Lucene search
+L

334 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/20 12:00 a.m.•11 views

CVE-2024-49355: Improper Output Neutralization for Logs

IBM OpenPages with Watson 8.3 and 9.0 may write improperly neutralized data to server log files when the tracing is enabled per the System Tracing feature...

6.5CVSS5.8AI score0.00281EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/05 12:00 a.m.•8 views

CVE-2024-56473: Improper Output Neutralization for Logs

IBM Aspera Shares 1.9.0 through 1.10.0 PL6 could allow an attacker to spoof their IP address, which is written to log files, due to improper verification of 'Client-IP' headers...

5.3CVSS5.8AI score0.00283EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/01/21 12:00 a.m.•26 views

PT-2025-3240 · Unknown · Poll Maker

Name of the Vulnerable Software and Affected Versions: Poll Maker affected versions not specified Description: The issue is related to improper encoding or escaping of output in Poll Maker Team Poll Maker. This can potentially lead to security issues, but specific details about exploitation, such...

5.3CVSS9.4AI score0.00283EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/07 12:00 a.m.•7 views

CVE-2024-7696: Improper Output Neutralization for Logs

Seth Fogie, member of AXIS Camera Station Pro Bug Bounty Program, has found that it is possible for an authenticated malicious client to tamper with audit log creation in AXIS Camera Station, or perform a Denial-of-Service attack on the AXIS Camera Station server using maliciously crafted audit l...

6.3CVSS5.7AI score0.00235EPSS
SaveExploits0References1
NVD
NVD
•added 2024/12/12 12:15 p.m.•25 views

CVE-2024-8179

An issue has been discovered in GitLab CE/EE affecting all versions from 17.3 before 17.4.6, 17.5 before 17.5.4, and 17.6 before 17.6.2. Improper output encoding could lead to XSS if CSP is not enabled...

5.4CVSS0.00332EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2024/12/12 12:03 p.m.•17 views

CVE-2024-8179 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions from 17.3 before 17.4.6, 17.5 before 17.5.4, and 17.6 before 17.6.2. Improper output encoding could lead to XSS if CSP is not enabled...

5.4CVSS5.9AI score
SaveExploits0References5
Mend
Mend
•added 2024/12/12 12:03 p.m.•5 views

CVE-2024-8179

An issue has been discovered in GitLab CE/EE affecting all versions from 17.3 before 17.4.6, 17.5 before 17.5.4, and 17.6 before 17.6.2. Improper output encoding could lead to XSS if CSP is not enabled...

5.4CVSS0.00332EPSS
SaveExploits0References5
Debian CVE
Debian CVE
•added 2024/12/12 12:03 p.m.•23 views

CVE-2024-8179

Removed by vendor...

5.4CVSS5.8AI score0.00332EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/12 12:00 a.m.•4 views

CVE-2024-8179: Improper Neutralization of Input During Web Page Generation

An issue has been discovered in GitLab CE/EE affecting all versions from 17.3 before 17.4.6, 17.5 before 17.5.4, and 17.6 before 17.6.2. Improper output encoding could lead to XSS if CSP is not enabled...

5.4CVSS5.6AI score0.00332EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2024/11/29 9:31 p.m.•36 views

Ant-Media-Server vulnerable to Improper Output Neutralization for Logs

Ant-Media-Server v2.8.2 is affected by Improper Output Neutralization for Logs. The vulnerability stems from insufficient input sanitization in the logging mechanism. Without proper filtering or validation, user-controllable data, such as identifiers or other sensitive information, can be include...

7.5CVSS6.8AI score0.00544EPSS
SaveExploits0References5Affected Software1
osv_ghsa
osv_ghsa
•added 2024/11/29 9:31 p.m.•36 views

GHSA-2GX6-QRPP-C4P3 Ant-Media-Server vulnerable to Improper Output Neutralization for Logs

Ant-Media-Server v2.8.2 is affected by Improper Output Neutralization for Logs. The vulnerability stems from insufficient input sanitization in the logging mechanism. Without proper filtering or validation, user-controllable data, such as identifiers or other sensitive information, can be include...

8.7CVSS7.5AI score0.00544EPSS
SaveExploits0References5
NVD
NVD
•added 2024/11/29 8:15 p.m.•35 views

CVE-2024-35371

Ant-Media-Serverv2.8.2 is affected by Improper Output Neutralization for Logs. The vulnerability stems from insufficient input sanitization in the logging mechanism. Without proper filtering or validation, user-controllable data, such as identifiers or other sensitive information, can be included...

7.5CVSS0.00544EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2024/11/29 12:00 a.m.•16 views

CVE-2024-35371

Ant-Media-Serverv2.8.2 is affected by Improper Output Neutralization for Logs. The vulnerability stems from insufficient input sanitization in the logging mechanism. Without proper filtering or validation, user-controllable data, such as identifiers or other sensitive information, can be included...

6.8AI score0.00544EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/29 12:00 a.m.•7 views

CVE-2024-35371: Out-of-bounds Read

Ant-Media-Serverv2.8.2 is affected by Improper Output Neutralization for Logs. The vulnerability stems from insufficient input sanitization in the logging mechanism. Without proper filtering or validation, user-controllable data, such as identifiers or other sensitive information, can be included...

7.5CVSS5.9AI score0.00544EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/11/29 12:00 a.m.•37 views

CVE-2024-35371

Ant-Media-Serverv2.8.2 is affected by Improper Output Neutralization for Logs. The vulnerability stems from insufficient input sanitization in the logging mechanism. Without proper filtering or validation, user-controllable data, such as identifiers or other sensitive information, can be included...

0.00544EPSS
SaveExploits0References3
CVE
CVE
•added 2024/11/29 12:00 a.m.•82 views

CVE-2024-35371

Ant-Media-Server version v2.8.2 is vulnerable to Improper Output Neutralization for Logs due to insufficient input sanitization within the logging mechanism. The flaw allows user-controllable data, including identifiers or other sensitive information, to be included in log entries without proper ...

7.5CVSS6.9AI score0.00544EPSS
SaveExploits0References3
Mend
Mend
•added 2024/11/29 12:00 a.m.•16 views

CVE-2024-35371

Ant-Media-Serverv2.8.2 is affected by Improper Output Neutralization for Logs. The vulnerability stems from insufficient input sanitization in the logging mechanism. Without proper filtering or validation, user-controllable data, such as identifiers or other sensitive information, can be included...

8.7CVSS0.00544EPSS
SaveExploits0References6
Snyk
Snyk
•added 2024/11/27 9:59 p.m.•16 views

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

Overview Affected versions of this package are vulnerable to Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' due to the improper handling of user input in the email sending functionality. An attacker can send spam, phishing emails, or other malicio...

8.7CVSS7AI score0.00464EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2024/11/18 12:00 a.m.•22 views

Siemens SCALANCE M-800 Improper Output Neutralization For Logs (CVE-2024-5594)

control channel: refuse control channel messages with nonprintable characters in them. Security scope: a malicious openvpn peer can send garbage to openvpn log, or cause high CPU load This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...

9.1CVSS7.7AI score0.00817EPSS
SaveExploits0References4
Mend
Mend
•added 2024/11/14 11:02 a.m.•7 views

CVE-2024-8180

An issue has been discovered in GitLab CE/EE affecting all versions from 17.3 before 17.3.7, 17.4 before 17.4.4, and 17.5 before 17.5.2. Improper output encoding could lead to XSS if CSP is not enabled...

5.4CVSS0.00359EPSS
SaveExploits0References6
Rows per page
Query Builder