Lucene search
+L

5943 matches found

Vulnrichment
Vulnrichment
•added 2024/03/28 6:17 a.m.•14 views

CVE-2024-25923 WordPress Community by PeepSo plugin <= 6.2.7.0 - Sensitive Data Exposure via Log File vulnerability

Insertion of Sensitive Information into Log File vulnerability in PeepSo Community by PeepSo.This issue affects Community by PeepSo: from n/a through 6.2.7.0...

5.3CVSS6.9AI score0.00443EPSS
SaveExploits0References1
CVE
CVE
•added 2024/03/28 6:17 a.m.•74 views

CVE-2024-25923

CVE-2024-25923 affects the WordPress plugin Community by PeepSo (versions up to 6.2.7.0). The issue is an insertion of sensitive information into log files, enabling potential unauthenticated information disclosure. Patch guidance from Patchstack indicates the fix is in version 6.2.7.1; upgrading...

5.3CVSS8.6AI score0.00443EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/28 12:00 a.m.•8 views

CVE-2024-25959: Insertion of Sensitive Information into Log File

Dell PowerScale OneFS versions 9.4.0.x through 9.7.0.x contains an insertion of sensitive information into log file vulnerability. A low privileged local attacker could potentially exploit this vulnerability, leading to sensitive information disclosure, escalation of privileges...

7.9CVSS5.8AI score0.00161EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/28 12:00 a.m.•9 views

CVE-2024-22138: Insertion of Sensitive Information into Log File

Insertion of Sensitive Information into Log File vulnerability in Seraphinite Solutions Seraphinite Accelerator.This issue affects Seraphinite Accelerator: from n/a through 2.20.47...

5.3CVSS8.2AI score0.00443EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/03/28 12:00 a.m.•24 views

PT-2024-23338 · Netentsec · Netentsec Ns-Asg Application Security Gateway

Name of the Vulnerable Software and Affected Versions: Netentsec NS-ASG Application Security Gateway version 6.3 Description: A critical issue has been found in the Netentsec NS-ASG Application Security Gateway, affecting unknown code of the file /protocol/log/listloginfo.php. The manipulation...

9.8CVSS7.1AI score0.00824EPSS
SaveExploits1References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/28 12:00 a.m.•7 views

CVE-2024-25923: Insertion of Sensitive Information into Log File

Insertion of Sensitive Information into Log File vulnerability in PeepSo Community by PeepSo.This issue affects Community by PeepSo: from n/a through 6.2.7.0...

5.3CVSS5.8AI score0.00443EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/03/27 12:00 a.m.•22 views

PT-2024-3987 · Ivanti · Ivanti Epm +1

Name of the Vulnerable Software and Affected Versions: Ivanti EPM versions 2022 SU5 and prior Description: The issue is related to an unspecified SQL Injection vulnerability in the Core server of Ivanti EPM, allowing an authenticated attacker within the same network to execute arbitrary code. Thi...

9CVSS8.7AI score0.08484EPSS
SaveExploits0References13
Positive Technologies
Positive Technologies
•added 2024/03/27 12:00 a.m.•20 views

PT-2024-4013 · Ivanti · Ivanti Epm +1

Name of the Vulnerable Software and Affected Versions: Ivanti EPM versions 2022 SU5 and prior Description: The issue is related to an SQL Injection vulnerability in the Core server of Ivanti EPM, allowing an authenticated attacker within the same network to execute arbitrary code. Specifically, t...

9CVSS8.5AI score0.08233EPSS
SaveExploits0References8
CVE
CVE
•added 2024/03/26 5:20 p.m.•94 views

CVE-2023-44989

CVE-2023-44989 affects the CF7 Google Sheets Connector WordPress plugin. It enables unauthenticated exposure of sensitive data via the plugin’s debug log (google-sheet-connector.php) for versions up to 5.0.5. Patch: upgrade to 5.0.6. The CVSS/impact details in connected sources cite high severity...

7.5CVSS8.6AI score0.0052EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/26 12:00 a.m.•8 views

CVE-2023-44989: Insertion of Sensitive Information into Log File

Insertion of Sensitive Information into Log File vulnerability in GSheetConnector CF7 Google Sheets Connector.This issue affects CF7 Google Sheets Connector: from n/a through 5.0.5...

7.5CVSS5.8AI score0.0052EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2024/03/25 2:15 p.m.•11 views

CVE-2024-28387

An issue in axonaut v.3.1.23 and before allows a remote attacker to obtain sensitive information via the log.txt component...

7.5CVSS5.8AI score0.00448EPSS
SaveExploits0References2
NVD
NVD
•added 2024/03/25 6:15 a.m.•35 views

CVE-2022-36407

Insertion of Sensitive Information into Log File vulnerability in Hitachi Virtual Storage Platform, Hitachi Virtual Storage Platform VP9500, Hitachi Virtual Storage Platform G1000, G1500, Hitachi Virtual Storage Platform F1500, Hitachi Virtual Storage Platform 5100, 5500, 5100H, 5500H, Hitachi...

9.9CVSS9.6AI score0.00514EPSS
SaveExploits0References1
CVE
CVE
•added 2024/03/25 5:55 a.m.•92 views

CVE-2022-36407

CVE-2022-36407 affects Hitachi Disk Array Systems, where the issue (Insertion of Sensitive Information into Log File) allows local users to gain sensitive information via log files. Concrete details are available in the connected sources: affected families include Hitachi Virtual Storage Platform...

9.9CVSS8.2AI score0.00514EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/03/25 12:00 a.m.•21 views

Hitachi Virtual Storage Platform security vulnerabilities

Hitachi Virtual Storage Platform is a series of computer data storage systems for data centers from Hitachi, Japan. A security vulnerability exists in Hitachi Virtual Storage Platform that stems from the insertion of sensitive information into a log file, resulting in a sensitive information...

9.9CVSS6AI score0.00514EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/25 12:00 a.m.•8 views

CVE-2022-36407: Insertion of Sensitive Information into Log File

Insertion of Sensitive Information into Log File vulnerability in Hitachi Virtual Storage Platform, Hitachi Virtual Storage Platform VP9500, Hitachi Virtual Storage Platform G1000, G1500, Hitachi Virtual Storage Platform F1500, Hitachi Virtual Storage Platform 5100, 5500, 5100H, 5500H, Hitachi...

9.9CVSS5.8AI score0.00514EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/03/24 12:00 a.m.•23 views

PT-2024-2503 · Hitachi · Hitachi Virtual Storage Platform G400 +39

Name of the Vulnerable Software and Affected Versions: Hitachi Virtual Storage Platform versions prior to DKCMAIN Ver. 70-06-74-00/00, SVP Ver. 70-06-58/00 Hitachi Virtual Storage Platform VP9500 versions prior to DKCMAIN Ver. 70-06-74-00/00, SVP Ver. 70-06-58/00 Hitachi Virtual Storage Platform...

9.9CVSS6.4AI score0.00514EPSS
SaveExploits0References7
osv_cve
osv_cve
•added 2024/03/21 10:15 p.m.•15 views

CVE-2024-24272

An issue in iTop DualSafe Password Manager & Digital Vault before 1.4.24 allows a local attacker to obtain sensitive information via leaked credentials as plaintext in a log file that can be accessed by the local user without knowledge of the master secret...

7.1CVSS5.8AI score0.00236EPSS
SaveExploits1References1
NVD
NVD
•added 2024/03/21 10:15 p.m.•29 views

CVE-2024-24272

An issue in iTop DualSafe Password Manager & Digital Vault before 1.4.24 allows a local attacker to obtain sensitive information via leaked credentials as plaintext in a log file that can be accessed by the local user without knowledge of the master secret...

7.1CVSS5.8AI score0.00236EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/03/21 12:00 a.m.•30 views

CVE-2024-24272

An issue in iTop DualSafe Password Manager & Digital Vault before 1.4.24 allows a local attacker to obtain sensitive information via leaked credentials as plaintext in a log file that can be accessed by the local user without knowledge of the master secret...

6AI score0.00236EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/03/21 12:00 a.m.•18 views

iTop DualSafe Password Manager & Digital Vault has security vulnerabilities

iTop DualSafe Password Manager & Digital Vault is a password manager extension from iTop Inc. A security vulnerability exists in iTop DualSafe Password Manager & Digital Vault versions prior to 1.4.24, which originated from a vulnerability that allows a local attacker to gain access to sensitive...

7.1CVSS6.5AI score0.00236EPSS
SaveExploits1References2
Rows per page
Query Builder