71 matches found
PYSEC-2026-4301 Snowflake drivers writes sensitive information to logs
Insertion of sensitive information into log files in the Snowflake Python, Go, JDBC, Node.js, PHP PDO, and ODBC drivers allowed authentication tokens, query-result encryption keys, pre-signed cloud-storage URLs, and SAML assertions to be written to diagnostic logs in circumstances where the...
CVE-2026-85961
On Azure deployments, Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 may record security-sensitive authentication information in diagnostic logs under certain configurations. An attacker with access to the affected logs could use this information to obtain...
CVE-2026-85949
Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 may record security-sensitive information in diagnostic logs under certain configurations. An attacker with access to the affected logs could use this information to obtain unauthorized access to protected...
CVE-2026-85961 Sensitive information exposure in Progress MarkLogic Server Azure deployments
On Azure deployments, Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 may record security-sensitive authentication information in diagnostic logs under certain configurations. An attacker with access to the affected logs could use this information to obtain...
CVE-2026-85961
Progress MarkLogic Server versions 12.x before 12.1.0 and 11.x before 11.3.7 on Azure deployments may record security-sensitive authentication information in diagnostic logs under certain configurations. This exposure occurs due to the insertion of sensitive data into log files (CWE-532 ), potent...
EUVD-2026-97675
On Azure deployments, Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 may record security-sensitive authentication information in diagnostic logs under certain configurations. An attacker with access to the affected logs could use this information to obtain...
CVE-2026-85961 Sensitive information exposure in Progress MarkLogic Server Azure deployments
On Azure deployments, Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 may record security-sensitive authentication information in diagnostic logs under certain configurations. An attacker with access to the affected logs could use this information to obtain...
CVE-2026-85949
Progress MarkLogic Server versions 12.x before 12.1.0 and 11.x before 11.3.7 are vulnerable to sensitive information exposure . Under certain configurations, the software may record security-sensitive data into diagnostic trace logs . An attacker with access to these logs could leverage the expos...
EUVD-2026-97507
Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 may record security-sensitive information in diagnostic logs under certain configurations. An attacker with access to the affected logs could use this information to obtain unauthorized access to protected...
CVE-2026-85949 Sensitive information exposure in Progress MarkLogic Server trace logs
Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 may record security-sensitive information in diagnostic logs under certain configurations. An attacker with access to the affected logs could use this information to obtain unauthorized access to protected...
PT-2026-110642
Name of the Vulnerable Software and Affected Versions Progress MarkLogic Server versions 12.x prior to 12.1.0 Progress MarkLogic Server versions 11.x prior to 11.3.7 Description Under certain configurations, the software may record security-sensitive information in diagnostic logs. An attacker wh...
PT-2026-110793
šØ CVE-2026-85961 On Azure deployments, Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 may record security-sensitive authentication information in diagnostic logs under certain configurations. An attacker with access to the affected logs could use this...
CVE-2026-85961: Insertion of Sensitive Information into Log File
On Azure deployments, Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 may record security-sensitive authentication information in diagnostic logs under certain configurations. An attacker with access to the affected logs could use this information to obtain...
CVE-2026-85949: Insertion of Sensitive Information into Log File
Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 may record security-sensitive information in diagnostic logs under certain configurations. An attacker with access to the affected logs could use this information to obtain unauthorized access to protected...
Sensitive Data Leakage
Snowflake drivers are vulnerable to Insertion of Sensitive Data Leakage. The vulnerability is due to sensitive data such as authentication tokens, encryption keys, pre-signed cloud-storage URLs, and SAML assertions being written to diagnostic logs, which allows an attacker with read access to the...
Snowflake drivers writes sensitive information to logs
Insertion of sensitive information into log files in the Snowflake Python, Go, JDBC, Node.js, PHP PDO, and ODBC drivers allowed authentication tokens, query-result encryption keys, pre-signed cloud-storage URLs, and SAML assertions to be written to diagnostic logs in circumstances where the...
EUVD-2026-72672
Snowflake drivers writes sensitive information to logs...
CVE-2026-82716
The Botslab G980H dash camera firmware includes sensitive configuration information, including WiFi credentials, in diagnostic logs generated during the support process. These logs remain accessible on removable storage after the support operation has completed. An unauthenticated attacker with...
CVE-2026-82716
The Botslab G980H dash camera firmware contains a vulnerability where diagnostic logs generated during the support process include sensitive configuration information , such as WiFi credentials . These logs remain accessible on removable storage after the support operation is finished. An unauthe...
CVE-2026-82716 Botslab G980H Dashcams Insertion of Sensitive Information into Log File
The Botslab G980H dash camera firmware includes sensitive configuration information, including WiFi credentials, in diagnostic logs generated during the support process. These logs remain accessible on removable storage after the support operation has completed. An unauthenticated attacker with...