IBM InfoSphere Information Server Information Disclosure Vulnerability (CNVD-2023-91227)

IBM InfoSphere Information Server is a set of data integration platforms from International Business Machines IBM. The platform can be used to integrate data information obtained from various sources. An information disclosure vulnerability exists in IBM InfoSphere Information Server version 11.7...

CVE-2022-43930

IBM Db2 for Linux, UNIX and Windows 10.5, 11.1, and 11.5 is vulnerable to an Information Disclosure as sensitive information may be included in a log file. IBM X-Force ID: 241677...

Information disclosure

IBM InfoSphere Information Server 11.7 could allow a local user to obtain sensitive information from a log files. IBM X-Force ID: 246463...

CVE-2023-24964 IBM InfoSphere Information Server information disclosure

IBM InfoSphere Information Server 11.7 could allow a local user to obtain sensitive information from a log files. IBM X-Force ID: 246463...

CVE-2023-24964 IBM InfoSphere Information Server information disclosure

IBM InfoSphere Information Server 11.7 could allow a local user to obtain sensitive information from a log files. IBM X-Force ID: 246463...

IBM InfoSphere Information Server 安全漏洞

IBM InfoSphere Information Server is a set of data integration platforms from International Business Machines IBM. The platform can be used to integrate data information obtained from various sources. An information disclosure vulnerability exists in IBM InfoSphere Information Server version 11.7...

The vulnerability of the log files of user operations in the Apex-VUZ automation system allows a perpetrator to gain access to authentication information.

The vulnerability of the logs of user operations in the Apex-VUZ automation system is related to the storage of passwords in an open format. Exploiting this vulnerability can allow a malicious actor to gain access to authentication information...

Citrix Workspace App for Windows Multiple Vulnerabilities (CTX477617)

The version of Citrix Workspace App installed on the remote host is prior to 1912 LTSR CU7 Hotfix 2, 2203 LTSR CU2 or 2212. It is therefore affected by multiple vulnerabilities as described in the CTX477617 advisory: - A local attacker can elevate privileges to those of an Administrator or SYSTEM...

CVE-2023-24484

A malicious user can cause log files to be written to a directory that they do not have permission to write to...

Directory traversal

A malicious user can cause log files to be written to a directory that they do not have permission to write to...

CVE-2023-24484 A malicious user can cause log files to be written to a directory that they do not have permission to write to.

A malicious user can cause log files to be written to a directory that they do not have permission to write to...

CVE-2023-24484 A malicious user can cause log files to be written to a directory that they do not have permission to write to.

A malicious user can cause log files to be written to a directory that they do not have permission to write to...

Citrix Workspace App 安全漏洞

Citrix Systems Citrix Workspace App formerly known as Receiver is an application used to provide secure access to applications, desktops, and data from Citrix Systems, USA. A security vulnerability exists in Citrix Workspace App that originates from a malicious user being able to write log files ...

CVE-2023-24484

CVE-2023-24484 concerns Citrix Workspace App for Windows. A local attacker can cause log files to be written to a directory they are not authorized to write to, under conditions where vulnerable software is installed or uninstalled by a SYSTEM/Administrator process. Affected versions include Citr...

IBM WebSphere Application Server 日志日志信息泄露漏洞

IBM WebSphere Application Server WAS is an application server product from International Business Machines IBM. The product is a platform for JavaEE and Web services applications and is the foundation of the IBM WebSphere software platform. A log information disclosure vulnerability exists in IBM...

SUSE CVE-2008-4951

dtc 0.29.6 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/awstats.log, b /tmp/spam.log., and c /tmp/spamerr.log temporary files, related to the 1 accesslog.php and 2 sa-wrapper scripts...

SUSE CVE-2013-1976

The 1 tomcat5, 2 tomcat6, and 3 tomcat7 init scripts, as used in the RPM distribution of Tomcat for JBoss Enterprise Web Server 1.0.2 and 2.0.0, and Red Hat Enterprise Linux 5 and 6, allow local users to change the ownership of arbitrary files via a symlink attack on a tomcat5-initd.log, b...

SUSE CVE-2015-5228

The service daemon in CRIU creates log and dump files insecurely, which allows local users to create arbitrary files and take ownership of existing files via unspecified vectors related to a directory path...

SUSE CVE-2016-9963

Exim before 4.87.1 might allow remote attackers to obtain the private DKIM signing key via vectors related to log files and bounce messages...

SUSE CVE-2018-10855

Ansible 2.5 prior to 2.5.5, and 2.4 prior to 2.4.5, do not honor the nolog task flag for failed tasks. When the nolog flag has been used to protect sensitive data passed to a task from being logged, and that task does not run successfully, Ansible will expose sensitive data in log files and on th...