CVE-2025-11891 Shelf Planner <= 2.7.0 - Unauthenticated Information Exposure via Log Files

The Shelf Planner plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.7.0 through publicly exposed log files. This makes it possible for unauthenticated attackers to view potentially sensitive information contained in the exposed log files...

WordPress Shelf Planner plugin <= 2.7.0 - Unauthenticated Information Exposure via Log Files vulnerability

Unauthenticated Information Exposure via Log Files vulnerability discovered by Jonas Benjamin Friedli in WordPress Plugin Shelf Planner versions = 2.7.0...

KLA90057 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to gain privileges, read local files, cause denial of service, obtain sensitive information, bypass security restrictions, execute arbitrary code. Below is a...

Microsoft Windows 日志信息泄露漏洞

Microsoft Windows is a suite of operating systems used by Microsoft Corporation USA for personal devices. A log information disclosure vulnerability exists in Microsoft Windows License Manager. An attacker could exploit this vulnerability to obtain sensitive information. The following products an...

Intel System Event Log Viewer Utility 代码问题漏洞

Intel System Event Log Viewer Utility is a log viewer from Intel Corporation USA. A code issue vulnerability exists in Intel System Event Log Viewer Utility that stems from an uncontrolled search path that could lead to elevation of privilege...

PT-2025-46419

Name of the Vulnerable Software and Affected Versions System Event Log Viewer Utility software affected versions not specified Description An uncontrolled search path in some System Event Log Viewer Utility software within Ring 3: User Applications may allow an escalation of privilege. A local,...

WordPress plugin Shelf Planner 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

CVE-2025-12940: Insertion of Sensitive Information into Log File

Login credentials are inadvertently recorded in logs if a Syslog Server is configured in NETGEAR WAX610 and WAX610Y AX1800 Dual Band PoE Multi-Gig Insight Managed WiFi 6 Access Points. An user having access to the syslog server can read the logs containing these credentials. This issue affects...

PT-2025-46502

Name of the Vulnerable Software and Affected Versions Windows License Manager affected versions not specified Description A flaw exists in Windows License Manager that allows an authorized attacker to disclose sensitive information locally through the insertion of this information into log files...

Amazon Linux 2023 : nerdctl (ALAS2023-2025-1259)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-1259 advisory. go-viper's mapstructure May Leak Sensitive Information in Logs When Processing Malformed Data CVE-2025-11065 Tenable has extracted the preceding description block directly from the tested product...

KB5068861: Windows 11 Version 24H2 / Windows Server 2025 / Windows 11 Version 25H2 Security Update (November 2025)

The remote Windows host is missing security update 5068861 or hotpatch 5068966. It is, therefore, affected by multiple vulnerabilities - Insertion of sensitive information into log file in Windows License Manager allows an authorized attacker to disclose information locally. CVE-2025-62208,...

CVE-2025-11891: Insertion of Sensitive Information into Externally-Accessible File or Directory

The Shelf Planner plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.8.1 through publicly exposed log files. This makes it possible for unauthenticated attackers to view potentially sensitive information contained in the exposed log files...

CVE-2025-62208: Insertion of Sensitive Information into Log File

Insertion of sensitive information into log file in Windows License Manager allows an authorized attacker to disclose information locally...

CVE-2025-62209: Insertion of Sensitive Information into Log File

Insertion of sensitive information into log file in Windows License Manager allows an authorized attacker to disclose information locally...

CVE-2025-60709: Out-of-bounds Read

Out-of-bounds read in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...

PT-2025-46503

Name of the Vulnerable Software and Affected Versions Windows License Manager affected versions not specified Description An issue exists in Windows License Manager that allows an authorized attacker to disclose information locally through the insertion of sensitive information into a log file...

Microsoft Windows Common Log File System Driver 缓冲区错误漏洞

The Microsoft Windows Common Log File System Driver is Microsoft's Common Log File System CLFS API provides a high-performance, common log file subsystem that can be used by dedicated client applications and shared by multiple clients to optimize logging and access. access. A buffer error...

PT-2025-46472

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions affected versions not specified Description An out-of-bounds read issue exists in the Windows Common Log File System CLFS driver. Exploitation of this issue can allow an authorized attacker to elevate privileges...

Description of the security update for SharePoint Server 2019: November 11, 2025 (KB5002803)

None None...

CVE-2025-31645: Uncontrolled Search Path Element

Uncontrolled search path for some System Event Log Viewer Utility software for all versions within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege...