3127 matches found
CVE-2024-31245
Insertion of Sensitive Information into Log File vulnerability in ConvertKit.This issue affects ConvertKit: from n/a through 2.4.5...
PT-2024-23889 · Unknown · Fg Drupal To Wordpress
Name of the Vulnerable Software and Affected Versions: FG Drupal to WordPress versions 3.70.3 and earlier Description: The issue is related to the insertion of sensitive information into log files. This could potentially expose sensitive data. Recommendations: For FG Drupal to WordPress versions...
PT-2024-23902 · Searchiq · Searchiq
Name of the Vulnerable Software and Affected Versions: SearchIQ versions through 4.5 Description: The issue is related to the insertion of sensitive information into log files. This could potentially expose sensitive data. Recommendations: For versions through 4.5, update to a version that contai...
WordPress SearchIQ plugin <= 4.5 - Sensitive Data Exposure via Log File vulnerability
Sensitive Data Exposure via Log File vulnerability discovered by Joshua Chan Patchstack Alliance in WordPress Plugin SearchIQ versions = 4.5...
WordPress FG Drupal to WordPress plugin <= 3.70.3 - Sensitive Data Exposure via Log File vulnerability
Sensitive Data Exposure via Log File vulnerability discovered by Yudistira Arya Patchstack Alliance in WordPress Plugin FG Drupal to WordPress versions = 3.70.3...
PT-2024-23891
Name of the Vulnerable Software and Affected Versions WPKube Subscribe To Comments Reloaded versions from n/a through 220725 Description The issue is related to the insertion of sensitive information into log files. This can potentially expose sensitive data. Recommendations For versions from n/a...
PT-2024-23887
Name of the Vulnerable Software and Affected Versions ConvertKit versions through 2.4.5 Description The issue is related to the insertion of sensitive information into log files. Recommendations For versions through 2.4.5, update to a version that contains a fix for this issue. At the moment, the...
FG PrestaShop to WooCommerce < 4.47.0 - Unauthenticated Sensitive Information Disclosure
Description The FG PrestaShop to WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.45.1. This makes it possible for unauthenticated attackers to view data in log files...
CVE-2024-25030
IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 11.1 stores potentially sensitive information in log files that could be read by a local user. IBM X-Force ID: 281677...
CVE-2024-25030
IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 11.1 stores potentially sensitive information in log files that could be read by a local user. IBM X-Force ID: 281677...
CVE-2024-25030
IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 11.1 stores potentially sensitive information in log files that could be read by a local user. IBM X-Force ID: 281677...
IBM Db2 日志信息泄露漏洞
IBM Db2 is a relational database management system from International Business Machines IBM. The system's execution environments are mainly UNIX, Linux, IBMi, z/OS, and Windows server versions. IBM DB2 suffers from a log information disclosure vulnerability that originates from log files that may...
CVE-2024-3165
System-Maintenance- Log Files in dotCMS dashboard is providing the username/password for database connections in the log output. Nevertheless, this is a moderate issue as it requires a backend admin as well as that dbs are locked down by environment. OWASP Top 10 - A05 Insecure Design OWASP Top...
CVE-2024-3165
CVE-2024-3165 affects dotCMS where the System->Maintenance-> Log Files output reveals database credentials (username/password) in logs. This is described as a moderate issue requiring backend admin access and environment-led DB lockdown. Connected documents confirm the vulnerability stems f...
CVE-2024-3165 Database Credential Exposure in the Logs
System-Maintenance- Log Files in dotCMS dashboard is providing the username/password for database connections in the log output. Nevertheless, this is a moderate issue as it requires a backend admin as well as that dbs are locked down by environment. OWASP Top 10 - A05 Insecure Design OWASP Top...
Dell PowerScale OneFS Log Message Disclosure Vulnerability (CNVD-2024-16190)
Dell PowerScale OneFS is an operating system from Dell USA. PowerScale OneFS operating system that provides horizontal scaling of NAS. Dell PowerScale OneFS suffers from a log information disclosure vulnerability that originates from the presence of sensitive information in log files, which can b...
dotCMS 安全漏洞
DotCMS is an open source content management system written in Java by DotCMS, Inc. for managing content and content-driven sites and applications. A security vulnerability exists in dotCMS that stems from the fact that any user with portlet privileges can access the Tools and Log Files tabs under...
PT-2024-24175 · Dotcms · Dotcms
Name of the Vulnerable Software and Affected Versions: dotCMS affected versions not specified Description: The issue is related to the System-Maintenance- Log Files in the dotCMS dashboard, which is providing the username/password for database connections in the log output. This is considered a...
DotCMS 安全漏洞
DotCMS is an open source content management system written in Java by DotCMS, Inc. for managing content and content-driven sites and applications. A security vulnerability exists in DotCMS that originates in the log files that provide usernames and passwords for database connections...
PT-2024-23451 · Unknown · Paid Memberships Pro – Mailchimp Add On
Name of the Vulnerable Software and Affected Versions: Paid Memberships Pro – Mailchimp Add On versions through 2.3.4 Description: The issue is related to the insertion of sensitive information into log files. This could potentially expose sensitive data. Recommendations: For versions through...