CVE-2022-29806: Improper Limitation of a Pathname to a Restricted Directory

ZoneMinder before 1.36.13 allows remote code execution via an invalid language. Ability to create a debug log file at an arbitrary pathname contributes to exploitability...

CVE-2021-38939

IBM QRadar SIEM 7.3, 7.4, and 7.5 stores potentially sensitive information in log files that could be read by an user with access to creating domains. IBM X-Force ID: 211037...

IBM QRadar SIEM log information leakage vulnerability

IBM QRadar SIEM is an IBM USA solution that utilizes security intelligence to protect assets and information from advanced threats. The solution provides oversight of the entire scope of the IT architecture, generates detailed reports on data access and user activity, and more. An information...

CVE-2022-24875: Insertion of Sensitive Information into Log File

The CVEProject/cve-services is an open source project used to operate the CVE services api. In versions up to and including 1.1.1 the org.conroller.js code would erroneously log user secrets. This has been resolved in commit 46d98f2b and should be available in subsequent versions of the software...

WordPress plugin Easy Digital Downloads has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin. WordPress Easy Digital Downloads plugin is vulnerable to a cross-site scripting vulnerability that stems from...

Insertion of Sensitive Information into Log File

Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File due to a lack of sanitization of exception messages. Remediation Upgrade Microsoft.Rest.ClientRuntime to version 2.3.24 or higher. References - Microsoft Security Advisory - Update Guide ...

CVE-2022-24521

Windows Common Log File System Driver Elevation of Privilege Vulnerability...

CVE-2022-24481

Windows Common Log File System Driver Elevation of Privilege Vulnerability...

CVE-2022-24481

Windows Common Log File System Driver Elevation of Privilege Vulnerability...

Privilege escalation

Windows Common Log File System Driver Elevation of Privilege Vulnerability...

CVE-2022-24521

CVE-2022-24521 is a Windows Windows Common Log File System Driver Privilege Escalation vulnerability. The CVE entry reports an elevation-of-privilege flaw in the CLFS driver; CVSS scores shown include a 2.0/2.0 base (MEDIUM) on NVD and a 3.1-based HIGH score from Microsoft, both indicating local ...

CVE-2022-24521 Windows Common Log File System Driver Elevation of Privilege Vulnerability

...

CVE-2022-24521 Windows Common Log File System Driver Elevation of Privilege Vulnerability

...

CVE-2022-24481 Windows Common Log File System Driver Elevation of Privilege Vulnerability

...

CVE-2022-24481

CVE-2022-24481 is a Windows Common Log File System Driver elevation-of-privilege vulnerability. The connected exploit reports describe a memory/counterpart corruption involving CLFS_CONTAINER_CONTEXT.pContainer that can be triggered from CClfsContainer::Close by modifying CLFS_BASE_RECORD_HEADER....

CVE-2022-24481 Windows Common Log File System Driver Elevation of Privilege Vulnerability

...

CVE-2022-24481: Undefined Security Weakness

Windows Common Log File System Driver Elevation of Privilege Vulnerability...

CVE-2022-24521: Out-of-bounds Write

Windows Common Log File System Driver Elevation of Privilege Vulnerability...

CVE-2022-24521

Windows Common Log File System Driver Elevation of Privilege Vulnerability Recent assessments: cbeek-r7 at March 21, 2025 12:29pm UTC reported: RansomHub affiliate observed in abusing this vulnerability including 3 files that were weaponizing this vulnerability:...

Common Log File System Driver Privilege Escalation

The vulnerability of the Common Log File System Driver in the Windows operating system is related to privilege management errors. Exploiting this vulnerability can allow an attacker to increase their privileges...