1779 matches found
CVE-2019-11655
CVE-2019-11655 affects Micro Focus ArcSight Logger (version 6.7.0 and later). The vulnerability is an Unrestricted Upload of File with Dangerous type due to unrestricted file upload. The connected documents confirm the issue and its association with ArcSight Logger, but do not provide detailed ex...
CVE-2019-11655: Unrestricted Upload of File with Dangerous Type
Unrestricted file upload vulnerability in Micro Focus ArcSight Logger, version 6.7.0 and later. This vulnerability could allow Unrestricted Upload of File with Dangerous type...
PT-2019-12458
Name of the Vulnerable Software and Affected Versions Micro Focus ArcSight Logger versions 6.7.0 and later Description The issue concerns an unrestricted file upload vulnerability. This could allow the upload of files with dangerous types. Recommendations For Micro Focus ArcSight Logger versions...
PT-2019-12459
Name of the Vulnerable Software and Affected Versions Micro Focus ArcSight Logger versions prior to 6.7.1 HotFix 6.7.1.8262.0 Description The issue is related to a Stored XSS vulnerability, which could allow Improper Neutralization of Input During Web Page Generation, also known as Cross-site...
CVE-2019-11656: Improper Neutralization of Input During Web Page Generation
Stored XSS vulnerability in Micro Focus ArcSight Logger, affects versions prior to Logger 6.7.1 HotFix 6.7.1.8262.0. This vulnerability could allow Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
NVIDIA Windows GPU Display Driver Privilege License and Access Control Issues Vulnerability (CNVD-2019-28285)
NVIDIA Windows GPU Display Driver is a graphics processor GPU graphics card driver from NVIDIA dedicated to the Windows platform. A security vulnerability exists in the user mode video driver trace logger component of the NVIDIA Windows GPU Display Driver all versions. An attacker could exploit...
CVE-2019-5683
NVIDIA Windows GPU Display Driver all versions contains a vulnerability in the user mode video driver trace logger component. When an attacker has access to the system and creates a hard link, the software does not check for hard link attacks. This behavior may lead to code execution, denial of...
Design/Logic Flaw
NVIDIA Windows GPU Display Driver all versions contains a vulnerability in the user mode video driver trace logger component. When an attacker has access to the system and creates a hard link, the software does not check for hard link attacks. This behavior may lead to code execution, denial of...
CVE-2019-5683
NVIDIA Windows GPU Display Driver all versions contains a vulnerability in the user mode video driver trace logger component. When an attacker has access to the system and creates a hard link, the software does not check for hard link attacks. This behavior may lead to code execution, denial of...
CVE-2019-5683
CVE-2019-5683 affects NVIDIA Windows GPU Display Driver (all versions) via the user-mode video driver trace logger. The issue arises when a local attacker with system access creates a hard link and the driver fails to detect hard-link attacks, potentially enabling code execution, denial of servic...
CVE-2019-5683: Improper Link Resolution Before File Access
NVIDIA Windows GPU Display Driver all versions contains a vulnerability in the user mode video driver trace logger component. When an attacker has access to the system and creates a hard link, the software does not check for hard link attacks. This behavior may lead to code execution, denial of...
PT-2019-17813
Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display Driver all versions Description The issue is related to the user mode video driver trace logger component, which does not check for hard link attacks. This behavior can lead to code execution, denial of service, or...
configuration-as-code failed to mask secrets in system log messages
configuration-as-code logs the changes it applies to the Jenkins system log. Secrets such as passwords should be masked i.e. replaced with asterisks in that log to prevent accidental disclosure. Between configuration-as-code 0.8-alpha and 1.0, log messages contained values if the values were...
CVE-2019-3485
Mitigates a stored cross site scripting issue in ArcSight Logger versions prior to 6.7.1...
CVE-2019-3485
Mitigates a stored cross site scripting issue in ArcSight Logger versions prior to 6.7.1...
Cross site scripting
Mitigates a stored cross site scripting issue in ArcSight Logger versions prior to 6.7.1...
CVE-2019-3485
CVE-2019-3485 affects ArcSight Logger (Micro Focus) prior to version 6.7.1. The issue is a stored cross-site scripting (XSS) vulnerability in the WEB application, caused by lack of proper validation of client-side data. Impact is described as potential for executing client-side code; the vulnerab...
CVE-2019-3485 ArcSight Logger stored cross site script issue in version prior to 6.7.1
Mitigates a stored cross site scripting issue in ArcSight Logger versions prior to 6.7.1...
Micro Focus ArcSight Logger Cross-Site Scripting Vulnerability
Micro Focus ArcSight Logger is a suite of log management software from Micro Focus UK. The software collects and integrates data from any log generation source for log management, searching, indexing, reporting, analysis and retention. A cross-site scripting vulnerability exists in ArcSight Logge...