PT-2025-3469 · Cmsimple · Cmsimple

Name of the Vulnerable Software and Affected Versions: CMSimple version 5.16 Description: The issue is related to incorrect restriction of a directory path with limited access. Exploitation may allow a remote attacker to gain unauthorized access to protected information by sending a specially...

Hanwha Vision NVR 安全漏洞

Hanwha Vision NVR is a series of network video recorder devices from Hanwha Vision, a South Korean company. A security vulnerability exists in the Hanwha Vision NVR that originates from an attacker being able to create log files in a directory one level higher than the directory where the NVR log...

PT-2024-29618

Name of the Vulnerable Software and Affected Versions NVR affected versions not specified Description A flaw has been discovered that allows for remote code execution on the NVR. An attacker can create an NVR log file in a directory one level higher on the system, which can be used to corrupt fil...

CVE-2024-12569

Disclosure of sensitive information in a Milestone XProtect Device Pack driver’s log file for third-party cameras, allows an attacker to read camera credentials stored in the Recording Server under specific conditions...

CVE-2024-12569

CVE-2024-12569 describes an information-disclosure in the Milestone XProtect Device Pack driver’s log files, allowing a local attacker to read camera credentials stored in the Recording Server under certain conditions. The vulnerability affects the Milestone XProtect Device Pack camera drivers an...

CVE-2024-12569 Sensitive Information in Driver’s Log File

Disclosure of sensitive information in a Milestone XProtect Device Pack driver’s log file for third-party cameras, allows an attacker to read camera credentials stored in the Recording Server under specific conditions...

CVE-2024-12569: Insertion of Sensitive Information into Log File

Disclosure of sensitive information in a Milestone XProtect Device Pack driver’s log file for third-party cameras, allows an attacker to read camera credentials stored in the Recording Server under specific conditions...

Windows Common Log File System Driver Privilege Escalation

The vulnerability of the Windows Common Log File System CLFS driver in Microsoft Windows is related to operations that go beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

CVE-2024-49138

Windows Common Log File System Driver Elevation of Privilege Vulnerability...

CVE-2024-49138

Windows Common Log File System Driver Elevation of Privilege Vulnerability...

CVE-2024-49090

Windows Common Log File System Driver Elevation of Privilege Vulnerability...

CVE-2024-49088

Windows Common Log File System Driver Elevation of Privilege Vulnerability...

CVE-2024-42407

Insertion of Sensitive Information into Log File CWE-532 in the Gallagher Command Centre Alarm Transmitter feature could allow an authenticated Operator to view some security sensitive information to which they have not been granted access. This issue affects: Command Centre Server 9.10 prior to...

CVE-2024-54484: Insertion of Sensitive Information into Log File

The issue was resolved by sanitizing logging. This issue is fixed in macOS Sequoia 15.2. An app may be able to access user-sensitive data...

CVE-2024-12292: Insertion of Sensitive Information into Log File

An issue was discovered in GitLab CE/EE affecting all versions starting from 11.0 prior to 17.4.6, starting from 17.5 prior to 17.5.4, and starting from 17.6 prior to 17.6.2, where sensitive information passed in GraphQL mutations may have been retained in GraphQL logs...

CVE-2024-49138 Windows Common Log File System Driver Elevation of Privilege Vulnerability

...

CVE-2024-49090 Windows Common Log File System Driver Elevation of Privilege Vulnerability

...

CVE-2024-49090 Windows Common Log File System Driver Elevation of Privilege Vulnerability

...

CVE-2024-49088 Windows Common Log File System Driver Elevation of Privilege Vulnerability

...

CVE-2024-49088

CVE-2024-49088 affects the Windows Common Log File System Driver and is described as a local elevation of privilege vulnerability. The CVSS 3.1 vector (LOCAL, LOW complexity, LOW privileges required) with a base score of 7.8 indicates a high-risk, local-attack scenario resulting in high impact to...