11380 matches found
CVE-2026-67439
CVE-2026-67439 affects OliveTin prior to 3000.17.0. The StartActionAndWait and StartActionByGetAndWait endpoints in service/internal/api/api.go return full LogEntry output after execution without enforcing the logs permission, enabling a user with exec permission but logs:false to read action out...
CVE-2026-40272 Vulnerability in the QNX libtraceparser Impacts QNX Software Development Platform
Improper Input Validation in the decode function of the traceparser library could allow an attacker with a corrupted kernel trace event log .kev file, to execute arbitrary code or cause a crash in processes that use libtraceparser in QNX hosts or targets...
Tame Dependabot: Group your updates, slow the cadence, keep security fast
If you maintain an active repository, you know the feeling. You open your notifications on a Monday morning and there they are: five, 10, sometimes a dozen Dependabot pull requests, each bumping a single dependency by a single patch version. Individually, every one of them is helpful. Collectivel...
Important: Red Hat Security Advisory: Logging for Red Hat OpenShift - 6.2.12
Logging for Red Hat OpenShift - 6.2.12 Red Hat OpenShift Logging 6.2.12 is a cluster-wide logging solution for OpenShift that collects and manages applications, infrastructure, and audit logs...
CVE-2026-64435
A flaw was found in the Linux kernel's auditing subsystem. Multiple readers could access the auditqueue length qlen concurrently with a writer without proper synchronization, leading to a data race. This race condition could result in inconsistent data reads, potentially causing unpredictable...
cve-2026-59326 - LOW - CVE-2026-59326: HTTP Proxy Credentials Logged in Plaintext by the Spring Boot Language Server
The Spring Boot language server logs the raw value of the httpsproxy / HTTPSPROXY / httpproxy / HTTPPROXY environment variable at INFO level whenever it creates an outbound HTTP client and no explicit http.proxy workspace setting is configured. Corporate proxy URLs frequently embed Basic-auth...
PT-2026-65862
Name of the Vulnerable Software and Affected Versions BlackBerry QNX affected versions not specified Description Improper input validation in the decode function of the traceparser library allows an attacker to use a corrupted kernel trace event log .kev file to execute arbitrary code or cause a...
PT-2026-65929
TrendAI Vision One Service Gateway Logs Information Disclosure Vulnerability...
PT-2026-65911
Name of the Vulnerable Software and Affected Versions OliveTin versions prior to 3000.17.0 Description An issue exists where the 'service/internal/api/api.go' endpoints 'StartActionAndWait' and 'StartActionByGetAndWait' return the full LogEntry output after execution without verifying the logs...
CVE-2026-13463
IBM Cloud Pak System 2.3.5.0 could allow a local attacker to obtain sensitive information due to the insertion of credentials into log files...
EUVD-2026-50065
IBM Cloud Pak System 2.3.5.0 could allow a local attacker to obtain sensitive information due to the insertion of credentials into log files...
EUVD-2026-50014
IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.52, 6.2.1.0 through 6.2.1.12, and 6.2.2.0 through 6.2.2.01 and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.52, 6.2.1.0 through 6.2.1.12, and 6.2.2.0 through 6.2.2.01 stores potentially sensitive information in log files that could be read by a...
CVE-2026-47768
CVE-2026-47768 affects nebula-mesh up to and including v0.3.1, where newly minted operator API keys are exposed in the redirect URL?new_key and related query strings. The root cause is tokens being placed in the URL during the handleOperatorCreateAPIKey flow, making them observable via the browse...
CVE-2026-47768
nebula-mesh is a self-hosted control plane for Slack Nebula mesh virtual private network. Prior to version 0.3.2, newly-minted operator API key exposed in redirect URL Referer, history, proxy logs. This issue has been patched in version 0.3.2...
CVE-2026-47768 nebula-mesh: Newly-minted operator API key exposed in redirect URL (Referer, history, proxy logs)
nebula-mesh is a self-hosted control plane for Slack Nebula mesh virtual private network. Prior to version 0.3.2, newly-minted operator API key exposed in redirect URL Referer, history, proxy logs. This issue has been patched in version 0.3.2...
CVE-2026-8058 This Power System update is being released to address a sensitive information disclosure
IBM OPENBMC FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 allows a user to supply a password with a resource dump request stores that password into the BMC audit log where an admin user can see it...
dependo
dependo A proof of concept for state-of-the-art observability...
Exploit for Insertion of Sensitive Information into Log File in Ayesa Ibermatica_Rps
CVE-2023-3349 / CVE-2023-3350 | IBERMATICA RPS 2019 Security...