Milesight Log Information Disclosure Vulnerability

Milesight is a complete Artificial Intelligence Video Surveillance solution from China's StarZone IOT Milesight. A log information disclosure vulnerability exists in Milesight UR5X, UR32L, UR32, UR35, UR41, and Industrial Cellular Routers prior to v35.3.0.7, which stems from a vulnerability that...

Ibermática RPS 2019 Log Information Disclosure Vulnerability

Ibermática RPS 2019 is an ERP software from Ibermática. Ibermática RPS 2019 suffers from a log information disclosure vulnerability that originates from allowing an unauthenticated user to retrieve sensitive information such as usernames, IP addresses, or SQL queries sent to the application...

Ibermática RPS 2019 Log Information Disclosure Vulnerability

Ibermática RPS 2019 is an ERP software from Ibermática. Ibermática RPS 2019 suffers from a log message disclosure vulnerability that originates from an attacker being able to download a log file that contains a password hash encoded using the AES-CBC-128 bit algorithm, which can be decrypted usin...

Active Directory Integration < 4.1.10 - Unauthenticated Log Disclosure

Description The plugin stores sensitive LDAP logs in a buffer file when an administrator wants to export said logs. Unfortunately, this log file is never removed, and remains accessible to any users knowing the URL to do so. PoC This requires the plugin's Log Authentication Requests setting to be...

SUSE Manager Log Information Disclosure Vulnerability

SUSE Manager is a Linux server management system from SUSE Germany. The system provides automated software management, system configuration and monitoring. A log information disclosure vulnerability exists in SUSE Manager Server Module versions prior to 4.2 4.2.50-150300.3.66.5, 4.3...

ArgoCD Log Information Disclosure Vulnerability

ArgoCD is a software application. A declarative GitOps continuous delivery tool for Kubernetes. It continuously monitors running applications and compares the current live state with the desired target state e.g., configuration in a Git repository, automatically synchronizing and deploying...

Acronis Agent 日志信息泄露漏洞

Acronis Agent is an agent software from Acronis Singapore. A security vulnerability exists in Acronis Agent that originates from the disclosure of sensitive information via log files...

Spinnaker 日志信息泄露漏洞

Spinnaker is a continuous delivery platform. It is used to release software changes with high speed and confidence. Spinnaker suffers from a log information disclosure vulnerability that stems from the possibility of granting elevated access to an uncontrolled repository...

Dell EMC ECS 日志信息泄露漏洞

Dell EMC ECS is a storage device from Dell USA. A log information disclosure vulnerability exists in Dell EMC ECS Streamer prior to version 2.0.7.1, which originates from inserting sensitive information into a log file, resulting in the disclosure of sensitive data...

JetBrains TeamCity 日志信息泄露漏洞

JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides continuous unit testing, code quality analysis and build problem analysis reports and other features. An information disclosure vulnerability exists in...

CVE-2023-2878 Kubernetes secrets-store-csi-driver discloses service account tokens in logs

Kubernetes secrets-store-csi-driver in versions before 1.3.3 discloses service account tokens in logs...

Hoppscotch 日志信息泄露漏洞

Hoppscotch is an open source Api development ecosystem. A log information disclosure vulnerability exists in Hoppscotch versions prior to 2023.4.5, which stems from a database password being exposed in the log when a database connection string is displayed...

SAMSUNG Mobile devices 日志信息泄露漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, and more, from the South Korean company Samsung SAMSUNG. A security vulnerability previously existed in SAMSUNG Mobile devices SMR May-2023 Release 1 version, which stemmed from a log file that allowed a...

cloud-init 日志信息泄露漏洞

cloud-init is an industry-standard multi-distribution method for cross-platform cloud instance initialization open-sourced by Canonical. A security vulnerability exists in cloud-init versions prior to 23.1.2, which stems from the possibility of exposing sensitive data in logs. An attacker exploit...

Cilium 日志信息泄露漏洞

Cilium is an open source software. It is used to provide and transparently secure network connectivity and load balancing between application workloads such as application containers or processes. A logging information disclosure vulnerability exists in Cilium that stems from Cilium logging...

CVE-2023-28266 Windows Common Log File System Driver Information Disclosure Vulnerability

...

JetBrains PhpStorm 日志信息泄露漏洞

JetBrains PhpStorm is an application from the Czech company JetBrains. It provides an application for writing code. A log information disclosure vulnerability exists in JetBrains PhpStorm versions prior to 2023.1, which stems from the fact that code can be logged locally in the idea.log file...

NGINX Agent 日志信息泄露漏洞

Nginx is a lightweight web server/reverse proxy server and email IMAP/POP3 proxy server from the US-based Nginx Corporation. A log information disclosure vulnerability exists in NGINX Agent version 2.0 prior to 2.23.3, which stems from NGINX Agent inserting sensitive information into log files...

MongoDB 日志信息泄露漏洞

MongoDB is a document-oriented database management system from the U.S.-based MongoDB, Inc. A log information disclosure vulnerability exists in the MongoDB Atlas Kubernetes Operator, which originates from printing sensitive information such as GCP service account keys and API integration secrets...

GoCD 日志信息泄露漏洞

GoCD is a continuous delivery server. A log information disclosure vulnerability exists in GoCD versions prior to 20.5.0 through 23.1.0. An attacker could exploit this vulnerability to cause sensitive information to be disclosed...