10997 matches found
PT-2026-108747
Name of the Vulnerable Software and Affected Versions SendPress Newsletters WordPress plugin versions prior to 1.26.1.21 Description The plugin uses a hardcoded token that is identical across all installations to protect a logging endpoint. Because this token is not a per-site secret,...
CVE-2026-84274 IBM Guardium Data Protection Information Disclosure
IBM Guardium Data Protection 12.2.2 is affected by a sensitive information exposure vulnerability. During SECRET and APIKEY rotation processing, sensitive credential material is logged at INFO level by the edge-controller/edge-manager components. An authenticated attacker with access to the...
EUVD-2026-95237
IBM Guardium Data Protection 12.2.2 is affected by a sensitive information exposure vulnerability. During SECRET and APIKEY rotation processing, sensitive credential material is logged at INFO level by the edge-controller/edge-manager components. An authenticated attacker with access to the...
CVE-2026-87674
A local privilege escalation vulnerability exists in the system logging daemon of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. Insufficient access controls on internal inter-process communication IPC channels allow an unprivileged local user to submit malformed logging...
CVE-2026-87674
A local privilege escalation vulnerability exists in the system logging daemon of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. Insufficient access controls on internal inter-process communication IPC channels allow an unprivileged local user to submit malformed logging...
CVE-2026-87674
A local privilege escalation vulnerability exists in the system logging daemon of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. Insufficient access controls on internal inter-process communication IPC channels allow an unprivileged local user to submit malformed logging...
EUVD-2026-94689
A local privilege escalation vulnerability exists in the system logging daemon of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. Insufficient access controls on internal inter-process communication IPC channels allow an unprivileged local user to submit malformed logging...
CVE-2026-87674
A local privilege escalation vulnerability exists in the system logging daemon of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 . The root cause is insufficient access controls on internal inter-process communication (IPC) channels, which allows an unprivileged local user t...
CLEANSTART-2026-WQ92257 When audit logging is enabled (zookeeper
CVE-2026-84439 affects multiple packages. When audit logging is enabled zookeeper. See references for individual vulnerability details...
CVE-2026-87674: Improper Neutralization of Special Elements used in an OS Command
A local privilege escalation vulnerability exists in the system logging daemon of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. Insufficient access controls on internal inter-process communication IPC channels allow an unprivileged local user to submit malformed logging...
PT-2026-107794
Name of the Vulnerable Software and Affected Versions Brocade Fabric OS versions prior to 9.2.2d Brocade Fabric OS versions 10.0.0 through 10.0.0a1 Description A local privilege escalation issue exists in the system logging daemon. Insufficient access controls on internal inter-process...
CVE-2026-106441
A flaw was found in hydra-core. An attacker who supplies or controls a malicious logging configuration can trigger arbitrary code execution by specifying unauthorized Python classes or factory functions. Because Hydra passes logging configuration directly to Python's logging system without...
GHSA-C3WX-C55W-PXJQ Hydra logging configuration permits unsafe callable resolution
Summary Hydra passed its Python logging configuration to logging.config.dictConfig. Python's logging configurator can resolve and invoke importable classes and factories named by configuration, including handler class values and formatter, filter, handler, queue, and listener factories. This...
GO-2026-6665 Snowflake Go Driver writes sensitive information to logs in github.com/snowflakedb/gosnowflake
Snowflake Go Driver writes sensitive information to logs in github.com/snowflakedb/gosnowflake...
Important: Red Hat Security Advisory: Logging for Red Hat OpenShift - 6.4.7
Logging for Red Hat OpenShift - 6.4.7 Red Hat OpenShift Logging 6.4.7 is a cluster-wide logging solution for OpenShift that collects and manages applications, infrastructure, and audit logs...
CLEANSTART-2026-DM89107 When audit logging is enabled (zookeeper
Security vulnerability affects the spark package. When audit logging is enabled zookeeper...
CVE-2026-105243
Insufficient Logging vulnerability in the EventLogAppender of Apache log4net. Long messages were truncated to a fixed size that exceeds what the Windows Event Log accepts once the log and source names are counted, and the event log then stored nothing and reported nothing. A party whose data...
DEBIAN-CVE-2026-105243
Insufficient Logging vulnerability in the EventLogAppender of Apache log4net. Long messages were truncated to a fixed size that exceeds what the Windows Event Log accepts once the log and source names are counted, and the event log then stored nothing and reported nothing. A party whose data...
UBUNTU-CVE-2026-105243
Insufficient Logging vulnerability in the EventLogAppender of Apache log4net. Long messages were truncated to a fixed size that exceeds what the Windows Event Log accepts once the log and source names are counted, and the event log then stored nothing and reported nothing. A party whose data...
CVE-2026-105243
Insufficient Logging vulnerability in the EventLogAppender of Apache log4net. Long messages were truncated to a fixed size that exceeds what the Windows Event Log accepts once the log and source names are counted, and the event log then stored nothing and reported nothing. A party whose data...