Lucene search
+L

348 matches found

OSV
OSV
added 2023/09/17 11:15 a.m.4 views

CVE-2023-5028

A vulnerability, which was classified as problematic, has been found in China Unicom TEWA-800G 4.16L.04CT2015Yueme. Affected by this issue is some unknown functionality. The manipulation leads to information exposure through debug log file. It is possible to launch the attack on the physical...

4.6CVSS4.3AI score0.00354EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2023/09/17 12:0 a.m.8 views

China Unicom TEWA-800G Log Information Disclosure Vulnerability

The China Unicom TEWA-800G is a router from China Unicom China Unicom. A log information disclosure vulnerability exists in the China Unicom TEWA-800G version 4.16L.04CT2015Yueme, which stems from a debug log file that discloses sensitive information. An attacker could exploit this vulnerability ...

4.6CVSS5.8AI score0.00354EPSS
SaveExploits1References5
NVD
NVD
added 2023/03/27 4:15 a.m.25 views

CVE-2022-39043

Juiker app stores debug logs which contains sensitive information to mobile external storage. An unauthenticated physical attacker can access these files to acquire partial user information such as personal contacts...

2.4CVSS3.2AI score0.00254EPSS
SaveExploits0References1
OSV
OSV
added 2023/03/27 4:15 a.m.6 views

CVE-2022-39043

Juiker app stores debug logs which contains sensitive information to mobile external storage. An unauthenticated physical attacker can access these files to acquire partial user information such as personal contacts...

2.4CVSS5.8AI score0.00254EPSS
SaveExploits0References1
Prion
Prion
added 2023/03/27 4:15 a.m.16 views

Information disclosure

Juiker app stores debug logs which contains sensitive information to mobile external storage. An unauthenticated physical attacker can access these files to acquire partial user information such as personal contacts...

2.1CVSS3.7AI score0.00254EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/03/27 12:0 a.m.61 views

CVE-2022-39043

Juiker app suffers an information disclosure vulnerability caused by storing debug logs on the mobile device’s external storage. Multiple sources describe that an unauthenticated physical attacker could access these logs and obtain partial user information (e.g., personal contacts). Some reports ...

2.4CVSS3.2AI score0.00254EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/03/27 12:0 a.m.11 views

CVE-2022-39043 Juiker app - Information Leakage

Juiker app stores debug logs which contains sensitive information to mobile external storage. An unauthenticated physical attacker can access these files to acquire partial user information such as personal contacts...

2.4CVSS3.3AI score0.00254EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/03/27 12:0 a.m.48 views

CVE-2022-39043 Juiker app - Information Leakage

Juiker app stores debug logs which contains sensitive information to mobile external storage. An unauthenticated physical attacker can access these files to acquire partial user information such as personal contacts...

2.4CVSS3.6AI score0.00254EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/03/27 12:0 a.m.15 views

PT-2023-13676 · Unknown · Juiker App

Name of the Vulnerable Software and Affected Versions: Juiker app affected versions not specified Description: The issue concerns the storage of debug logs by the Juiker app, which includes sensitive information such as personal contacts, to the mobile device's external storage. This allows an...

2.4CVSS3.3AI score0.00254EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/03/27 12:0 a.m.10 views

Juiker 信息泄露漏洞

Juiker is an instant messaging software for government and enterprise organizations from Juiker. An information disclosure vulnerability exists in Juiker version 4.6.0607.1, which originates from storing debug logs containing sensitive information to removable external storage. An attacker could...

2.4CVSS5AI score0.00254EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 2023/02/15 5:14 a.m.9 views

SUSE CVE-2015-6941

winuseradd, salt-cloud and the Linode driver in salt 2015.5.x before 2015.5.6, and 2015.8.x before 2015.8.1 leak password information in debug logs...

9.8CVSS6.9AI score0.02238EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2023/02/15 4:23 a.m.3 views

SUSE CVE-2018-16889

Ceph does not properly sanitize encryption keys in debug logging for v4 auth. This results in the leaking of encryption key information in log files via plaintext. Versions up to v13.2.4 are vulnerable...

5.5CVSS6.7AI score0.00536EPSS
SaveExploits1References7
SUSE CVE
SUSE CVE
added 2023/02/15 3:34 a.m.5 views

SUSE CVE-2022-0718

A flaw was found in python-oslo-utils. Due to improper parsing, passwords with a double quote " in them cause incorrect masking in debug logs, causing any part of the password after the double quote to be plaintext...

6CVSS7.4AI score0.01383EPSS
SaveExploits1References4
SUSE CVE
SUSE CVE
added 2023/02/15 3:28 a.m.6 views

SUSE CVE-2022-23469

Traefik is an open source HTTP reverse proxy and load balancer. Versions prior to 2.9.6 are subject to a potential vulnerability in Traefik displaying the Authorization header in its debug logs. In certain cases, if the log level is set to DEBUG, credentials provided using the Authorization heade...

6.5CVSS6.7AI score0.00977EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2022/12/11 12:0 a.m.33 views

FreeBSD : traefik -- multiple vulnerabilities (508da89c-78b9-11ed-854f-5404a68ad561)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 508da89c-78b9-11ed-854f-5404a68ad561 advisory. - Traefik is an open source HTTP reverse proxy and load balancer. Versions prior to 2.9.6 are...

8.1CVSS6.8AI score0.00977EPSS
SaveExploits1References4
OSV
OSV
added 2022/12/09 2:15 a.m.5 views

CVE-2022-33187

Brocade SANnav before v2.2.1 logs usernames and encoded passwords in debug-enabled logs. The vulnerability could allow an attacker with admin privilege to read sensitive information...

4.9CVSS5.8AI score
SaveExploits0References1
Prion
Prion
added 2022/12/09 2:15 a.m.21 views

Information disclosure

Brocade SANnav before v2.2.1 logs usernames and encoded passwords in debug-enabled logs. The vulnerability could allow an attacker with admin privilege to read sensitive information...

3.3CVSS5AI score0.00461EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2022/12/09 1:48 a.m.13 views

CVE-2022-33187 Brocade SANnav before v2.2.1 logs usernames and encoded passwords in debug-enabled logs

Brocade SANnav before v2.2.1 logs usernames and encoded passwords in debug-enabled logs. The vulnerability could allow an attacker with admin privilege to read sensitive information...

5.5CVSS6.9AI score0.00461EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2022/12/09 12:0 a.m.9 views

Broadcom Brocade SANnav 日志信息泄露漏洞

Broadcom Brocade SANnav is a suite of SAN management platforms from Broadcom USA. A security vulnerability exists in Broadcom Brocade SANnav versions prior to v2.2.1, which originates from logging usernames and encoded passwords in debug-enabled logs, and can be exploited by an attacker to read...

5.5CVSS5.4AI score0.00461EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2022/12/09 12:0 a.m.10 views

PT-2022-21729 · Brocade · Brocade Sannav

Name of the Vulnerable Software and Affected Versions: Brocade SANnav versions prior to 2.2.1 Description: The issue allows an attacker with admin privilege to read sensitive information, including usernames and encoded passwords, which are logged in debug-enabled logs. Recommendations: For...

5.5CVSS5AI score0.00461EPSS
SaveExploits0References3
Rows per page
Query Builder