Lucene search
K

4562 matches found

CNNVD
CNNVD
added 2022/04/12 12:0 a.m.4 views

Microsoft Windows Common Log File System Driver输入验证错误漏洞

The Microsoft Windows Common Log File System Driver is Microsoft's Common Log File System CLFS API that provides a high-performance, general-purpose log file subsystem that can be used by specialized client applications and shared by multiple clients to optimize logging and access. access. A...

7.8CVSS7.7AI score0.07304EPSS
Exploits2References5
CNNVD
CNNVD
added 2022/04/12 12:0 a.m.5 views

Microsoft Windows Common Log File System Driver 权限许可和访问控制问题漏洞

The Microsoft Windows Common Log File System Driver is Microsoft's Common Log File System CLFS API that provides a high-performance, general-purpose log file subsystem that can be used by specialized client applications and shared by multiple clients to optimize logging and access. access. A...

7.8CVSS7.4AI score0.17108EPSS
Exploits2References6
Cvelist
Cvelist
added 2022/03/31 10:35 p.m.31 views

CVE-2022-24758 Insertion of Sensitive Information into Log File affects Jupyter Notebook

The Jupyter notebook is a web-based notebook environment for interactive computing. Prior to version 6.4.9, unauthorized actors can access sensitive information from server logs. Anytime a 5xx error is triggered, the auth cookie and other header values are recorded in Jupyter server logs by...

7.5CVSS7.8AI score0.01054EPSS
Exploits0References1
CNNVD
CNNVD
added 2022/03/31 12:0 a.m.5 views

OpenBoxLab Raidrive 安全漏洞

OpenBoxLab Raidrive is a remote file management system from OpenBoxLab Korea. Allows mapping of WebDAV/FTP/SFTP, routers, Google Drive Team Drive, Photos, OneDrive and Dropbox to network drives on File Explorer. A security vulnerability previously existed in OpenBoxLab Raidrive v2021.12.35, which...

2CVSS5.1AI score0.0029EPSS
Exploits1References2
ATTACKERKB
ATTACKERKB
added 2022/03/30 11:15 a.m.3 views

CVE-2022-23868

RuoYi v4.7.2 contains a CSV injection vulnerability through ruoyi-admin when a victim opens .xlsx log file...

7.8CVSS7.1AI score0.00704EPSS
Exploits1References2
NVD
NVD
added 2022/03/30 11:15 a.m.12 views

CVE-2022-23868

RuoYi v4.7.2 contains a CSV injection vulnerability through ruoyi-admin when a victim opens .xlsx log file...

7.8CVSS0.00704EPSS
Exploits1References1
OSV
OSV
added 2022/03/30 11:15 a.m.21 views

CVE-2022-23868

RuoYi v4.7.2 contains a CSV injection vulnerability through ruoyi-admin when a victim opens .xlsx log file...

7.8CVSS7.1AI score
Exploits0References1
Cvelist
Cvelist
added 2022/03/30 10:14 a.m.18 views

CVE-2022-23868

RuoYi v4.7.2 contains a CSV injection vulnerability through ruoyi-admin when a victim opens .xlsx log file...

7.9AI score0.00704EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2022/03/25 9:15 p.m.2 views

CVE-2022-26659

Docker Desktop installer on Windows in versions before 4.6.0 allows an attacker to overwrite any administrator writable files by creating a symlink in place of where the installer writes its log file. Starting from version 4.6.0, the Docker Desktop installer, when run elevated, will write its log...

7.1CVSS7AI score0.00425EPSS
Exploits0References5
NVD
NVD
added 2022/03/25 9:15 p.m.18 views

CVE-2022-26659

Docker Desktop installer on Windows in versions before 4.6.0 allows an attacker to overwrite any administrator writable files by creating a symlink in place of where the installer writes its log file. Starting from version 4.6.0, the Docker Desktop installer, when run elevated, will write its log...

7.1CVSS0.00425EPSS
Exploits0References3
Github Security Blog
Github Security Blog
added 2022/03/25 7:20 p.m.33 views

Insertion of Sensitive Information into Log File in Jupyter notebook

Impact What kind of vulnerability is it? Anytime a 5xx error is triggered, the auth cookie and other header values are recorded in Jupyter Server logs by default. Considering these logs do not require root access, an attacker can monitor these logs, steal sensitive auth/cookie information, and ga...

7.5CVSS1.9AI score0.01207EPSS
Exploits0References5Affected Software1
OSV
OSV
added 2022/03/25 7:20 p.m.18 views

GHSA-P737-P57G-4CPR Insertion of Sensitive Information into Log File in Jupyter notebook

Impact What kind of vulnerability is it? Anytime a 5xx error is triggered, the auth cookie and other header values are recorded in Jupyter Server logs by default. Considering these logs do not require root access, an attacker can monitor these logs, steal sensitive auth/cookie information, and ga...

7.5CVSS7.9AI score0.01207EPSS
Exploits0References5
BDU FSTEC
BDU FSTEC
added 2022/03/18 12:0 a.m.2 views

The vulnerability of the Windows Common Log File System Driver in the Microsoft Windows operating system allows a hacker to gain increased privileges.

The vulnerability of the Windows Common Log File System Driver in the Microsoft Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

7.8CVSS7.2AI score0.00967EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2022/03/18 12:0 a.m.4 views

The vulnerability of the Windows Common Log File System Driver in the Microsoft Windows operating system allows a hacker to gain increased privileges.

The vulnerability of the Windows Common Log File System Driver in the Microsoft Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

7.8CVSS7.2AI score0.00832EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2022/03/16 12:0 a.m.4 views

The vulnerability of the Windows Common Log File System Driver in the Windows operating system allows a hacker to gain increased privileges.

The vulnerability of the Windows Common Log File System Driver in the operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

7.8CVSS7.4AI score0.03072EPSS
Exploits1References4
AlmaLinux
AlmaLinux
added 2022/03/15 9:10 a.m.18 views

plymouth bug fix and enhancement update

The plymouth packages provide a graphical boot animation in place of the text messages that are normally displayed. Text messages are instead redirected to a log file for viewing after boot. Bug Fixes and Enhancements: LUKS passphrase prompt not being presented on boot BZ2057275...

1.5AI score
Exploits0
OSV
OSV
added 2022/03/10 5:41 p.m.3 views

CVE-2021-20269

A flaw was found in the permissions of a log file created by kexec-tools. This flaw allows a local unprivileged user to read this file and leak kernel internal information from a previous panic. The highest threat from this vulnerability is to confidentiality. This flaw affects kexec-tools shippe...

5.5CVSS6.1AI score0.00242EPSS
Exploits0References1
NVD
NVD
added 2022/03/10 5:41 p.m.15 views

CVE-2021-20269

A flaw was found in the permissions of a log file created by kexec-tools. This flaw allows a local unprivileged user to read this file and leak kernel internal information from a previous panic. The highest threat from this vulnerability is to confidentiality. This flaw affects kexec-tools shippe...

5.5CVSS0.00242EPSS
Exploits0References1
Prion
Prion
added 2022/03/10 5:41 p.m.19 views

Design/Logic Flaw

A flaw was found in the permissions of a log file created by kexec-tools. This flaw allows a local unprivileged user to read this file and leak kernel internal information from a previous panic. The highest threat from this vulnerability is to confidentiality. This flaw affects kexec-tools shippe...

2.1CVSS5AI score0.00242EPSS
Exploits0References1Affected Software1
UbuntuCve
UbuntuCve
added 2022/03/10 5:41 p.m.71 views

CVE-2021-20269

A flaw was found in the permissions of a log file created by kexec-tools. This flaw allows a local unprivileged user to read this file and leak kernel internal information from a previous panic. The highest threat from this vulnerability is to confidentiality. This flaw affects kexec-tools shippe...

5.5CVSS6.1AI score0.00242EPSS
Exploits0References2
Rows per page
Query Builder