1436 matches found
CVE-2020-36567
Unsanitized input in the default logger in github.com/gin-gonic/gin before v1.6.0 allows remote attackers to inject arbitrary log lines...
CVE-2022-30123
A sequence injection vulnerability exists in Rack 2.0.9.1, 2.1.4.1 and 2.2.3.1 which could allow is a possible shell escape in the Lint and CommonLogger components of Rack...
DEBIAN-CVE-2022-30123
A sequence injection vulnerability exists in Rack 2.0.9.1, 2.1.4.1 and 2.2.3.1 which could allow is a possible shell escape in the Lint and CommonLogger components of Rack...
UBUNTU-CVE-2022-30123
A sequence injection vulnerability exists in Rack 2.0.9.1, 2.1.4.1 and 2.2.3.1 which could allow is a possible shell escape in the Lint and CommonLogger components of Rack...
CVE-2022-3131
The Search Logger WordPress plugin through 0.9 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users...
CVE-2022-3131
CVE-2022-3131 affects the Search Logger WordPress plugin ≤ 0.9. The issue is an SQL injection caused by improper sanitisation/escaping of input before SQL statement construction, allowing an attacker with high privileges (Admin+) to exploit it. Public details indicate authenticated SQLi, with evi...
CVE-2022-3131 Search Logger <= 0.9 - Admin+ SQLi
The Search Logger WordPress plugin through 0.9 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users...
PT-2022-20682 · WordPress · Search Logger
Name of the Vulnerable Software and Affected Versions: Search Logger WordPress plugin versions 0.9 and earlier Description: The issue is related to a SQL injection problem. It occurs because a parameter is not properly sanitised and escaped before being used in a SQL statement. This can be...
WordPress Plugin Search Logger SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A SQL injection vulnerability exists in...
CVE-2022-3131 Search Logger <= 0.9 - Admin+ SQLi
The Search Logger WordPress plugin through 0.9 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users...
PT-2022-36664 · Git +1 · Suricata
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a null-dereference read crash. The crash involves several components, including AlertJson, JsonAlertLogger, and OutputPacketLog. ...
Search Logger <= 0.9 - Admin+ SQLi
The plugin does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users ------------------------------------------------- Go to Search Logger Logs Select Delete ------------------------------------------------...
WordPress Search Logger plugin <= 0.9 - Authenticated SQL Injection (SQLi) vulnerability
Authenticated SQL Injection SQLi vulnerability discovered by Mika in WordPress Search Logger plugin versions = 0.9. Solution Deactivate and delete. This plugin has been closed as of September 5, 2022 and is not available for download. This closure is temporary, pending a full review...
Search Logger <= 0.9 - Admin+ SQLi
The plugin does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users PoC ------------------------------------------------- Go to Search Logger Logs Select Delete...
Malicious code in wix-bi-logger-client (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1e185d8229566fd434ef411f0f422b917f946846f53e3b81e0f5c37b3dcb0d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-7159 Malicious code in wix-bi-logger-client (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1e185d8229566fd434ef411f0f422b917f946846f53e3b81e0f5c37b3dcb0d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2022-26331
Potential vulnerabilities have been identified in Micro Focus ArcSight Logger. The vulnerabilities could be remotely exploited resulting in Information Disclosure, or Self Cross-Site Scripting XSS. This issue affects: Micro Focus ArcSight Logger versions prior to v7.2.2 version and prior versions...
CVE-2022-26330
Potential vulnerabilities have been identified in Micro Focus ArcSight Logger. The vulnerabilities could be remotely exploited resulting in Information Disclosure, or Self Cross-Site Scripting XSS. This issue affects: Micro Focus ArcSight Logger versions prior to v7.2.2 version and prior versions...
CVE-2022-26331
Potential vulnerabilities have been identified in Micro Focus ArcSight Logger. The vulnerabilities could be remotely exploited resulting in Information Disclosure, or Self Cross-Site Scripting XSS. This issue affects: Micro Focus ArcSight Logger versions prior to v7.2.2 version and prior versions...
CVE-2022-26331
Potential vulnerabilities have been identified in Micro Focus ArcSight Logger. The vulnerabilities could be remotely exploited resulting in Information Disclosure, or Self Cross-Site Scripting XSS. This issue affects: Micro Focus ArcSight Logger versions prior to v7.2.2 version and prior versions...