CVE-2024-21668 Insertion of Sensitive Information into Log File in react-native-mmkv

react-native-mmkv is a library that allows easy use of MMKV inside React Native applications. Before version 2.11.0, the react-native-mmkv logged the optional encryption key for the MMKV database into the Android system log. The key can be obtained by anyone with access to the Android Debugging...

CVE-2024-20653

Microsoft Common Log File System Elevation of Privilege Vulnerability...

CVE-2024-20653

Microsoft Common Log File System Elevation of Privilege Vulnerability...

Privilege escalation

Microsoft Common Log File System Elevation of Privilege Vulnerability...

CVE-2024-20653 Microsoft Common Log File System Elevation of Privilege Vulnerability

...

CVE-2024-20653

Technical details about CVE-2024-20653 (affected product, specific component, root cause, impact, and remediation) are not publicly provided in the connected documents you supplied. Monitor for updates from official advisories to confirm affected software and fixes.

Microsoft Common Log File System Elevation of Privilege Vulnerability

...

Microsoft Windows Common Log File System Driver security vulnerabilities

The Microsoft Common Log File System is Microsoft's Common Log File System CLFS API provides a log file subsystem that can be used by dedicated client applications and shared by multiple clients to optimize log access. Microsoft Common Log File System elevation of privilege vulnerability. An...

PT-2024-1033 · Microsoft · Common Log File System +1

Name of the Vulnerable Software and Affected Versions: Microsoft Common Log File System affected versions not specified Description: The issue is related to insufficient access control in the Common Log File System CLFS of Windows operating systems. Exploitation of this issue may allow an attacke...

CVE-2024-20653: Out-of-bounds Read

Microsoft Common Log File System Elevation of Privilege Vulnerability...

GHSA-GHMW-RWH8-6QMR pyload Log Injection vulnerability

Summary A log injection vulnerability was identified in pyload. This vulnerability allows any unauthenticated actor to inject arbitrary messages into the logs gathered by pyload. Details pyload will generate a log entry when attempting to sign in with faulty credentials. This entry will be in the...

CVE-2023-51408: Insertion of Sensitive Information into Log File

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in StudioWombat WP Optin Wheel – Gamified Optin Email Marketing Tool for WordPress and WooCommerce.This issue affects WP Optin Wheel – Gamified Optin Email Marketing Tool for WordPress and WooCommerce: from n/a through 1.4.3...

CVE-2023-51490: Insertion of Sensitive Information into Log File

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in WPMU DEV Defender Security – Malware Scanner, Login Security & Firewall.This issue affects Defender Security – Malware Scanner, Login Security & Firewall: from n/a through 4.1.0...

CVE-2023-51508: Insertion of Sensitive Information into Log File

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Jordy Meow Database Cleaner: Clean, Optimize & Repair.This issue affects Database Cleaner: Clean, Optimize & Repair: from n/a through 0.9.8...

FastDup < 2.1.8 - Sensitive Information Exposure via Log File

Description The FastDup – Fastest WordPress Migration & Duplicator plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.1.7 via the plugin's log file. This makes it possible for unauthenticated attackers to extract sensitive data including...

Defender Security < 4.2.0 - Sensitive Information Exposure via Log File

Description The Defender Security – Malware Scanner, Login Security & Firewall plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.1.0 via the plugin's log file. This makes it possible for unauthenticated attackers to extract sensitive data...

Uncanny Automator < 5.1.0.3 - Sensitive Information Exposure via Log File

Description The Uncanny Automator – Automate everything with the 1 no-code automation and integration plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.1.0.2 via the plugin's log file. This makes it possible for unauthenticated...

CVE-2023-52146: Insertion of Sensitive Information into Log File

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Aaron J 404 Solution.This issue affects 404 Solution: from n/a through 2.33.0...

CVE-2023-52143: Insertion of Sensitive Information into Log File

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Naa986 WP Stripe Checkout.This issue affects WP Stripe Checkout: from n/a through 1.2.2.37...

PT-2024-1258 · Qualcomm +1 · Qualcomm Wi-Fi Son Ldb Service +1

Name of the Vulnerable Software and Affected Versions: Synology RT6600ax affected versions not specified Description: The issue exists due to insufficient input validation in the Qualcomm Wi-Fi SON LDB Service, which can lead to memory corruption while redirecting log files to any location with a...