Code injection

An issue was discovered on TerraMaster FS-210 4.0.19 devices. An unauthenticated attacker can download log files via the include/makecvs.php?Event= substring...

CVE-2019-18385

An issue was discovered on TerraMaster FS-210 4.0.19 devices. An unauthenticated attacker can download log files via the include/makecvs.php?Event= substring...

CVE-2019-18385

The CVE relates to TerraMaster FS-210 devices running 4.0.19 where an unauthenticated attacker can download log files through the include/makecvs.php?Event= substring. This is an information-disclosure vulnerability affecting the NAS’s web-accessible log files; the root cause is an insecure endpo...

CVE-2019-17512

There are some web interfaces without authentication requirements on D-Link DIR-412 A1-1.14WW routers. An attacker can clear the router's log file via act=clear&logtype=sysact to logclear.php, which could be used to erase attack traces...

IBM FileNet Content Manager and IBM Case Foundation Information Disclosure Vulnerability

IBM FileNet Content Manager and IBM Case Foundation are both products of IBM Corporation in the U.S. IBM FileNet Content Manager is a content management solution for the FileNet P8 platform. The solution combines document management with ready-to-use workflow tools to manage images, video, Web...

D-Link DIR-412 Authorization Issues Vulnerability

The D-Link DIR-412 is a wireless router from AUO D-Link of Taiwan, China. An authorization issue vulnerability exists in the D-Link DIR-412 A1-1.14WW version, which stems from a failure to ask for authentication on some web pages, and can be exploited by an attacker to gain access to the router's...

undertow: leak credentials to log files UndertowLogger.REQUEST_LOGGER.undertowRequestFailed

A vulnerability was found in Undertow web server before 2.0.21. An information exposure of plain text credentials through log files because Connectors.executeRootHandler:402 logs the HttpServerExchange object at ERROR level using UndertowLogger.REQUESTLOGGER.undertowRequestFailedt, exchange...

undertow: DEBUG log for io.undertow.request.security if enabled leaks credentials to log files

A flaw was found in the Undertow DEBUG log for io.undertow.request.security. If enabled, an attacker could abuse this flaw to obtain the user’s credentials from the log files...

Moxa EDR-810 Information Disclosure Vulnerability (CNVD-2019-43364)

The Moxa EDR-810 is a highly integrated industrial multi-port security router with firewall/NAT/VPN and managed Layer 2 switch functionality. An information disclosure vulnerability exists in the Moxa EDR-810 version 5.1 and earlier. An attacker could exploit this vulnerability to retrieve certai...

CVE-2019-3888

A vulnerability was found in Undertow web server before 2.0.21. An information exposure of plain text credentials through log files because Connectors.executeRootHandler:402 logs the HttpServerExchange object at ERROR level using UndertowLogger.REQUESTLOGGER.undertowRequestFailedt, exchange...

CVE-2019-10963

Moxa EDR 810, all versions 5.1 and prior, allows an unauthenticated attacker to be able to retrieve some log files from the device, which may allow sensitive information disclosure. Log files must have previously been exported by a legitimate user...

Information disclosure

Moxa EDR 810, all versions 5.1 and prior, allows an unauthenticated attacker to be able to retrieve some log files from the device, which may allow sensitive information disclosure. Log files must have previously been exported by a legitimate user...

CVE-2019-10963

Moxa EDR 810, all versions 5.1 and prior, allows an unauthenticated attacker to be able to retrieve some log files from the device, which may allow sensitive information disclosure. Log files must have previously been exported by a legitimate user...

bind: Limiting simultaneous TCP clients is ineffective

A flaw was found in the way bind implemented tunable which limited simultaneous TCP client connections. A remote attacker could use this flaw to exhaust the pool of file descriptors available to named, potentially affecting network connections and the management of files such as log files or zone...

PT-2019-5269

Name of the Vulnerable Software and Affected Versions Ansible versions up to 2.8.5 Ansible versions up to 2.7.13 Ansible versions up to 2.6.19 Ansible versions up to 3.5 Description The issue is related to the disclosure of information through log files in Ansible. Exploitation of this issue may...

Information Disclosure

ibmdb is vulnerable to information disclosure. The application prints the plaintext database credentials into log files while in debug mode. A local attacker will be able to access the log files and retrieve the credentials and gain access to the database...

CVE-2019-10212

A flaw was found in, all under 2.0.20, in the Undertow DEBUG log for io.undertow.request.security. If enabled, an attacker could abuse this flaw to obtain the user's credentials from the log files...

CVE-2019-10212

A flaw was found in, all under 2.0.20, in the Undertow DEBUG log for io.undertow.request.security. If enabled, an attacker could abuse this flaw to obtain the user's credentials from the log files...

UBUNTU-CVE-2019-10212

A flaw was found in, all under 2.0.20, in the Undertow DEBUG log for io.undertow.request.security. If enabled, an attacker could abuse this flaw to obtain the user's credentials from the log files...

undertow: DEBUG log for io.undertow.request.security if enabled leaks credentials to log files

A flaw was found in the Undertow DEBUG log for io.undertow.request.security. If enabled, an attacker could abuse this flaw to obtain the user’s credentials from the log files...