IBM Watsonx.data 日志信息泄露漏洞

IBM Watsonx.data is an open data lake warehouse platform from International Business Machines IBM. IBM Watsonx.data suffers from a log information disclosure vulnerability that stems from storing potentially sensitive information in log files, which can be exploited by an attacker to cause it to ...

CVE-2025-34188 Vasion Print (formerly PrinterLogic) Local Log Disclosure of Cleartext Sessions

Vasion Print formerly PrinterLogic Virtual Appliance Host versions prior to 1.0.735 and Application prior to 20.0.1330 macOS/Linux client deployments contain a vulnerability in the local logging mechanism. Authentication session tokens, including PHPSESSID, XSRF-TOKEN, and laravelsession, are...

CVE-2025-34188 Vasion Print (formerly PrinterLogic) Local Log Disclosure of Cleartext Sessions

Vasion Print formerly PrinterLogic Virtual Appliance Host versions prior to 1.0.735 and Application prior to 20.0.1330 macOS/Linux client deployments contain a vulnerability in the local logging mechanism. Authentication session tokens, including PHPSESSID, XSRF-TOKEN, and laravelsession, are...

Dell PowerProtect Data Manager Log Information Disclosure Vulnerability

Dell PowerProtect Data Manager PPDM is a data protection solution from Dell USA. The product supports features such as data backup, virtual machine backup and database protection. A log information disclosure vulnerability exists in Dell PowerProtect Data Manager versions 19.19 and 19.20, which...

Dell PowerProtect Data Manager 日志信息泄露漏洞

Dell PowerProtect Data Manager PPDM is a data protection solution from Dell USA. The product supports features such as data backup, virtual machine backup and database protection. A log information disclosure vulnerability exists in Dell PowerProtect Data Manager versions 19.19 and 19.20, which...

Linux Distros Unpatched Vulnerability : CVE-2024-43444

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Passwords of agents and customers are displayed in plain text in the OTRS admin log module if certain configurations regarding the authentication sources match...

Kubernetes 安全漏洞

Kubernetes K8s is an open source system for automating the deployment, scaling, and management of containerized applications from the Kubernetes open source. A security vulnerability exists in Kubernetes K8s versions prior to 0.0.2 that stems from the disclosure of service account tokens in logs...

PT-2025-36005

Name of the Vulnerable Software and Affected Versions: NVIDIA Cumulus Linux and NVOS products affected versions not specified Description: NVIDIA Cumulus Linux and NVOS products have an issue where hashed user passwords are not properly suppressed in log files, potentially disclosing information ...

Endress+hauser Ecograph 日志信息泄露漏洞

The Endress+hauser Ecograph is a data logger from Endress+hauser, Switzerland. It is used to securely and completely record and visualize all process sequences. The Endress+hauser Ecograph suffers from a log information disclosure vulnerability that stems from a password disclosure that could lea...

CVE-2025-36133

CVE-2025-36133 affects IBM App Connect Enterprise Certified Container CDs: 9.2.0–11.6.0, 12.1.0–12.14.0, and 12.0 LTS (12.0.0–12.0.14). The vulnerability involves logging sensitive information during installation that could be read by a local container user, constituting a local information-discl...

IBM App Connect Enterprise Certified Container 日志信息泄露漏洞

IBM App Connect Enterprise Certified Container is an image based on the IBM App Connect Enterprise software product from International Business Machines IBM. The package is provided as an executable file that can be deployed and run in a containerized environment. The IBM App Connect Enterprise...

Backstage 日志信息泄露漏洞

Backstage is a Backstage open source application. Backstage is an open platform for building developer portals. A log information disclosure vulnerability exists in versions prior to Backstage 2.1.1, which stems from duplicate logging of input values resulting in some secrets not being edited...

DELL XtremIO Log Message Disclosure Vulnerability

DELL XtremIO is an all-flash enterprise-class storage array from EMC, a Dell Technologies company, designed to enhance the performance of virtualization, database and analytics applications. DELL XtremIO suffers from a log information disclosure vulnerability that originates from the system...

SUSE Manager 日志信息泄露漏洞

SUSE Manager is a Linux server management system from SUSE Germany. The system provides automated software management, system configuration and monitoring. A log information disclosure vulnerability exists in SUSE Manager that originates from exposing HTTP proxy credentials in log files...

Dell Data Protection Advisor 日志信息泄露漏洞

Dell Data Protection Advisor is a reporting and analytics platform from Dell USA. A log information disclosure vulnerability exists in Dell Data Protection Advisor versions 2.6 through 3.37-30, which originates when sensitive information is inserted into a log file, potentially leading to...

GHSA-PQHP-4XFC-HJGQ Couchbase Sync Gateway shows cleartext passwords in redacted and unredacted output

An issue was discovered in Couchbase Sync Gateway before 3.2.6. In sgcollectinfooptions.log and syncgateway.log, there are cleartext passwords in redacted and unredacted output...

SwitchBot 日志信息泄露漏洞

SwitchBot is a smart switch program from SwitchBot, Inc. A log information disclosure vulnerability exists in SwitchBot versions V6.24 through V9.12, which originates when sensitive information is inserted into a log file, potentially leading to information disclosure...

The vulnerability of the Ansible configuration management system, related to the disclosure of information through log files, allows a perpetrator to gain unauthorized access to the protected information.

The vulnerability of the Ansible configuration management system is related to the exposure of information through log files. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Okta On-Premises Provisioning Agent 日志信息泄露漏洞

Okta On-Premises Provisioning Agent is a software from Okta USA that automates the creation, update and deletion of Otka user accounts in a local environment. A log information disclosure vulnerability exists in Okta On-Premises Provisioning Agent version 2.3.0 and prior versions, which originate...

Westermo WeOS 日志信息泄露漏洞

Westermo WeOS is an operating system from Westermo Sweden. A log information disclosure vulnerability exists in Westermo WeOS versions 5.24 through 5.24.4, which originates from the disclosure of system log information and could lead to the disclosure of sensitive information...