CWE-209 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-209/ Sun, 26 Feb 2023 09:09:49 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png CWE-209 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-209/ 32 32 CVE-2008-3060 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-3060/ Sun, 26 Feb 2023 09:09:49 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-3060/ V-webmail 1.5.0 allows remote attackers to obtain sensitive information via (1) malformed input in the login page (includes/local.hooks.php) and (2) an invalid session ID, which reveals the installation path in an error message.

The post CVE-2008-3060 appeared first on CVE Vulnerability.

]]> V-webmail 1.5.0 allows remote attackers to obtain sensitive information via (1) malformed input in the login page (includes/local.hooks.php) and (2) an invalid session ID, which reveals the installation path in an error message.

The post CVE-2008-3060 appeared first on CVE Vulnerability.

]]> CVE-2008-2049 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-2049/ Sun, 26 Feb 2023 09:09:19 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-2049/ The POP3 server (EPSTPOP3S.EXE) 4.22 in E-Post Mail Server 4.10 allows remote attackers to obtain sensitive information via multiple crafted APOP commands for a known POP3 account, which displays the password in a POP3 error message.

The post CVE-2008-2049 appeared first on CVE Vulnerability.

]]> The POP3 server (EPSTPOP3S.EXE) 4.22 in E-Post Mail Server 4.10 allows remote attackers to obtain sensitive information via multiple crafted APOP commands for a known POP3 account, which displays the password in a POP3 error message.

The post CVE-2008-2049 appeared first on CVE Vulnerability.

]]> CVE-2008-1579 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-1579/ Sun, 26 Feb 2023 09:09:05 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-1579/ Wiki Server in Apple Mac OS X 10.5 before 10.5.3 allows remote attackers to obtain sensitive information (user names) by reading the error message produced upon access to a nonexistent blog.

The post CVE-2008-1579 appeared first on CVE Vulnerability.

]]> Wiki Server in Apple Mac OS X 10.5 before 10.5.3 allows remote attackers to obtain sensitive information (user names) by reading the error message produced upon access to a nonexistent blog.

The post CVE-2008-1579 appeared first on CVE Vulnerability.

]]> CVE-2007-5172 https://cvevulnerability.com/cve_vulnerabilities/cve-2007-5172/ Sun, 26 Feb 2023 09:07:33 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2007-5172/ Quicksilver Forums before 1.4.1 allows remote attackers to obtain sensitive information by causing unspecified connection errors, which reveals the database password in the resulting error message.

The post CVE-2007-5172 appeared first on CVE Vulnerability.

]]> Quicksilver Forums before 1.4.1 allows remote attackers to obtain sensitive information by causing unspecified connection errors, which reveals the database password in the resulting error message.

The post CVE-2007-5172 appeared first on CVE Vulnerability.

]]> CVE-2007-1409 https://cvevulnerability.com/cve_vulnerabilities/cve-2007-1409/ Sun, 26 Feb 2023 09:05:51 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2007-1409/ WordPress allows remote attackers to obtain sensitive information via a direct request for wp-admin/admin-functions.php, which reveals the path in an error message.

The post CVE-2007-1409 appeared first on CVE Vulnerability.

]]> WordPress allows remote attackers to obtain sensitive information via a direct request for wp-admin/admin-functions.php, which reveals the path in an error message.

The post CVE-2007-1409 appeared first on CVE Vulnerability.

]]> CVE-2018-8042 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-8042/ Sun, 26 Feb 2023 06:51:16 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-8042/ Apache Ambari, version 2.5.0 to 2.6.2, passwords for Hadoop credential stores are exposed in Ambari Agent informational log messages when the credential store feature is enabled for eligible services. For example, Hive and Oozie.

The post CVE-2018-8042 appeared first on CVE Vulnerability.

]]> Apache Ambari, version 2.5.0 to 2.6.2, passwords for Hadoop credential stores are exposed in Ambari Agent informational log messages when the credential store feature is enabled for eligible services. For example, Hive and Oozie.

The post CVE-2018-8042 appeared first on CVE Vulnerability.

]]> CVE-2018-2379 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-2379/ Sun, 26 Feb 2023 06:48:59 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-2379/ In SAP HANA Extended Application Services, 1.0, an unauthenticated user could test if a given username is valid by evaluating error messages of a specific endpoint.

The post CVE-2018-2379 appeared first on CVE Vulnerability.

]]> In SAP HANA Extended Application Services, 1.0, an unauthenticated user could test if a given username is valid by evaluating error messages of a specific endpoint.

The post CVE-2018-2379 appeared first on CVE Vulnerability.

]]> CVE-2018-21032 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-21032/ Sun, 26 Feb 2023 06:48:50 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-21032/ A vulnerability in Hitachi Command Suite prior to 8.7.1-00 and Hitachi Automation Director prior to 8.5.0-00 allow authenticated remote users to expose technical information through error messages. Hitachi Command Suite includes Hitachi Device Manager and Hitachi Compute Systems Manager.

The post CVE-2018-21032 appeared first on CVE Vulnerability.

]]> A vulnerability in Hitachi Command Suite prior to 8.7.1-00 and Hitachi Automation Director prior to 8.5.0-00 allow authenticated remote users to expose technical information through error messages. Hitachi Command Suite includes Hitachi Device Manager and Hitachi Compute Systems Manager.

The post CVE-2018-21032 appeared first on CVE Vulnerability.

]]> CVE-2018-19947 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-19947/ Sun, 26 Feb 2023 06:48:22 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-19947/ The vulnerability have been reported to affect earlier versions of Helpdesk. If exploited, this information exposure vulnerability could disclose sensitive information. QNAP has already fixed the issue in Helpdesk 3.0.3 and later.

The post CVE-2018-19947 appeared first on CVE Vulnerability.

]]> The vulnerability have been reported to affect earlier versions of Helpdesk. If exploited, this information exposure vulnerability could disclose sensitive information. QNAP has already fixed the issue in Helpdesk 3.0.3 and later.

The post CVE-2018-19947 appeared first on CVE Vulnerability.

]]> CVE-2018-17961 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-17961/ Sun, 26 Feb 2023 06:47:38 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-17961/ Artifex Ghostscript 9.25 and earlier allows attackers to bypass a sandbox protection mechanism via vectors involving errorhandler setup. NOTE: this issue exists because of an incomplete fix for CVE-2018-17183.

The post CVE-2018-17961 appeared first on CVE Vulnerability.

]]> Artifex Ghostscript 9.25 and earlier allows attackers to bypass a sandbox protection mechanism via vectors involving errorhandler setup. NOTE: this issue exists because of an incomplete fix for CVE-2018-17183.

The post CVE-2018-17961 appeared first on CVE Vulnerability.

]]>