Lucene search
K

4561 matches found

Tenable Nessus
Tenable Nessus
added 2021/04/15 12:0 a.m.28 views

Palo Alto Networks PAN-OS 8.1.x < 8.1.19 / 9.0.x < 9.0.12 / 9.1.x < 9.1.6 / 10.0.x < 10.0.1 Vulnerability

The version of Palo Alto Networks PAN-OS running on the remote host is 8.1.x prior to 8.1.19 or 9.0.x prior to 9.0.12 or 9.1.x prior to 9.1.6 or 10.0.x prior to 10.0.1. It is, therefore, affected by a vulnerability. - An information exposure through log file vulnerability exists in Palo Alto...

4.4CVSS5.2AI score0.00248EPSS
Exploits1References3
OSV
OSV
added 2021/04/14 8:4 p.m.31 views

GO-2021-0066 Sensitive information leak via log file in k8s.io/kubernetes

Attempting to read a malformed .dockercfg may cause secrets to be inappropriately logged...

5.5CVSS5.4AI score0.00457EPSS
Exploits0References3
NVD
NVD
added 2021/04/14 3:15 p.m.16 views

CVE-2021-30494

Multiple system services installed alongside the Razer Synapse 3 software suite perform privileged operations on entries within the Razer Chroma SDK subkey. These privileged operations consist of file name concatenation of a runtime log file that is used to store runtime log information. In other...

5.5CVSS0.00495EPSS
Exploits1References3
CNNVD
CNNVD
added 2021/04/14 12:0 a.m.4 views

Forescout CounterACT 安全漏洞

Forescout CounterACT is a software application from Forescout USA. Network Access Control Software A security vulnerability exists in Forescout CounterACT versions prior to 8.1.4, which can be exploited by an attacker to point a log file to a privileged location, such as %WINDIR%System32...

7.8CVSS7.4AI score0.00405EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2021/04/14 12:0 a.m.3 views

PT-2021-18723 · Palo Alto Networks · Pan-Os

Name of the Vulnerable Software and Affected Versions: Palo Alto Networks PAN-OS affected versions not specified Description: An information exposure through log file vulnerability exists in the software where the connection details for a scheduled configuration export are logged in system logs...

2.3CVSS3.3AI score0.00253EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2021/04/14 12:0 a.m.58 views

Palo Alto Networks PAN-OS 8.1.x < 8.1.19 / 9.0.x < 9.0.13 / 9.1.x < 9.1.4 Vulnerability

The version of Palo Alto Networks PAN-OS running on the remote host is 8.1.x prior to 8.1.19 or 9.0.x prior to 9.0.13 or 9.1.x prior to 9.1.4. It is, therefore, affected by a vulnerability. - An information exposure through log file vulnerability exists in Palo Alto Networks PAN-OS software where...

2.3CVSS5AI score0.00253EPSS
Exploits0References3
OSV
OSV
added 2021/04/13 1:15 p.m.3 views

CVE-2021-28646

An insecure file permissions vulnerability in Trend Micro Apex One, Apex One as a Service and OfficeScan XG SP1 could allow a local attacker to take control of a specific log file on affected installations...

5.5CVSS6.1AI score0.00424EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2021/04/13 1:15 p.m.2 views

CVE-2021-28646

An insecure file permissions vulnerability in Trend Micro Apex One, Apex One as a Service and OfficeScan XG SP1 could allow a local attacker to take control of a specific log file on affected installations...

5.5CVSS5.5AI score0.00424EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2021/04/13 12:0 a.m.14 views

Magento Log File Detected

Magento log files have been detected on the target web application. These files may contain sensitive information about application and server configuration, logins and passwords or confidential customer's data. No source data...

7.1AI score
Exploits0References1
NVD
NVD
added 2021/04/12 3:15 p.m.11 views

CVE-2021-24024

A clear text storage of sensitive information into log file vulnerability in FortiADCManager 5.3.0 and below, 5.2.1 and below and FortiADC 5.3.7 and below may allow a remote authenticated attacker to read other local users' password in log files...

6.5CVSS0.00909EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2021/04/12 2:12 p.m.12 views

CVE-2021-24024

A clear text storage of sensitive information into log file vulnerability in FortiADCManager 5.3.0 and below, 5.2.1 and below and FortiADC 5.3.7 and below may allow a remote authenticated attacker to read other local users' password in log files...

4.3CVSS6.2AI score0.00909EPSS
Exploits0References1
CVE
CVE
added 2021/04/12 2:12 p.m.55 views

CVE-2021-24024

This CVE (CVE-2021-24024) affects FortiADCManager &lt;= 5.3.0/5.2.1 and FortiADC

6.5CVSS6AI score0.00909EPSS
Exploits0References1Affected Software2
CNNVD
CNNVD
added 2021/04/07 12:0 a.m.4 views

Fortinet FortiADC 日志信息泄露漏洞

Fortinet FortiADC is an application delivery controller from Fortinet, Inc. A security vulnerability exists in FortiADCManager that originates from the insertion of a user's password into a log file in clear text. An attacker could exploit this vulnerability to obtain sensitive information...

6.5CVSS5.6AI score0.00909EPSS
Exploits0References3
CNNVD
CNNVD
added 2021/04/01 12:0 a.m.3 views

Trend Micro Apex One 安全漏洞

Trend Micro Apex One is a suite of endpoint security protection software from Trend Micro that provides automated threat detection and response capabilities. A security vulnerability exists in Trend Micro OfficeScan and an inseture file permission vulnerability in Trend Micro Apex One, Apex One a...

5.5CVSS5.8AI score0.00424EPSS
Exploits0References4
GithubExploit
GithubExploit
added 2021/03/27 7:14 a.m.49 views

Exploit for Insertion of Sensitive Information into Log File in Canonical Subiquity

CVE-2020-11932 Double-Free bug in WhatsApp exploit poc. N...

2.3CVSS4.5AI score0.00592EPSS
Exploits3
OSV
OSV
added 2021/03/26 7:15 p.m.3 views

CVE-2021-25369

An improper access control vulnerability in seclog file prior to SMR MAR-2021 Release 1 exposes sensitive kernel information to userspace...

5.5CVSS5.8AI score0.01121EPSS
Exploits0References3
NVD
NVD
added 2021/03/22 7:15 p.m.12 views

CVE-2021-22310

There is an information leakage vulnerability in some huawei products. Due to the properly storage of specific information in the log file, the attacker can obtain the information when a user logs in to the device. Successful exploit may cause an information leak. Affected product versions includ...

4.4CVSS0.00186EPSS
Exploits0References1
Prion
Prion
added 2021/03/22 7:15 p.m.20 views

Information disclosure

There is an information leakage vulnerability in some huawei products. Due to the properly storage of specific information in the log file, the attacker can obtain the information when a user logs in to the device. Successful exploit may cause an information leak. Affected product versions includ...

2.1CVSS4.5AI score0.00186EPSS
Exploits0References1Affected Software6
CVE
CVE
added 2021/03/22 6:38 p.m.68 views

CVE-2021-22310

CVE-2021-22310 describes an information-leakage vulnerability in multiple Huawei products caused by improper storage of sensitive data in log files. When a user logs in, an attacker may access logged information. Affected products and versions include Huawei NIP6300 (V500R001C00/C20/C30), NIP6600...

4.4CVSS4.5AI score0.00186EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2021/03/22 6:38 p.m.19 views

CVE-2021-22310

There is an information leakage vulnerability in some huawei products. Due to the properly storage of specific information in the log file, the attacker can obtain the information when a user logs in to the device. Successful exploit may cause an information leak. Affected product versions includ...

4.8AI score0.00186EPSS
Exploits0References1
Rows per page
Query Builder