1779 matches found
Micro Focus ArcSight Logger Cross-Site Scripting Vulnerability (CNVD-2020-36749)
Micro Focus ArcSight Logger is a suite of log management software from Micro Focus UK. The software collects and integrates data from any log generation source for log management, searching, indexing, reporting, analysis and retention. A cross-site scripting vulnerability exists in Micro Focus...
FreeRDP Buffer Overflow Vulnerability (CNVD-2020-31430)
FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. A buffer overflow vulnerability exists in FreeRDP 2.0.0 and prior versions, which stems from the program reading an invalid array index when the logger is set to 'WLOGTRACE'. An attacker can exploit...
CVE-2020-11019
In FreeRDP less than or equal to 2.0.0, when running with logger set to "WLOGTRACE", a possible crash of application could occur due to a read of an invalid array index. Data could be printed as string to local terminal. This has been fixed in 2.1.0...
DEBIAN-CVE-2020-11019
In FreeRDP less than or equal to 2.0.0, when running with logger set to "WLOGTRACE", a possible crash of application could occur due to a read of an invalid array index. Data could be printed as string to local terminal. This has been fixed in 2.1.0...
UBUNTU-CVE-2020-11019
In FreeRDP less than or equal to 2.0.0, when running with logger set to "WLOGTRACE", a possible crash of application could occur due to a read of an invalid array index. Data could be printed as string to local terminal. This has been fixed in 2.1.0...
antSword
This is a comprehensive analysis of the provided code and metadata from the AntSword repository. Classification: Exploit module/toolkit targeting web applications Primary CVE ID: Not specified Target product/service or framework: Web applications Vulnerability class/vector: Not specified Probable...
Malicious Package
Overview applicasterlogger is a malicious package. Affected versions of this package were found to be a Malicious Package, as it utilised typosquatting to run Malicious 3rd party scripts. It replaced genuine packages using an and replaced it with - and vice versa Remediation Avoid using...
PT-2020-19646
Name of the Vulnerable Software and Affected Versions com.gradle.plugin-publish versions prior to 0.11.0 Description The issue allows for the insertion of sensitive information into log files. When a plugin author publishes a Gradle plugin while running Gradle with the --info log level flag, the...
CVE-2020-7599: Insertion of Sensitive Information into Log File
All versions of com.gradle.plugin-publish before 0.11.0 are vulnerable to Insertion of Sensitive Information into Log File. When a plugin author publishes a Gradle plugin while running Gradle with the --info log level flag, the Gradle Logger logs an AWS pre-signed URL. If this build log is public...
undertow: leak credentials to log files UndertowLogger.REQUEST_LOGGER.undertowRequestFailed
A vulnerability was found in Undertow web server before 2.0.21. An information exposure of plain text credentials through log files because Connectors.executeRootHandler:402 logs the HttpServerExchange object at ERROR level using UndertowLogger.REQUESTLOGGER.undertowRequestFailedt, exchange...
DEBIAN-CVE-2020-10574
An issue was discovered in Janus through 0.9.1. janus.c tries to use a string that doesn't actually exist during a "querylogger" Admin API request, because of a typo in the JSON validation...
UBUNTU-CVE-2020-10574
An issue was discovered in Janus through 0.9.1. janus.c tries to use a string that doesn't actually exist during a "querylogger" Admin API request, because of a typo in the JSON validation...
PT-2020-12214
Name of the Vulnerable Software and Affected Versions Janus versions through 0.9.1 Description An issue was discovered in the software, where a typo in the JSON validation causes it to try to use a non-existent string during a "query logger" Admin API request. Recommendations For versions through...
undertow: leak credentials to log files UndertowLogger.REQUEST_LOGGER.undertowRequestFailed
A vulnerability was found in Undertow web server before 2.0.21. An information exposure of plain text credentials through log files because Connectors.executeRootHandler:402 logs the HttpServerExchange object at ERROR level using UndertowLogger.REQUESTLOGGER.undertowRequestFailedt, exchange...
Kibana < 5.6.15 Multiple Vulnerabilities
According to its self-reported version number, the Kibana application running on the remote host is prior to 5.6.15 or 6.x prior to 6.6.1. It is, therefore, affected by the following vulnerabilities: - A cross-site scripting XSS vulnerability that could allow an attacker to obtain sensitive...
Kibana 6.x < 6.6.1 Multiple Vulnerabilities
According to its self-reported version number, the Kibana application running on the remote host is prior to 5.6.15 or 6.x prior to 6.6.1. It is, therefore, affected by the following vulnerabilities: - A cross-site scripting XSS vulnerability that could allow an attacker to obtain sensitive...
Simplifile RecordFusion Information Disclosure Vulnerability
Simplifile RecordFusion is an electronic records service system from Simplifile, Inc. in the United States. A security vulnerability exists in Simplifile RecordFusion 2019-11-25 and prior versions. A remote attacker can exploit logger/logs?/... / or logger/hist?/... / URI to access local files...
Micro Focus ArcSight Logger Cross-Site Request Forgery Vulnerability
Micro Focus ArcSight Logger is a suite of log management software from Micro Focus UK. The software collects and integrates data from any log generation source for log management, searching, indexing, reporting, analysis and retention. A cross-site request forgery vulnerability exists in Micro...
