Lucene search
K

424 matches found

RedHat Linux
RedHat Linux
added 2024/09/03 8:0 p.m.0 views

go-retryablehttp: url might write sensitive information to log file

A vulnerability was found in go-retryablehttp. The package may suffer from a lack of input sanitization by not cleaning up URL data when writing to the logs. This issue could expose sensitive authentication information...

6CVSS7.1AI score0.00355EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2024/08/23 12:0 a.m.5 views

The vulnerability of the PSM Windows Resource Manager service on Windows operating systems allows attackers to increase their privileges.

The vulnerability of the PSM Windows Resource Manager service in the Windows operating system is related to the use of unsafe mechanisms for processing authentication data in the operating system’s memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

7CVSS5.5AI score0.00425EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2024/08/21 12:0 a.m.5 views

The vulnerability of the Windows operating system’s kernel allows attackers to enhance their privileges.

The vulnerability of Windows operating system kernels is related to the use of unsafe mechanisms for processing authentication data in the operating system’s memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

7CVSS5.9AI score0.06337EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2024/08/21 12:0 a.m.3 views

The vulnerability of the clipboard data exchange service between devices via the Windows operating system’s Clipboard Virtual Channel Extension allows a hacker to execute arbitrary code.

The vulnerability of the clipboard service between devices under the Windows operating system’s Virtual Channel Extension relies on the use of unsafe mechanisms for processing authentication data in the operating system’s memory. Exploiting this vulnerability allows a remote attacker to execute...

10CVSS5.9AI score0.01237EPSS
Exploits0References2Affected Software1
RedHat Linux
RedHat Linux
added 2024/08/20 4:11 p.m.3 views

go-retryablehttp: url might write sensitive information to log file

A vulnerability was found in go-retryablehttp. The package may suffer from a lack of input sanitization by not cleaning up URL data when writing to the logs. This issue could expose sensitive authentication information...

6CVSS7.1AI score0.00355EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2024/08/20 3:50 p.m.2 views

urllib3: proxy-authorization request header is not stripped during cross-origin redirects

A flaw was found in urllib3, an HTTP client library for Python. In certain configurations, urllib3 does not treat the Proxy-Authorization HTTP header as one carrying authentication material. This issue results in not stripping the header on cross-origin redirects...

6.5CVSS6.7AI score0.01141EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2024/08/13 12:0 a.m.2 views

PT-2024-5715 · Microsoft · Windows Resource Manager Psm Service Extension +1

Name of the Vulnerable Software and Affected Versions: Windows Resource Manager PSM Service Extension affected versions not specified Description: The issue is related to the use of insecure mechanisms for handling authentication data in the operating system's memory. This can allow an attacker t...

7CVSS6.5AI score0.00425EPSS
Exploits0References9
RedHat Linux
RedHat Linux
added 2024/08/12 2:39 a.m.2 views

go-retryablehttp: url might write sensitive information to log file

A vulnerability was found in go-retryablehttp. The package may suffer from a lack of input sanitization by not cleaning up URL data when writing to the logs. This issue could expose sensitive authentication information...

6CVSS7.1AI score0.00355EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2024/08/07 1:32 p.m.4 views

go-retryablehttp: url might write sensitive information to log file

A vulnerability was found in go-retryablehttp. The package may suffer from a lack of input sanitization by not cleaning up URL data when writing to the logs. This issue could expose sensitive authentication information...

6CVSS7.1AI score0.00355EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2024/08/06 3:23 p.m.3 views

urllib3: proxy-authorization request header is not stripped during cross-origin redirects

A flaw was found in urllib3, an HTTP client library for Python. In certain configurations, urllib3 does not treat the Proxy-Authorization HTTP header as one carrying authentication material. This issue results in not stripping the header on cross-origin redirects...

6.5CVSS6.7AI score0.01141EPSS
Exploits1References4
RedHat Linux
RedHat Linux
added 2024/07/31 1:21 p.m.1 views

go-retryablehttp: url might write sensitive information to log file

A vulnerability was found in go-retryablehttp. The package may suffer from a lack of input sanitization by not cleaning up URL data when writing to the logs. This issue could expose sensitive authentication information...

6CVSS7.1AI score0.00355EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2024/07/31 12:44 a.m.1 views

go-retryablehttp: url might write sensitive information to log file

A vulnerability was found in go-retryablehttp. The package may suffer from a lack of input sanitization by not cleaning up URL data when writing to the logs. This issue could expose sensitive authentication information...

6CVSS7.1AI score0.00355EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2024/07/22 12:0 a.m.2 views

The vulnerability of the rpm-ostree package allows unauthorized access to authentication data on Red Hat Enterprise Linux and Fedora operating systems.

The vulnerability of the rpm-ostree package in Red Hat Enterprise Linux and Fedora systems is related to the improper assignment of permissions for a critical resource. Exploiting this vulnerability can allow an attacker to gain unauthorized access to authentication data...

6.2CVSS6.4AI score0.00328EPSS
Exploits0References7Affected Software3
CNNVD
CNNVD
added 2024/06/14 12:0 a.m.4 views

Toshiba e-STUDIO Security Vulnerability

Toshiba e-STUDIO is a series of high-end office multifunction printers from Toshiba, Japan. A security vulnerability exists in Toshiba e-STUDIO that originates when some authentication information between programs within the multifunction device is written directly into the program, so that this...

6.2CVSS6.6AI score0.00238EPSS
Exploits1References4
CNNVD
CNNVD
added 2024/06/14 12:0 a.m.2 views

Toshiba e-STUDIO Security Vulnerability

Toshiba e-STUDIO is a series of high-end office multifunction printers from Toshiba, Japan. A security vulnerability exists in Toshiba e-STUDIO that originates when some authentication information between programs within the multifunction device is written directly into the program, so that this...

7.4CVSS6.6AI score0.00274EPSS
Exploits1References4
CNNVD
CNNVD
added 2024/06/14 12:0 a.m.2 views

Toshiba e-STUDIO Security Vulnerability

Toshiba e-STUDIO is a series of high-end office multifunction printers from Toshiba, Japan. A security vulnerability exists in Toshiba e-STUDIO that originates when some authentication information between programs within the multifunction device is written directly into the program, so that this...

6.2CVSS6.6AI score0.00156EPSS
Exploits1References4
CNNVD
CNNVD
added 2024/06/14 12:0 a.m.3 views

Toshiba e-STUDIO Security Vulnerability

Toshiba e-STUDIO is a series of high-end office multifunction printers from Toshiba Japan. A security vulnerability exists in Toshiba e-STUDIO that originates from some authentication information being written to a log file, so that by spoofing external communications, this information could be...

6.8CVSS6.6AI score0.00438EPSS
Exploits1References4
CNNVD
CNNVD
added 2024/06/14 12:0 a.m.4 views

Toshiba e-STUDIO Security Vulnerability

Toshiba e-STUDIO is a series of high-end office multifunction printers from Toshiba Japan. A security vulnerability exists in Toshiba e-STUDIO that originates from some authentication information being written to a log file, so that by spoofing external communications, this information could be...

6.2CVSS6.6AI score0.00252EPSS
Exploits1References4
CNNVD
CNNVD
added 2024/06/14 12:0 a.m.3 views

Toshiba e-STUDIO Security Vulnerability

Toshiba e-STUDIO is a series of high-end office multifunction printers from Toshiba Japan. A security vulnerability exists in Toshiba e-STUDIO that originates from some authentication information being written to a log file, so that by spoofing external communications, this information could be...

6.8CVSS6.6AI score0.00438EPSS
Exploits1References4
CNNVD
CNNVD
added 2024/06/14 12:0 a.m.3 views

Toshiba e-STUDIO Security Vulnerability

Toshiba e-STUDIO is a series of high-end office multifunction printers from Toshiba, Japan. A security vulnerability exists in Toshiba e-STUDIO that originates when some authentication information between programs within the multifunction device is written directly into the program, so that this...

7.1CVSS6.6AI score0.00286EPSS
Exploits1References4
Rows per page
Query Builder