887 matches found
CVE-2021-28180
The specific function in ASUS BMC’s firmware Web management page Audit log configuration setting does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the W...
CVE-2021-28180
The specific function in ASUS BMC’s firmware Web management page Audit log configuration setting does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the W...
CVE-2021-28180 ASUS BMC's firmware: buffer overflow - Audit log configuration setting
The specific function in ASUS BMC’s firmware Web management page Audit log configuration setting does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the W...
CVE-2021-28180
The specific function in ASUS BMC’s firmware Web management page Audit log configuration setting does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the W...
GaussDB Kernel: Configuring the Minimum Audit Log File Retention Period
The parameter auditfileremaintime specifies the minimum period for storing audit logs. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...
GaussDB Kernel: Configuring the Maximum Capacity of an Audit Log File
The parameter auditrotationsize specifies the maximum capacity of an audit log file. When the size of an audit log file reaches the specified value, another audit log file is automatically created. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a reference...
GaussDB Kernel: Configuring the Maximum Number of Audit Log Files
The parameter auditfileremainthreshold specifies the maximum number of audit log files. When the total number of audit log files exceeds the specified value, the system writes the warning information to the database logs, deletes the earliest audit log files, and records the deletion to the audit...
GaussDB Kernel: Configuring the Maximum Logging Duration of An Audit Log File
The parameter auditrotationinterval specifies the maximum logging duration of an audit log file. After the time expires, another audit log file is automatically Created. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright...
openGauss: Configuring the Maximum Disk Space Occupied by All Audit Log Files
The parameter auditspacelimit specifies the maximum disk space occupied by all audit log files. When the total size of audit log files exceeds the maximum value, the system writes the warning information to the database logs, deletes the earliest audit log files, and records the deletion to the...
openGauss: Configuring the Maximum Capacity of an Audit Log File
The parameter auditrotationsize specifies the maximum capacity of an audit log file. When the size of an audit log file reaches the specified value, another audit log file is automatically created. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a reference...
openGauss: Configuring the Minimum Audit Log File Retention Period
The parameter auditfileremaintime specifies the minimum period for storing audit logs. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...
openGauss: Configuring the Maximum Logging Duration of An Audit Log File
The parameter auditrotationinterval specifies the maximum logging duration of an audit log file. After the time expires, another audit log file is automatically Created. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright...
openGauss: Configuring the Maximum Number of Audit Log Files
The parameter auditfileremainthreshold specifies the maximum number of audit log files. When the total number of audit log files exceeds the specified value, the system writes the warning information to the database logs, deletes the earliest audit log files, and records the deletion to the audit...
CVE-2020-11644
CVE-2020-11644 affects B&R GateManager 4260/9250 (pre-9.0.20262 and pre-9.2.620236042 respectively) and GateManager 8250 (pre-9.2.620236042). The vulnerability arises from improper authentication that allows an authenticated attacker to generate fake audit log messages, enabling information expos...
The vulnerability of the Ignition 8 Gateway industrial automation software lies in the lack of restrictions on audit log entries, allowing a perpetrator to trigger a service failure.
The vulnerability of the Ignition 8 Gateway industrial automation software is related to the lack of restrictions on audit log entries. Exploiting this vulnerability allows a malicious actor to cause service interruptions remotely...
The vulnerability of the audit log component of the Cisco Digital Network Architecture (DNA) Center allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the audit log component of the Cisco Digital Network Architecture DNA Center system is related to insufficient protection of registration data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
Cross-site request forgery attack on change password form
Summary Change password doesn't validate CSRF token properly. Impact An attacker can force the victim to change password without knowing. To successfully complete this attack the victim needs to be logged to the Guardian/CMC and visit a special prepared page containing the forged change password...
Security Bulletin: Financial Transaction Manager for Digital Payments is affected by a potential validation vulnerability (CVE-2019-4519)
Summary Financial Transaction Manager for Digital Payments FTM DP for Multi-Platform has addressed the following vulnerability. A potential validation vulnerability does not properly validate input which could allow an authenticated user prevent audit log entries. Vulnerability Details CVEID:...
FreeBSD : Gitlab -- Multiple Vulnerabilities (e8483115-8b8e-11ea-bdcf-001b217b3468)
Gitlab reports : Path Traversal in NuGet Package Registry Workhorse Bypass Leads to File Disclosure OAuth Application Client Secrets Revealed Code Owners Approval Rules Are Not Updated for Existing Merge Requests When Source Branch Changes Code Owners Protection Not Enforced from Web UI Repositor...
Gitlab -- Multiple Vulnerabilities
Gitlab reports: Path Traversal in NuGet Package Registry Workhorse Bypass Leads to File Disclosure OAuth Application Client Secrets Revealed Code Owners Approval Rules Are Not Updated for Existing Merge Requests When Source Branch Changes Code Owners Protection Not Enforced from Web UI Repository...