
2024-01-30 | CVE-2024-22646 | Information Exposure Through an Error Message vulnerability in Seopanel SEO Panel 4.10.0 An email address enumeration vulnerability exists in the password reset function of SEO Panel version 4.10.0. | 5.3 |
2024-01-25 | CVE-2024-21619 | Information Exposure Through an Error Message vulnerability in Juniper Junos A Missing Authentication for Critical Function vulnerability combined with a Generation of Error Message Containing Sensitive Information vulnerability in J-Web of Juniper Networks Junos OS on SRX Series and EX Series allows an unauthenticated, network-based attacker to access sensitive system information. When a user logs in, a temporary file which contains the configuration of the device (as visible to that user) is created in the /cache folder. | 7.5 |
2024-01-22 | CVE-2023-47152 | Information Exposure Through an Error Message vulnerability in IBM DB2 IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 is vulnerable to an insecure cryptographic algorithm and to information disclosure in stack trace under exceptional conditions. | 7.5 |
2024-01-19 | CVE-2024-23689 | Information Exposure Through an Error Message vulnerability in Clickhouse Java Libraries Exposure of sensitive information in exceptions in ClichHouse's clickhouse-r2dbc, com.clickhouse:clickhouse-jdbc, and com.clickhouse:clickhouse-client versions less than 0.4.6 allows unauthorized users to gain access to client certificate passwords via client exception logs. | 8.8 |
2024-01-19 | CVE-2024-21733 | Information Exposure Through an Error Message vulnerability in Apache Tomcat Generation of Error Message Containing Sensitive Information vulnerability in Apache Tomcat.This issue affects Apache Tomcat: from 8.5.7 through 8.5.63, from 9.0.0-M11 through 9.0.43. Users are recommended to upgrade to version 8.5.64 onwards or 9.0.44 onwards, which contain a fix for the issue. | 5.3 |
2024-01-16 | CVE-2023-49107 | Information Exposure Through an Error Message vulnerability in Hitachi Device Manager Generation of Error Message Containing Sensitive Information vulnerability in Hitachi Device Manager on Windows, Linux (Device Manager Agent modules).This issue affects Hitachi Device Manager: before 8.8.5-04. | 7.5 |
2024-01-04 | CVE-2023-6944 | Information Exposure Through an Error Message vulnerability in multiple products A flaw was found in the Red Hat Developer Hub (RHDH). | 5.7 |
2023-12-28 | CVE-2023-45701 | Information Exposure Through an Error Message vulnerability in Hcltechsw HCL Launch HCL Launch could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. | 6.5 |