CVE-2021-40007

There is an information leak vulnerability in eCNS280TD V100R005C10SPC650. The vulnerability is caused by improper log output management. An attacker with the ability to access the log file of device may lead to information disclosure...

Information disclosure

There is an information leak vulnerability in eCNS280TD V100R005C10SPC650. The vulnerability is caused by improper log output management. An attacker with the ability to access the log file of device may lead to information disclosure...

CVE-2021-40007

CVE-2021-40007 affects Huawei eCNS280_TD in V100R005C10SPC650. The root cause is improper log output management, enabling information disclosure if an attacker can access device log files. Public sources in connected documents corroborate an information‑leak vulnerability with log‑file access as ...

CVE-2021-40007

There is an information leak vulnerability in eCNS280TD V100R005C10SPC650. The vulnerability is caused by improper log output management. An attacker with the ability to access the log file of device may lead to information disclosure...

Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

CVE-2021-44228 checker This is the repository for checking fo...

Huawei eCNS280_TD 信息泄露漏洞

Huawei eCNS280TD is a core network device of the wireless broadband trunking system of Huawei China. Huawei eCNS280TD is vulnerable to an information disclosure vulnerability caused by improper management of log output. An attacker with access to the device log files could exploit the vulnerabili...

PYSEC-2021-435

Improper output neutralization for Logs. A specific Apache Superset HTTP endpoint allowed for an authenticated user to forge log entries or inject malicious content into logs...

NetApp Cloud Manager 信息泄露漏洞

Netapp NetApp Cloud Manager is an application from Netapp, Inc. It provides centralized orchestration of hybrid cloud storage and data management services. A security vulnerability exists in NetApp Cloud Manager versions prior to 3.9.9 that originates from abnormal log file output from a networke...

MV IDCE application 日志信息泄露漏洞

The MV IDCE application is a software application. A log information disclosure vulnerability exists in the MV IDCE application. The vulnerability arises from the abnormal output of log files from a networked system or product...

Elasticsearch Log Information Disclosure Vulnerability

Elasticsearch is a set of Dutch Elasticsearch company built on Lucene open source distributed RESTful search engine . The product is mainly used in cloud computing , and supports data indexing via HTTP using JSON. A log information disclosure vulnerability exists in Elasticsearch that originates...

Teradici PCoIP Agents Log Information Disclosure Vulnerability

A log information disclosure vulnerability exists in Teradici PCoIP Agents that originates from the abnormal output of log files from a networked system or product...

Elasticsearch 日志信息泄露漏洞

Elasticsearch is a set of Dutch Elasticsearch company built on Lucene open source distributed RESTful search engine . The product is mainly used in cloud computing , and supports data indexing via HTTP using JSON. A log information disclosure vulnerability exists in Elasticsearch that originates...

SUSE-SU-2020:3473-1 Security update for ceph

This update for ceph fixes the following issues: - CVE-2020-25660: Bring back CEPHXV2 authorizer challenges bsc1177843. - Added --container-init feature bsc1177319, bsc1163764 - Made journald as the logdriver again bsc1177933 - Fixes a condition check for copytree, copyfiles, and movefiles in...

HUAWEI Taurus-AN00B Information Disclosure Vulnerability

Huawei Mate 305G Taurus-AN00B is the official firmware for Huawei Mate 305G. A security vulnerability exists in HUAWEI Taurus-AN00B. The vulnerability stems from the device's failure to adequately examine the contents of the log output in a particular scenario, which allows an attacker to obtain...

Default configuration

In Apache NiFi 1.10.0 to 1.11.4, the NiFi stateless execution engine produced log output which included sensitive property values. When a flow was triggered, the flow definition configuration JSON was printed, potentially containing sensitive values in plaintext...

CVE-2020-9486

In Apache NiFi 1.10.0 to 1.11.4, the NiFi stateless execution engine produced log output which included sensitive property values. When a flow was triggered, the flow definition configuration JSON was printed, potentially containing sensitive values in plaintext...

CVE-2020-9486

CVE-2020-9486 affects Apache NiFi 1.10.0–1.11.4, where the stateless execution engine logs a flow definition configuration JSON during trigger, potentially revealing sensitive property values in plaintext. The vulnerability, described as information disclosure, is evidenced by multiple sources (N...

ezEmu - Simple Execution Of Commands For Defensive Tuning/Research

ezEmu enables users to test adversary behaviors via various execution techniques. Sort of like an "offensive framework for blue teamers ", ezEmu does not have any networking/C2 capabilities and rather focuses on creating local test telemetry. Windows See /Linux for ELF ezEmu is compiled as...

PT-2020-6577

Name of the Vulnerable Software and Affected Versions Ansible Engine affected versions not specified Description A flaw was found in the Ansible Engine when using module args. Tasks executed with check mode --check-mode do not properly neutralize sensitive data exposed in the event data. This fla...

[SECURITY] Fedora 32 Update: log4net-2.0.8-10.fc32

log4net is a tool to help the programmer output log statements to a variety of output targets. log4net is a port of the excellent log4j framework to the .NET runtime...