CVE-2021-0549

In sspRequestCallback of BondStateMachine.java, there is a possible leak of Bluetooth MAC addresses due to log information disclosure. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2021-0549

In sspRequestCallback of BondStateMachine.java, there is a possible leak of Bluetooth MAC addresses due to log information disclosure. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

Samsung Watch Active2 PlugIn 日志信息泄露漏洞

Samsung Watch Active2 is a smartwatch from the South Korean company Samsung Samsung. Watch Active PlugIn prior to version 2.2.07.21033151 suffers from a security vulnerability that can be exploited by an attacker to disclose the Wi-Fi password of a connection to a user's smartphone in a log...

Samsung Galaxy Watch PlugIn 日志信息泄露漏洞

Samsung Galaxy Apps is a pre-installed application store program for Samsung mobile devices from Samsung South Korea. Galaxy Watch PlugIn 2.2.05.21033151 previously had a security vulnerability that could be exploited by an attacker to disclose the Wi-Fi password of a connection to a user's...

A flaw was found in ansible module where credentials are disclosed in the console log by default and not protected by the security feature when using the bitbucket_pipeline_variable module. This flaw allows an attacker to steal bitbucket_pipeline credentials. The highest threat from this vulnerability is to confidentiality.

...

Red Hat OpenShift 日志信息泄露漏洞

Red Hat OpenShift is a Platform-as-a-Service PaaS cloud computing platform from Red Hat, Inc. that supports building, testing, deploying and running applications. A security vulnerability exists in Red Hat OpenShift prior to version 5.7.0. An attacker with access to log files could use the...

Automox Alive Automox Agent 日志信息泄露漏洞

Automox Alive Automox Agent is an application from the Automox Alive community. An agent software. A log information disclosure vulnerability exists in versions prior to Automox Agent 31, which stems from logging potentially sensitive information in local log files. No details of the vulnerabilit...

Cloud-init 日志信息泄露漏洞

Cloud-init is a virtual machine initialization tool for cloud platforms. Cloud-init suffers from a log message disclosure vulnerability that can be exploited by an attacker to bypass restrictions via a non-hash-generated cloud-init password in order to escalate his privileges...

KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 Unauthenticated Log Disclosure

KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 Unauthenticated Log Disclosure Vendor: KZ Broadband Technologies, Ltd. | Jaton Technology, Ltd. Product web page: http://www.kzbtech.com | http://www.jatontec.com | https://www.neotel.mk http://www.jatontec.com/products/show.php?itemid=258...

KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 Unauthenticated Log Disclosure

Summary JT3500V is a most advanced LTE-A Pro CAT12 indoor Wi-Fi & VoIP CPE product specially designed to enable quick and easy LTE fixed data service deployment for residential and SOHO customers. It provides high speed LAN, Wi-Fi and VoIP integrated services to end users who need both bandwidth...

Palo Alto Cortex XSOAR 日志信息泄露漏洞

Palo Alto Cortex XSOAR is a software application from Palo Alto, Inc. It provides a security orchestration, automation, and response platform with threat intelligence management and a built-in marketplace. A logging information disclosure vulnerability exists in the Cortex XSOAR software, which...

redhat AMQ 日志信息泄露漏洞

AMQ is a messaging middleware from Redhat that enables high-performance, secure, and reliable transfer of information between different services. A security vulnerability exists in redhat AMQ that arises from the disclosure of JDBC usernames and passwords in application logs...

Gradle 日志信息泄露漏洞

Gradle is a set of JVM-based project building tools from Gradle, Inc. that supports maven, Ivy repositories, and more. A log message disclosure vulnerability exists in the Gradle plugin's com.bmuschko:gradle-vagrant-plugin. When this Gradle plugin is executed in a public CI/CD, it results in the...

CVE-2021-0404

In mobilelogd, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-11; Patch ID: ALPS05457039...

Elasticsearch 日志信息泄露漏洞

Elasticsearch is a set of Dutch Elasticsearch company built on Lucene open source distributed RESTful search engine . The product is mainly used in cloud computing , and supports data indexing via HTTP using JSON. A log information disclosure vulnerability exists in Elasticsearch that originates...

GE APM Log Information Disclosure Vulnerability

GE APM is an equipment monitoring system from General Electric GE. The system allows continuous monitoring of equipment operating status and faults. A log information disclosure vulnerability exists in Elastic APM agent for Go, which originates from the abnormal output of log files from a network...

WordPress easy-wp-smtp plugin log message disclosure vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A log information disclosure vulnerability exists in the WordPress easy-wp-smtp plugin prior to...

CVE-2020-0476

In onNotificationRemoved of Assistant.java, there is a possible leak of sensitive information to logs. This could lead to local information disclosure with System execution privileges required. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID:...

Google Android Log Information Disclosure Vulnerability

Google Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA. Google Android Pixel has a security vulnerability, there is currently no information about this vulnerability, please stay tuned to CNNVD or the manufacturer's announcement...

Kubernetes Log Information Disclosure Vulnerability (CNVD-2020-65160)

Kubernetes is a set of open source Docker container cluster management system from Google Google. The system provides resource scheduling, deployment and operation, service discovery and scaling up and down for containerized applications. Kubernetes suffers from a log information disclosure...