Lucene search
+L

3775 matches found

UbuntuCve
UbuntuCve
•added 2026/10/13 2:16 a.m.•6 views

CVE-2026-101168

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.0 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with access to GitLab Pages log data to obtain access tokens and other secrets, due to...

6.2CVSS5.7AI score0.00157EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2026/10/13 1:05 a.m.•12 views

CVE-2026-101168 Insertion of Sensitive Information into Log File in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.0 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with access to GitLab Pages log data to obtain access tokens and other secrets, due to...

6.2CVSS5.7AI score
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/10/13 1:05 a.m.•13 views

CVE-2026-101168 Insertion of Sensitive Information into Log File in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.0 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with access to GitLab Pages log data to obtain access tokens and other secrets, due to...

6.2CVSS5.7AI score0.00157EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/10/13 1:05 a.m.•42 views

CVE-2026-101168 Insertion of Sensitive Information into Log File in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.0 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with access to GitLab Pages log data to obtain access tokens and other secrets, due to...

6.2CVSS0.00157EPSS
SaveExploits0References2
CVE
CVE
•added 2026/10/13 1:05 a.m.•34 views

CVE-2026-101168

GitLab CE/EE versions 12.0 before 19.2.8 , 19.3 before 19.3.5 , and 19.4 before 19.4.2 are affected by a Sensitive Information Exposure vulnerability. Under certain conditions, an authenticated user with access to GitLab Pages log data could obtain access tokens and other secrets. This is caused ...

6.2CVSS5.7AI score0.00157EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•12 views

PT-2026-111159

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 12.0 through 19.2.7 GitLab CE/EE versions 19.3 through 19.3.4 GitLab CE/EE versions 19.4 through 19.4.1 Description An issue exists where sensitive request data is inserted into log files and error tracking events. This...

6.2CVSS5.9AI score0.00157EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•8 views

CVE-2026-101168: Insertion of Sensitive Information into Log File

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.0 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with access to GitLab Pages log data to obtain access tokens and other secrets, due to...

6.2CVSS5.7AI score0.00157EPSS
SaveExploits0References3
NVD
NVD
•added 2026/10/12 5:17 p.m.•22 views

CVE-2026-85971

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 assign overly permissive operating-system permissions to certain log files, which could allow a local user to read or alter log data. The corrected default permissions apply to newly created and rotated logs;...

7.1CVSS0.00103EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/12 4:40 p.m.•14 views

EUVD-2026-97566

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 assign overly permissive operating-system permissions to certain log files, which could allow a local user to read or alter log data. The corrected default permissions apply to newly created and rotated logs;...

7.1CVSS5.8AI score0.00103EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/12 4:40 p.m.•40 views

CVE-2026-85971 Incorrect log file permissions in Progress MarkLogic Server

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 assign overly permissive operating-system permissions to certain log files, which could allow a local user to read or alter log data. The corrected default permissions apply to newly created and rotated logs;...

7.1CVSS0.00103EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/12 4:40 p.m.•21 views

CVE-2026-85971

Progress MarkLogic Server versions 12.x before 12.1.0 and 11.x before 11.3.7 are affected by a vulnerability where certain log files are assigned overly permissive operating-system permissions . This configuration flaw could allow a local user to read or alter log data, potentially impacting conf...

7.1CVSS5.8AI score0.00103EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/12 12:00 a.m.•10 views

CVE-2026-85971: Incorrect Permission Assignment for Critical Resource

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 assign overly permissive operating-system permissions to certain log files, which could allow a local user to read or alter log data. The corrected default permissions apply to newly created and rotated logs;...

7.1CVSS5.8AI score0.00103EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/12 12:00 a.m.•12 views

PT-2026-110808

🚨 CVE-2026-85971 Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 assign overly permissive operating-system permissions to certain log files, which could allow a local user to read or alter log data. The corrected default permissions apply to newly created and...

7.1CVSS5.8AI score0.00103EPSS
SaveExploits0References3
osv_cleanstart
osv_cleanstart
•added 2026/10/10 12:47 a.m.•14 views

CLEANSTART-2026-BX63294 Insertion of sensitive information into log files in the Snowflake Python, Go, JDBC, Node

Security vulnerability affects the n8n package. Insertion of sensitive information into log files in the Snowflake Python, Go, JDBC, Node...

6.5CVSS5.9AI score0.00089EPSS
SaveExploits0References3
NVD
NVD
•added 2026/10/08 6:16 a.m.•12 views

CVE-2026-5047

A vulnerability in Brocade SANnav before 2.4.0b and 3.0.0 prints encoded passwords and authentication tokens in log files. The vulnerability could allow an authenticated attacker with access to the log file including the SANnav supportsave to access the passwords...

8.2CVSS0.00196EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/08 5:18 a.m.•55 views

CVE-2026-5047

A vulnerability in Brocade SANnav before 2.4.0b and 3.0.0 prints encoded passwords and authentication tokens in log files. The vulnerability could allow an authenticated attacker with access to the log file including the SANnav supportsave to access the passwords...

8.2CVSS0.00196EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/08 5:18 a.m.•19 views

EUVD-2026-94756

A vulnerability in Brocade SANnav before 2.4.0b and 3.0.0 prints encoded passwords and authentication tokens in log files. The vulnerability could allow an authenticated attacker with access to the log file including the SANnav supportsave to access the passwords...

8.2CVSS5.9AI score0.00196EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/08 5:18 a.m.•54 views

CVE-2026-5047

Brocade SANnav (HPE B-Series SANnav Management Portal) is vulnerable to CWE-922: Insecure Storage of Sensitive Information in versions prior to 2.4.0b and 3.0.0 . The application incorrectly prints base64 encoded passwords and authentication tokens into log files, including the SANnav supportsave...

8.2CVSS5.9AI score0.00196EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/08 12:00 a.m.•11 views

CVE-2026-5047: Insecure Storage of Sensitive Information

A vulnerability in Brocade SANnav before 2.4.0b and 3.0.0 prints encoded passwords and authentication tokens in log files. The vulnerability could allow an authenticated attacker with access to the log file including the SANnav supportsave to access the passwords...

8.2CVSS5.9AI score0.00196EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/08 12:00 a.m.•13 views

PT-2026-107824

A vulnerability in Brocade SANnav before 2.4.0b and 3.0.0 prints encoded passwords and authentication tokens in log files. The vulnerability could allow an authenticated attacker with access to the log file including the SANnav supportsave to access the passwords...

8.2CVSS5.9AI score0.00196EPSS
SaveExploits0References2
Rows per page
Query Builder