Lucene search
+L

5960 matches found

CNNVD
CNNVD
•added 2022/02/08 12:00 a.m.•25 views

Microsoft Windows Common Log File System Driver permission and access control vulnerabilities

The Microsoft Windows Common Log File System Driver is Microsoft's Common Log File System CLFS API that provides a high-performance, general-purpose log file subsystem that can be used by specialized client applications and shared by multiple clients to optimize logging and access. access. A...

7.8CVSS7.4AI score0.04327EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2022/02/08 12:00 a.m.•22 views

Microsoft Windows Common Log File System Driver permission and access control vulnerabilities

The Microsoft Windows Common Log File System Driver is Microsoft's Common Log File System CLFS API that provides a high-performance, general-purpose log file subsystem that can be used by specialized client applications and shared by multiple clients to optimize logging and access. access. A...

7.8CVSS7.6AI score0.00571EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2022/02/08 12:00 a.m.•14 views

PT-2022-1674 · Microsoft · Windows Common Log File System Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Common Log File System Driver affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in the Windows Common Log File System Driver, which can be exploited due to errors in security...

7.8CVSS7.4AI score0.04327EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2022/02/08 12:00 a.m.•7 views

PT-2022-1702 · Microsoft · Windows Common Log File System Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Common Log File System Driver affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in the Windows Common Log File System Driver, which is associated with inadequate access contro...

7.8CVSS7.8AI score0.00571EPSS
SaveExploits0References8
Kaspersky
Kaspersky
•added 2022/02/08 12:00 a.m.•278 views

KLA12457 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information, execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in...

9.3CVSS8.1AI score0.53781EPSS
SaveExploits5References49
Kaspersky
Kaspersky
•added 2022/02/08 12:00 a.m.•157 views

KLA12458 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information, cause denial of service. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability ...

7.8CVSS7AI score0.43618EPSS
SaveExploits4References28
CNNVD
CNNVD
•added 2022/02/08 12:00 a.m.•28 views

Microsoft Windows Common Log File System Driver resource management error vulnerability

The Microsoft Windows Common Log File System Driver is Microsoft's Common Log File System CLFS API that provides a high-performance, general-purpose log file subsystem that can be used by specialized client applications and shared by multiple clients to optimize logging and access. access. A...

5.5CVSS6.3AI score0.00891EPSS
SaveExploits0References6
attackerkb
attackerkb
•added 2022/01/25 9:15 a.m.•14 views

CVE-2022-0338

Insertion of Sensitive Information into Log File in Conda loguru prior to 0.5.3...

4.3CVSS5.4AI score0.00758EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
•added 2022/01/25 9:15 a.m.•29 views

CVE-2022-0338

Insertion of Sensitive Information into Log File in Conda loguru prior to 0.5.3...

4.3CVSS5.8AI score0.00758EPSS
SaveExploits1References2
Prion
Prion
•added 2022/01/25 9:15 a.m.•27 views

Information disclosure

Insertion of Sensitive Information into Log File in Conda loguru prior to 0.5.3...

4CVSS4.5AI score0.00758EPSS
SaveExploits1References2Affected Software1
Debian CVE
Debian CVE
•added 2022/01/25 9:00 a.m.•80 views

CVE-2022-0338

Insertion of Sensitive Information into Log File in Conda loguru prior to 0.5.3...

4.3CVSS4.5AI score0.00758EPSS
SaveExploits1
Mend
Mend
•added 2022/01/25 9:00 a.m.•10 views

CVE-2022-0338

Insertion of Sensitive Information into Log File in Conda loguru prior to 0.5.3...

5.3CVSS0.00758EPSS
SaveExploits1References6
osv_cve
osv_cve
•added 2022/01/25 9:00 a.m.•37 views

CVE-2022-0338 Insertion of Sensitive Information into Log File in delgan/loguru

Insertion of Sensitive Information into Log File in Conda loguru prior to 0.5.3...

4.3CVSS4.8AI score0.00758EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2022/01/25 9:00 a.m.•57 views

CVE-2022-0338 Insertion of Sensitive Information into Log File in delgan/loguru

Insertion of Sensitive Information into Log File in Conda loguru prior to 0.5.3...

4.3CVSS4.8AI score0.00758EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/25 12:00 a.m.•9 views

CVE-2021-36289: Insertion of Sensitive Information into Log File

Dell VNX2 OE for File versions 8.1.21.266 and earlier, contain a sensitive information disclosure vulnerability. A local malicious user may exploit this vulnerability to read sensitive information and use it...

7.8CVSS5.7AI score0.00242EPSS
SaveExploits0References3
osv_azl
osv_azl
•added 2022/01/19 11:15 p.m.•21 views

AZL-45261 CVE-2022-21704 affecting package js-jquery 3.5.0-4

log4js-node is a port of log4js to node.js. In affected versions default file permissions for log files created by the file, fileSync and dateFile appenders are world-readable in unix. This could cause problems if log files contain sensitive information. This would affect any users that have not...

5.5CVSS6.2AI score0.00297EPSS
SaveExploits0References1
NVD
NVD
•added 2022/01/17 9:15 p.m.•34 views

CVE-2022-22703

In Stormshield SSO Agent 2.x before 2.1.1 and 3.x before 3.0.2, the cleartext user password and PSK are contained in the log file of the .exe installer...

5.5CVSS0.00236EPSS
SaveExploits0References1
CVE
CVE
•added 2022/01/17 8:04 p.m.•119 views

CVE-2022-22703

Stormshield SSO Agent 2.x (before 2.1.1) and 3.x (before 3.0.2) expose cleartext credentials because their installer .exe log files contain the user password and PSK. Root cause: sensitive data is written to log files during installation; impact is exposure of credentials via local logs. The prov...

5.5CVSS5.6AI score0.00236EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2022/01/14 5:15 p.m.•28 views

Code injection

IBM Sterling Gentran:Server for Microsoft Windows 5.3 stores potentially sensitive information in log files that could be read by a local user. IBM X-Force ID: 213962...

2.1CVSS4.9AI score0.00252EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2022/01/14 5:10 p.m.•67 views

CVE-2021-39032

CVE-2021-39032 affects IBM Sterling Gentran:Server for Windows. The IBM security bulletin and NVD entry state that 5.3.1 stores potentially sensitive information in log files that could be read by a local user, with an attack vector local and impact on confidentiality (high). Affected version: IB...

5.5CVSS5AI score0.00252EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder