Fortinet多款产品 日志信息泄露漏洞

Fortinet FortiOS and others are products of Fortinet, Inc.Fortinet FortiOS is a security operating system dedicated to the FortiGate network security platform.Fortinet FortiPAM is a platform for privilege access control.Fortinet FortiSRA is a secure remote access software. A log information...

KLA90812 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, bypass security restrictions, cause denial of service, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A remote cod...

KLA90811 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, obtain sensitive information, bypass security restrictions, cause denial of service, spoof user interface. Below is a...

PT-2025-50170

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A heap-based buffer overflow exists in the Windows Common Log File System Driver. This issue allows a locally authorized attacker to gain elevated privileges. The issue involves an...

Microsoft Windows Common Log File System Driver 安全漏洞

The Microsoft Windows Common Log File System Driver is a Microsoft Corporation Common Log File System CLFS API that provides a high-performance, common log file subsystem that can be used by dedicated client applications and shared by multiple clients to optimize logging and access. access. A...

CVE-2025-62470: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...

CVE-2025-13743: Insertion of Sensitive Information into Log File

Docker Desktop diagnostics bundles were found to include expired Hub PATs in log output due to error object serialization. This poses a risk of leaking sensitive information in exported diagnostics, especially when access denied errors occurred...

PT-2025-50250

Name of the Vulnerable Software and Affected Versions Docker Desktop affected versions not specified Description Docker Desktop diagnostics bundles include expired Hub PATs Personal Access Tokens in log output because of error object serialization. This can lead to the leakage of sensitive...

PT-2025-50108

Name of the Vulnerable Software and Affected Versions FortiOS versions 7.0 through 7.4.3 FortiProxy versions 7.2.0 through 7.4.3 FortiPAM versions 1.0 through 1.4 FortiSRA version 1.4 Description A flaw exists where sensitive information can be written to log files. Specifically, a read-only...

CVE-2022-50678: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: fix invalid address access when enabling SCAN log level The variable i is changed when setting random MAC address and causes invalid address access when printing the value of pi-reqsi-reqid. We replace reqs index...

PT-2025-49739

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A deadlock situation exists within the r5l exit log function in the md/raid5-cache component of the Linux kernel. This issue stems from a commit b13015af94cf intended to clear the conf-l...

CVE-2025-67561: Missing Authorization

Missing Authorization vulnerability in Oleksandr Lysyi Debug Log Viewer debug-log-viewer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Debug Log Viewer: from n/a through = 2.0.3...

PT-2025-49935

Missing Authorization vulnerability in Oleksandr Lysyi Debug Log Viewer debug-log-viewer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Debug Log Viewer: from n/a through = 2.0.3...

WordPress plugin Debug Log Viewer 安全漏洞

WordPress Debug Log Viewer plugin is a tool for managing debug logs for WordPress systems. A lack of authorization vulnerability exists in the WordPress Debug Log Viewer plugin, which can be exploited by an attacker to cause the exploitation of a misconfigured access control security level...

Nagios Log Server Cluster Manager Credential Interception

The vulnerability of the cluster manager component of the Nagios Log Server monitoring and analysis software involves the transmission of confidential information in an open manner. Exploiting this vulnerability allows a malicious actor to intercept user credentials by using an unencrypted...

Nagios Log Server Privilege Escalation

The vulnerability of the Nagios Log Server monitoring and analysis software is related to deficiencies in its authentication mechanism. Exploiting this vulnerability allows a malicious actor to gain increased privileges from a remote location...

Nagios Log Server Disclosure

The vulnerability of the user import function in the Nagios Log Server monitoring and analysis software is related to insufficient protection of registration data. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...

Nagios Log Server Code Execution

The vulnerability of the Nagios Log Server monitoring and analysis software lies in the improper checking of incorrect values of the monitoring panel identifiers before they are passed into the internal API. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Nagios Log Server XSS

The vulnerability of the monitoring panel for Nagios Log Server exists because no measures have been taken to protect the structure of the web page when viewing log records. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

KB5071507: Windows Server 2008 Security Update (December 2025)

The remote Windows host is missing security update 5071507. It is, therefore, affected by multiple vulnerabilities - Untrusted pointer dereference in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to execute code over a network. CVE-2025-62549 - Null pointer...