PT-2024-23997 · Tribulant · Tribulant Slideshow Gallery

Name of the Vulnerable Software and Affected Versions: Tribulant Slideshow Gallery versions 1.7.8 and earlier Description: The issue is related to the insertion of sensitive information into log files. This could potentially expose sensitive data. Recommendations: For versions 1.7.8 and earlier,...

CVE-2024-31815

In TOTOLINK EX200 V4.0.3c.7314B20191204, an attacker can obtain the configuration file without authorization through /cgi-bin/ExportSettings.sh...

CVE-2024-3430 QKSMS Backup File androidmanifest.xml backup

A vulnerability was found in QKSMS up to 3.9.4 on Android. It has been classified as problematic. This affects an unknown part of the file androidmanifest.xml of the component Backup File Handler. The manipulation leads to exposure of backup file to an unauthorized control sphere. It is possible ...

WordPress User Spam Remover plugin <= 1.0 - Sensitive Data Exposure via Log File vulnerability

Sensitive Data Exposure via Log File vulnerability discovered by Joshua Chan Patchstack Alliance in WordPress Plugin User Spam Remover versions = 1.0...

CVE-2024-25030

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 11.1 stores potentially sensitive information in log files that could be read by a local user. IBM X-Force ID: 281677...

PT-2024-23439 · Unknown · Fg Prestashop To Woocommerce

Name of the Vulnerable Software and Affected Versions: FG PrestaShop to WooCommerce versions n/a through 4.45.1 Description: The issue is related to the insertion of sensitive information into log files. This can potentially expose confidential data. There is no information provided about the...

iTop DualSafe Password Manager & Digital Vault 安全漏洞

iTop DualSafe Password Manager & Digital Vault is a password manager extension from iTop Inc. A security vulnerability exists in iTop DualSafe Password Manager & Digital Vault versions prior to 1.4.24, which originated from a vulnerability that allows a local attacker to gain access to sensitive...

Jenkins Args4j CVE-2024-23897: Files Exposed, Code at Risk

Jenkins, a popular open-source automation server, was discovered to be affected by a file read vulnerability, CVE-2024-23897...

CVE-2024-2567

UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as problematic, was found in jurecapuder AndroidWeatherApp 1.0.0 on Android. Affected is an unknown function of the file androidmanifest.xml of the component Backup File Handler. The manipulation leads to exposure of backup file to a...

CVE-2024-1221 Improper access controls on APIs on Linux and macOS in PaperCut NG/MF

This vulnerability potentially allows files on a PaperCut NG/MF server to be exposed using a specifically formed payload against the impacted API endpoint. The attacker must carry out some reconnaissance to gain knowledge of a system token. This CVE only affects Linux and macOS PaperCut NG/MF...

PaperCut NG Security Vulnerability

PaperCut NG is a suite of next-generation printer control software from PaperCut Australia. A security vulnerability exists in PaperCut NG/MF that stems from a vulnerability that allows an attacker to expose files on the server to affected API endpoints via a payload...

PT-2024-17878 · Badger Meter · Badger Meter Monitool

Name of the Vulnerable Software and Affected Versions: Badger Meter Monitool versions up to 4.6.3 and earlier Description: The issue allows a local attacker to change the application's file parameter to a log file, obtaining sensitive information such as database credentials. Recommendations: For...

Online-Book-Store-Website SQL Injection Vulnerability

Online-Book-Store-Website is an online bookstore website. A SQL injection vulnerability exists in Online-Book-Store-Website version 1.0, which originates from an SQL injection vulnerability in the productname parameter of the /shop.php file...

BIT-AIRFLOW-2022-38170 Overly permissive umask for daemons

In Apache Airflow prior to 2.3.4, an insecure umask was configured for numerous Airflow components when running with the --daemon flag which could result in a race condition giving world-writable files in the Airflow home directory and allowing local users to expose arbitrary file contents via th...

BIT-JAEGER-2020-10750

Sensitive information written to a log file vulnerability was found in jaegertracing/jaeger before version 1.18.1 when the Kafka data store is used. This flaw allows an attacker with access to the container's log file to discover the Kafka credentials...

Plone Security Vulnerability

Plone is an open source content management system CMS built on the Zope application server. A security vulnerability exists in Plone version v6.0.9, which stems from improper access control and allows an attacker to view and enumerate all files hosted on the site by sending a specially crafted...

PT-2024-18702 · Sourcecodester · Sourcecodester Simple Online Bidding System

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Online Bidding System version 1.0 Description: A critical issue has been found in the system, affecting an unknown part of the file index.php. The manipulation of the category id argument leads to SQL injection. It is...

CVE-2024-22335

IBM QRadar Suite 1.10.12.0 through 1.10.17.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 stores potentially sensitive information in log files that could be read by a local user. IBM X-Force ID: 279975...

PT-2024-1918 · Ibm · Ibm Qradar Suite +1

Name of the Vulnerable Software and Affected Versions: IBM QRadar Suite versions 1.10.12.0 through 1.10.17.0 IBM Cloud Pak for Security versions 1.10.0.0 through 1.10.11.0 Description: The issue is related to insufficient protection of registration data in the IBM QRadar Suite and IBM Cloud Pak f...

SUSE CVE-2024-23651

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Two malicious build steps running in parallel sharing the same cache mounts with subpaths could cause a race condition that can lead to files from the host system being accessibl...