Lucene search
+L

103 matches found

attackerkb
attackerkb
•added 2021/05/11 2:15 p.m.•13 views

CVE-2021-32560

The Logging subsystem in OctoPrint before 1.6.0 has incorrect access control because it attempts to manage files that are not .log files...

6.5CVSS6.6AI score0.01503EPSS
SaveExploits1References5
Prion
Prion
•added 2021/05/11 2:15 p.m.•27 views

Improper access control

The Logging subsystem in OctoPrint before 1.6.0 has incorrect access control because it attempts to manage files that are not .log files...

4CVSS6.4AI score0.01503EPSS
SaveExploits1References3Affected Software1
PyPA
PyPA
•added 2021/05/11 2:15 p.m.•13 views

PYSEC-2021-29

The Logging subsystem in OctoPrint before 1.6.0 has incorrect access control because it attempts to manage files that are not .log files...

6.5CVSS6.9AI score0.01503EPSS
SaveExploits1References4Affected Software1
OSV
OSV
•added 2021/05/11 2:15 p.m.•31 views

PYSEC-2021-29

The Logging subsystem in OctoPrint before 1.6.0 has incorrect access control because it attempts to manage files that are not .log files...

6.5CVSS2.2AI score0.01503EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/05/11 12:00 a.m.•4 views

CVE-2021-32560: Undefined Security Weakness

The Logging subsystem in OctoPrint before 1.6.0 has incorrect access control because it attempts to manage files that are not .log files...

6.5CVSS5.7AI score0.01503EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2021/05/11 12:00 a.m.•20 views

OctoPrint 访问控制错误漏洞

OctoPrint is an application. Provides a fast web interface for controlling consumer 3D printers. A security vulnerability previously existed in OctoPrint version 1.6.0. The vulnerability stemmed from the Logging subsystem in the program having incorrect access control...

6.5CVSS6.4AI score0.01503EPSS
SaveExploits1References4
BDU FSTEC
BDU FSTEC
•added 2021/02/09 12:00 a.m.•14 views

The vulnerability of the logging subsystem of the Cisco Data Center Network Manager, a system for managing network operations at data centers, allows an intruder to gain unauthorized access to protected information.

The vulnerability of the logging subsystem of the Cisco Data Center Network Manager DCNM is related to uncontrolled memory allocation. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

5.5CVSS5.9AI score0.00284EPSS
SaveExploits0References2
CNVD
CNVD
•added 2021/01/21 12:00 a.m.•42 views

Cisco Data Center Network Manager Information Disclosure Vulnerability (CNVD-2021-09946)

Cisco Data Center Network Manager DCNM is a suite of data center network managers from Cisco that provides multiprotocol management of the network and troubleshooting of switch operating conditions and performance. An information disclosure vulnerability exists in the logging subsystem of Cisco...

5.5CVSS5.9AI score0.00284EPSS
SaveExploits0References1
NVD
NVD
•added 2021/01/20 8:15 p.m.•36 views

CVE-2021-1283

A vulnerability in the logging subsystem of Cisco Data Center Network Manager DCNM could allow an authenticated, local attacker to view sensitive information in a system log file that should be restricted. The vulnerability exists because sensitive information is not properly masked before it is...

5.5CVSS5.1AI score0.00284EPSS
SaveExploits0References1
Prion
Prion
•added 2021/01/20 8:15 p.m.•29 views

Design/Logic Flaw

A vulnerability in the logging subsystem of Cisco Data Center Network Manager DCNM could allow an authenticated, local attacker to view sensitive information in a system log file that should be restricted. The vulnerability exists because sensitive information is not properly masked before it is...

2.1CVSS5.1AI score0.00284EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2021/01/20 7:56 p.m.•15 views

CVE-2021-1283 Cisco Data Center Network Manager Information Disclosure Vulnerability

A vulnerability in the logging subsystem of Cisco Data Center Network Manager DCNM could allow an authenticated, local attacker to view sensitive information in a system log file that should be restricted. The vulnerability exists because sensitive information is not properly masked before it is...

5.5CVSS6AI score0.00284EPSS
SaveExploits0References1
CVE
CVE
•added 2021/01/20 7:56 p.m.•80 views

CVE-2021-1283

Cisco Data Center Network Manager (DCNM) is affected by an information-disclosure vulnerability in its logging subsystem. The issue arises because sensitive data is not properly masked before being written to system log files, allowing an authenticated, local attacker with valid credentials to vi...

5.5CVSS5AI score0.00284EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2021/01/20 7:56 p.m.•43 views

CVE-2021-1283 Cisco Data Center Network Manager Information Disclosure Vulnerability

A vulnerability in the logging subsystem of Cisco Data Center Network Manager DCNM could allow an authenticated, local attacker to view sensitive information in a system log file that should be restricted. The vulnerability exists because sensitive information is not properly masked before it is...

5.5CVSS5.3AI score0.00284EPSS
SaveExploits0References1
Cisco
Cisco
•added 2021/01/20 4:00 p.m.•85 views

Cisco Data Center Network Manager Information Disclosure Vulnerability

A vulnerability in the logging subsystem of Cisco Data Center Network Manager DCNM could allow an authenticated, local attacker to view sensitive information in a system log file that should be restricted. The vulnerability exists because sensitive information is not properly masked before it is...

5.5CVSS5AI score0.00284EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2021/01/20 4:00 p.m.•9 views

CVE-2021-1283

A vulnerability in the logging subsystem of Cisco Data Center Network Manager DCNM could allow an authenticated, local attacker to view sensitive information in a system log file that should be restricted. The vulnerability exists because sensitive information is not properly masked before it is...

5.5CVSS5.9AI score0.00284EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/01/20 12:00 a.m.•3 views

CVE-2021-1283: Memory Allocation with Excessive Size Value

A vulnerability in the logging subsystem of Cisco Data Center Network Manager DCNM could allow an authenticated, local attacker to view sensitive information in a system log file that should be restricted. The vulnerability exists because sensitive information is not properly masked before it is...

5.5CVSS5.9AI score0.00284EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2019/05/31 12:00 a.m.•12 views

The vulnerability of the Cisco Web Security Appliance’s logging subsystem allows a hacker to execute arbitrary commands and elevate their privileges to the root level.

The vulnerability of the Cisco Web Security Appliance WSA’s reporting subsystem is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary commands and elevate their privileges to the root level...

5.3CVSS6.7AI score0.0064EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2018/01/12 5:00 p.m.•37 views

CVE-2017-18014

An NC-25986 issue was discovered in the Logging subsystem of Sophos XG Firewall with SFOS before 17.0.3 MR3. An unauthenticated user can trigger a persistent XSS vulnerability found in the WAF log page Control Center - Log Viewer - in the filter option "Web Server Protection" in the webadmin...

6.2AI score0.02307EPSS
SaveExploits2References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/01/12 12:00 a.m.•5 views

CVE-2017-18014: Improper Neutralization of Input During Web Page Generation

An NC-25986 issue was discovered in the Logging subsystem of Sophos XG Firewall with SFOS before 17.0.3 MR3. An unauthenticated user can trigger a persistent XSS vulnerability found in the WAF log page Control Center - Log Viewer - in the filter option "Web Server Protection" in the webadmin...

6.1CVSS6.4AI score0.02307EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/07/04 12:00 a.m.•8 views

CVE-2017-6706: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability in the logging subsystem of the Cisco Prime Collaboration Provisioning tool could allow an unauthenticated, local attacker to acquire sensitive information. More Information: CSCvd07260. Known Affected Releases: 12.1...

5.1CVSS5.9AI score0.00384EPSS
SaveExploits0References2
Rows per page
Query Builder