Lucene search
+L

1436 matches found

NVD
NVD
added 2022/08/31 4:15 p.m.24 views

CVE-2022-26330

Potential vulnerabilities have been identified in Micro Focus ArcSight Logger. The vulnerabilities could be remotely exploited resulting in Information Disclosure, or Self Cross-Site Scripting XSS. This issue affects: Micro Focus ArcSight Logger versions prior to v7.2.2 version and prior versions...

7.5CVSS0.0057EPSS
SaveExploits0References2
OSV
OSV
added 2022/08/31 4:15 p.m.5 views

CVE-2022-26330

Potential vulnerabilities have been identified in Micro Focus ArcSight Logger. The vulnerabilities could be remotely exploited resulting in Information Disclosure, or Self Cross-Site Scripting XSS. This issue affects: Micro Focus ArcSight Logger versions prior to v7.2.2 version and prior versions...

7.5CVSS5.8AI score0.0057EPSS
SaveExploits0References2
Prion
Prion
added 2022/08/31 4:15 p.m.11 views

Cross site scripting

Potential vulnerabilities have been identified in Micro Focus ArcSight Logger. The vulnerabilities could be remotely exploited resulting in Information Disclosure, or Self Cross-Site Scripting XSS. This issue affects: Micro Focus ArcSight Logger versions prior to v7.2.2 version and prior versions...

5.8CVSS6.3AI score0.0038EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2022/08/31 4:15 p.m.20 views

Cross site scripting

Potential vulnerabilities have been identified in Micro Focus ArcSight Logger. The vulnerabilities could be remotely exploited resulting in Information Disclosure, or Self Cross-Site Scripting XSS. This issue affects: Micro Focus ArcSight Logger versions prior to v7.2.2 version and prior versions...

5CVSS7.3AI score0.0057EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2022/08/31 3:52 p.m.57 views

CVE-2022-26331

CVE-2022-26331 affects Micro Focus ArcSight Logger. Vulnerable are ArcSight Logger versions prior to 7.2.2. The issue could be remotely exploited to cause Information Disclosure or Self Cross-Site Scripting (XSS). Root cause details are not specified in the provided documents. Remediation: upgrad...

6.1CVSS6.4AI score0.0038EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2022/08/31 3:52 p.m.28 views

CVE-2022-26331 Potential vulnerabilities have been identified in Micro Focus ArcSight Logger. The vulnerabilities could be remotely exploited resulting in Self Cross-Site Scripting (XSS).

Potential vulnerabilities have been identified in Micro Focus ArcSight Logger. The vulnerabilities could be remotely exploited resulting in Information Disclosure, or Self Cross-Site Scripting XSS. This issue affects: Micro Focus ArcSight Logger versions prior to v7.2.2 version and prior versions...

6.1CVSS6.5AI score0.0038EPSS
SaveExploits0References2
CVE
CVE
added 2022/08/31 3:52 p.m.59 views

CVE-2022-26330

CVE-2022-26330 affects Micro Focus ArcSight Logger prior to version 7.2.2. The documented impact is information disclosure and self XSS, with remote exploitation described in multiple sources. The root cause details are not fully enumerated in the provided documents, but the vulnerability targets...

7.5CVSS7AI score0.0057EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2022/08/31 3:52 p.m.30 views

CVE-2022-26330 Potential vulnerability has been identified in Micro Focus ArcSight Logger. The vulnerability could be remotely exploited resulting in Information Disclosure.

Potential vulnerabilities have been identified in Micro Focus ArcSight Logger. The vulnerabilities could be remotely exploited resulting in Information Disclosure, or Self Cross-Site Scripting XSS. This issue affects: Micro Focus ArcSight Logger versions prior to v7.2.2 version and prior versions...

6.5CVSS7.5AI score0.0057EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2022/08/31 12:0 a.m.7 views

PT-2022-17790 · Micro Focus · Micro Focus Arcsight Logger

Name of the Vulnerable Software and Affected Versions: Micro Focus ArcSight Logger versions prior to 7.2.2 Description: The issue affects Micro Focus ArcSight Logger, where potential vulnerabilities could be remotely exploited, resulting in Information Disclosure or Self Cross-Site Scripting XSS...

7.5CVSS7.3AI score0.0057EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2022/08/31 12:0 a.m.7 views

PT-2022-17791 · Micro Focus · Micro Focus Arcsight Logger

Name of the Vulnerable Software and Affected Versions: Micro Focus ArcSight Logger versions prior to 7.2.2 Description: The issue affects Micro Focus ArcSight Logger, where potential vulnerabilities could be remotely exploited, resulting in Information Disclosure or Self Cross-Site Scripting XSS...

6.1CVSS6.2AI score0.0038EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2022/08/29 12:0 a.m.7 views

Micro Focus ArcSight Logger 安全漏洞

Micro Focus ArcSight Logger is a suite of log management software from Micro Focus UK. The software is capable of collecting and integrating data from any log-generating source for log management, searching, indexing, reporting, analyzing, and retention. A security vulnerability exists in Micro...

7.5CVSS6.5AI score0.0057EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2022/08/29 12:0 a.m.9 views

Micro Focus ArcSight Logger 跨站脚本漏洞

Micro Focus ArcSight Logger is a suite of log management software from Micro Focus UK. The software is capable of collecting and integrating data from any log-generating source for log management, searching, indexing, reporting, analyzing, and retention. A security vulnerability exists in Micro...

6.1CVSS6.5AI score0.0038EPSS
SaveExploits0References4
OSV
OSV
added 2022/08/19 3:55 a.m.6 views

MAL-2022-2672 Malicious code in edx-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6a45186001f92d46e485ade8cdd9152dabbe881415b90667398d14c43d98bda4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSV
OSV
added 2022/08/16 8:46 a.m.7 views

MAL-2022-4207 Malicious code in koa-colorful-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dd44f0764b794e863572b93e1dd77d7927262ffcefb143a0ef4f38a205c7da27 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/08/16 8:46 a.m.4 views

Malicious code in koa-colorful-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dd44f0764b794e863572b93e1dd77d7927262ffcefb143a0ef4f38a205c7da27 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
Snyk
Snyk
added 2022/08/11 11:43 a.m.5 views

Malicious Package

Overview ot-logger is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

9.8CVSS7.1AI score
SaveExploits0References3
NVD
NVD
added 2022/08/01 8:15 p.m.13 views

CVE-2022-31186

NextAuth.js is a complete open source authentication solution for Next.js applications. An information disclosure vulnerability in next-auth before v4.10.2 and v3.29.9 allows an attacker with log access privilege to obtain excessive information such as an identity provider's secret in the log whi...

3.3CVSS0.00256EPSS
SaveExploits0References4
Prion
Prion
added 2022/08/01 8:15 p.m.25 views

Information disclosure

NextAuth.js is a complete open source authentication solution for Next.js applications. An information disclosure vulnerability in next-auth before v4.10.2 and v3.29.9 allows an attacker with log access privilege to obtain excessive information such as an identity provider's secret in the log whi...

1.7CVSS3.8AI score0.00256EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2022/08/01 7:25 p.m.22 views

CVE-2022-31186 Leakage of excessive information into log in next-auth

NextAuth.js is a complete open source authentication solution for Next.js applications. An information disclosure vulnerability in next-auth before v4.10.2 and v3.29.9 allows an attacker with log access privilege to obtain excessive information such as an identity provider's secret in the log whi...

3.3CVSS4AI score0.00256EPSS
SaveExploits0References4
OSV
OSV
added 2022/08/01 7:25 p.m.44 views

CVE-2022-31186 Leakage of excessive information into log in next-auth

NextAuth.js is a complete open source authentication solution for Next.js applications. An information disclosure vulnerability in next-auth before v4.10.2 and v3.29.9 allows an attacker with log access privilege to obtain excessive information such as an identity provider's secret in the log whi...

3.3CVSS4.1AI score0.00256EPSS
SaveExploits0References6
Rows per page
Query Builder