Security Bulletin: IBM Lakehouse stores potentially sensitive information in log files that could be read by a local user, affects watsonx.data

Summary IBM Lakehouse stores potentially sensitive information in log files that could be read by a local user. This could affect watsonx.data. Vulnerability Details CVEID:CVE-2025-36144 DESCRIPTION: IBM Lakehouse stores potentially sensitive information in log files that could be read by a local...

CVE-2025-9985 Featured Image from URL (FIFU) <= 5.2.7 - Unauthenticated Information Exposure via Log File

The Featured Image from URL FIFU plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.2.7 through publicly exposed log files. This makes it possible for unauthenticated attackers to view potentially sensitive information contained in the...

The vulnerability of the MongoDB database management system, related to the exposure of confidential information in the log files, allows attackers to gain access to confidential data.

The vulnerability of the MongoDB database management system is related to the exposure of confidential information in the log files. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to confidential information...

Unauthorized Access

Liferay Portal is vulnerable to Unauthorized Access. The vulnerability is due to improper access control because unauthenticated users guests can access files uploaded by object entries and stored in documentlibrary via direct URL...

CVE-2025-34183

Ilevia EVE X1 Server version ≤ 4.7.18.0.eden contains a vulnerability in its server-side logging mechanism that allows unauthenticated remote attackers to retrieve plaintext credentials from exposed .log files. This flaw enables full authentication bypass and system compromise through credential...

Creation of Temporary File With Insecure Permissions

Overview Affected versions of this package are vulnerable to Creation of Temporary File With Insecure Permissions due to data written to RUN --mount=type=bind mounts during the podman build not being discarded. An attacker can gain unauthorized access to sensitive files by exploiting the exposure...

Podman Creates Temporary File with Insecure Permissions

A flaw was found in Podman. In a Containerfile or Podman, data written to RUN --mount=type=bind mounts during the podman build is not discarded. This issue can lead to files created within the container appearing in the temporary build context directory on the host, leaving the created files...

Exploit for CVE-2025-31125

🔐 Vite/Vue JS Exploitation Toolkit =============================...

vxscan

VXScan+ VXScan+ is an advanced Python-based web vulnerabili...

CVE-2025-43888

Dell PowerProtect Data Manager, Hyper-V, versions 19.19 and 19.20, contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access...

Linux Distros Unpatched Vulnerability : CVE-2019-9823

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In several JetBrains IntelliJ IDEA versions, creating remote run configurations of JavaEE application servers leads to saving a cleartext record of the server...

Linux Distros Unpatched Vulnerability : CVE-2024-28830

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insertion of Sensitive Information into Log File in Checkmk GmbH's Checkmk versions 2.3.0p7, 2.2.0p28, 2.1.0p45 and =2.0.0p39 EOL causes automation user secrets...

The vulnerability of the Dell OpenManage Enterprise system management console, which stems from the exposure of password values in the log file, allows a hacker to compromise the protected information.

The vulnerability of the Dell OpenManage Enterprise system management console relates to the disclosure of password values in log files. Exploiting this vulnerability could allow a malicious actor, operating remotely, to disclose sensitive information...

ebram_web_scanner

EBRAM Web Scanner EBRAM Web Scanner is a powerful Python-ba...

Insertion of Sensitive Information into Log File

Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File via the error handling for parameters marshalling. An attacker can obtain sensitive service account tokens sent to the providers by accessing log files containing these credentials...

Insertion of Sensitive Information into Log File

Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File via the error handling for parameters marshalling. An attacker can obtain sensitive service account tokens sent to the providers by accessing log files containing these credentials...

CVE-2025-8663

Insertion of Sensitive Information into Log File vulnerability in upKeeper Solutions upKeeper Manager allows Use of Known Domain Credentials.This issue affects upKeeper Manager: from 5.0.0 before 5.2.12...

XWiki Platform 安全漏洞

XWiki Platform is the XWiki open source suite of wiki platforms for creating web collaboration applications. A security vulnerability exists in XWiki Platform versions 4.2-milestone-2 through 16.10.6, which stems from a configuration file that is accessible via jsx and sx endpoints...

Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring operands are vulnerable to denial of service [CVE-2025-7338] and loss of confidentiality [CVE-2025-36133]

Summary IBM App Connect Enterprise Certified Container DesignerAuthoring operands are vulnerable to denial of service and loss of confidentiality. This bulletin provides patch information to address the reported vulnerabilities in the DesignerAuthoring component. CVE-2025-7338 CVE-2025-36133...

Linux Distros Unpatched Vulnerability : CVE-2023-44690

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inadequate encryption strength in mycli 1.27.0 allows attackers to view sensitive information via /mycli/config.py CVE-2023-44690 Note that Nessus relies on the...