Lucene search
+L

32730 matches found

Hewlett-Packard
Hewlett-Packard
•added 2025/12/15 12:00 a.m.•37 views

Poly Video - Sensitive Data Might Be Written to Log File

In limited scenarios, sensitive data might be written to the log file if an admin uses Microsoft Teams Admin Center TAC to make device configuration changes. The affected log file is visible only to users with admin credentials. This is limited to Microsoft TAC and does not affect configuration...

8.1CVSS5.8AI score0.004EPSS
SaveExploits0Affected Software10
VulnCheck KEV
VulnCheck KEV
•added 2025/12/15 12:00 a.m.•15 views

VulnCheck KEV: CVE-2025-13315

Twonky Server 8.5.2 on Linux and Windows is vulnerable to an access control flaw. An unauthenticated attacker can bypass web service API authentication controls to leak a log file and read the administrator's username and encrypted password...

9.8CVSS5.9AI score0.32527EPSS
SaveIn wildExploits5References16
GithubExploit
GithubExploit
•added 2025/12/14 9:01 p.m.•172 views

Exploit for CVE-2025-9074

CVE-2025-9074DAEMONKILLER The Ultimate DAEMONKILLER. C...

9.3CVSS8.3AI score0.0186EPSS
SaveExploits15
RedhatCVE
RedhatCVE
•added 2025/12/13 10:01 p.m.•17 views

CVE-2025-43517

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2. An app may be able to access protected user data...

3.3CVSS5.8AI score0.00179EPSS
SaveExploits0References1
Veracode
Veracode
•added 2025/12/13 7:33 a.m.•28 views

Information Exposure

ansible-collection-community-general is vulnerable to Information Exposure. The vulnerability is due to verbose debug output exposing sensitive credentials such as plaintext passwords, which allows an attacker with access to logs to retrieve these secrets and potentially compromise Keycloak...

5.5CVSS6AI score0.00186EPSS
SaveExploits0References8Affected Software1
Veracode
Veracode
•added 2025/12/13 4:42 a.m.•16 views

Information Exposure

Liferay Portal is vulnerable to information exposure. The vulnerability is due to improper logging in the LDAP import feature, which allows a local attacker to view user email addresses stored in application log files...

5.4CVSS6AI score0.0022EPSS
SaveExploits0References4Affected Software1
Veracode
Veracode
•added 2025/12/13 4:36 a.m.•21 views

CRLF Injection

org.apache.heron, heron-api is vulnerable to CRLF Injection. The vulnerability is due to improper escaping of log input in log statements, which allows an attacker to inject malicious CRLF characters and manipulate log entries...

9.8CVSS8.4AI score0.01585EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2025/12/13 4:31 a.m.•108 views

CVE-2025-11693 Export WP Page to Static HTML & PDF <= 4.3.4 - Unauthenticated Cookie Exposure via Log File

The Export WP Page to Static HTML & PDF plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.3.4 through publicly exposed cookies.txt files containing authentication cookies. This makes it possible for unauthenticated attackers to cookies th...

9.8CVSS0.02087EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2025/12/13 4:31 a.m.•11 views

CVE-2025-11693 Export WP Page to Static HTML & PDF <= 4.3.4 - Unauthenticated Cookie Exposure via Log File

The Export WP Page to Static HTML & PDF plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.3.4 through publicly exposed cookies.txt files containing authentication cookies. This makes it possible for unauthenticated attackers to cookies th...

9.8CVSS5.5AI score0.02087EPSS
SaveExploits1References2
Circl
Circl
•added 2025/12/13 1:39 a.m.•17 views

CVE-2025-64539

creationtimestamp| type| source ---|---|--- 2025-12-13 01:39:30+00:00| seen| https://bsky.app/profile/adobedigest.bsky.social/post/3m7thtjiqrs2f...

9.3CVSS8AI score0.00483EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/12/13 12:00 a.m.•9 views

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: aide (UTSA-2025-991233)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-991233 advisory. AIDE is an advanced intrusion detection environment. Prior to version 0.19.2, there is an improper output neutralization vulnerability in AIDE. An attacker can craft...

6.2CVSS6.4AI score0.0025EPSS
SaveExploits1References4
NVD
NVD
•added 2025/12/12 9:15 p.m.•17 views

CVE-2025-43517

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2. An app may be able to access protected user data...

3.3CVSS0.00179EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2025/12/12 9:15 p.m.•15 views

CVE-2025-43517

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Tahoe 26.2, macOS Sequoia 15.7.3, macOS Sonoma 14.8.3. An app may be able to access protected user data...

3.3CVSS5.7AI score0.00179EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/12/12 8:56 p.m.•10 views

CVE-2025-43517

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Tahoe 26.2, macOS Sequoia 15.7.3, macOS Sonoma 14.8.3. An app may be able to access protected user data...

5.8AI score0.00179EPSS
SaveExploits0References3
CVE
CVE
•added 2025/12/12 8:56 p.m.•63 views

CVE-2025-43517

A privacy issue in macOS log redaction is fixed in macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, and macOS Tahoe 26.2. The flaw allowed an app to access protected user data via log entries; it is addressed by the updated builds listed above. Affected products are macOS variants released around these...

3.3CVSS5.8AI score0.00179EPSS
SaveIn wildExploits0References3Affected Software1
Cvelist
Cvelist
•added 2025/12/12 8:56 p.m.•43 views

CVE-2025-43517

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2. An app may be able to access protected user data...

0.00179EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/12/12 6:57 p.m.•14 views

CVE-2025-14531

A vulnerability was found in code-projects Rental Management System 2.0. This affects an unknown function of the file Transaction.java of the component Log Handler. Performing manipulation results in crlf injection. The attack can be initiated remotely. The exploit has been made public and could ...

5.3CVSS6.6AI score0.00321EPSS
SaveExploits1References1
CNVD
CNVD
•added 2025/12/12 12:00 a.m.•24 views

WordPress Debug Log Viewer plugin missing license vulnerability

WordPress Debug Log Viewer plugin is a tool for managing debug logs for WordPress systems. A lack of authorization vulnerability exists in the WordPress Debug Log Viewer plugin, which can be exploited by an attacker to cause the exploitation of a misconfigured access control security level...

5.4CVSS6.8AI score0.00199EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/12 12:00 a.m.•5 views

CVE-2025-43517: Insertion of Sensitive Information into Log File

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2. An app may be able to access protected user data...

3.3CVSS5.8AI score0.00179EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/12/12 12:00 a.m.•18 views

PT-2025-51011

Name of the Vulnerable Software and Affected Versions macOS Sonoma versions prior to 14.8.3 macOS Sequoia versions prior to 15.7.3 Description An issue existed where an application could potentially access protected user data due to insufficient private data redaction in log entries...

6.5AI score0.00179EPSS
SaveExploits0References4
Rows per page
Query Builder