CVE-2019-14885: Insertion of Sensitive Information into Log File

A flaw was found in the JBoss EAP Vault system in all versions before 7.2.6.GA. Confidential information of the system property's security attribute value is revealed in the JBoss EAP log file when executing a JBoss CLI 'reload' command. This flaw can lead to the exposure of confidential...

Windows Common Log File System Driver Disclosure

The vulnerability of the Windows Common Log File System CLFS driver in the Windows operating system is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially created application...

Microsoft Windows Common Log File System Driver Information Disclosure Vulnerability

The Microsoft Windows Common Log File System Driver is a general purpose log file system that can be accessed from kernel-mode or user-mode applications to build a high-performance transaction log. An information disclosure vulnerability exists in the Microsoft Windows Common Log File System CLFS...

Windows Common Log File System Driver Privilege Escalation

The vulnerability of the Windows Common Log File System CLFS driver exists due to errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain increased privileges...

SUSE-SU-2020:0115-1 Security update for shibboleth-sp

This update for shibboleth-sp fixes the following issues: Security issue fixed: - CVE-2019-19191: Fixed escalation to root by fixing ownership of log files bsc1157471...

CVE-2019-18244

In OSIsoft PI System multiple products and versions, a local attacker could view sensitive information in log files when service accounts are customized during installation or upgrade of PI Vision. The update fixes a previously reported issue...

Microsoft Windows CLFS Use-After-Free Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the CLFS.SYS drive...

CVE-2019-18244: Insertion of Sensitive Information into Log File

In OSIsoft PI System multiple products and versions, a local attacker could view sensitive information in log files when service accounts are customized during installation or upgrade of PI Vision. The update fixes a previously reported issue...

Microsoft Windows Multiple Vulnerabilities (KB4534297)

This host is missing a critical security update according to Microsoft KB4534297 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Multiple Vulnerabilities (KB4528760)

This host is missing a critical security update according to Microsoft KB4528760 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Multiple Vulnerabilities (KB4534273)

This host is missing a critical security update according to Microsoft KB4534273 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-0639

An information disclosure vulnerability exists in the Windows Common Log File System CLFS driver when it fails to properly handle objects in memory, aka 'Windows Common Log File System Driver Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0615...

CVE-2020-0615

An information disclosure vulnerability exists in the Windows Common Log File System CLFS driver when it fails to properly handle objects in memory, aka 'Windows Common Log File System Driver Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0639...

CVE-2020-0615

An information disclosure vulnerability exists in the Windows Common Log File System CLFS driver when it fails to properly handle objects in memory, aka 'Windows Common Log File System Driver Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0639...

Information disclosure

An information disclosure vulnerability exists in the Windows Common Log File System CLFS driver when it fails to properly handle objects in memory, aka 'Windows Common Log File System Driver Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0639...

Windows Common Log File System Driver Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the Windows Common Log File System CLFS driver improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run processes in an elevated context. To exploit the vulnerability, an attacker would first have...

PT-2020-1292

Name of the Vulnerable Software and Affected Versions Windows Common Log File System CLFS driver affected versions not specified Description The issue is related to an out-of-bounds read in the Windows Common Log File System CLFS driver, which fails to properly handle objects in memory. This can...

Microsoft Windows Common Log File System Driver Elevation of Privilege (CVE-2020-0634)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

PT-2020-1270

Name of the Vulnerable Software and Affected Versions Windows Common Log File System CLFS driver affected versions not specified Description The issue exists due to improper handling of objects in memory by the Windows Common Log File System CLFS driver, allowing an attacker to potentially elevat...

PT-2020-1314

Name of the Vulnerable Software and Affected Versions Windows Common Log File System CLFS driver affected versions not specified Description The issue is related to an information disclosure vulnerability in the Windows Common Log File System CLFS driver. This vulnerability occurs due to the...