reactor-netty-http: Log request headers in some cases of invalid HTTP requests

A flaw was found in the Reactor Netty HTTP Server, which may log request headers in some cases of invalid HTTP requests. This could allow an attacker to access privileged information when WARN level logging is enabled...

PT-2023-28992 · Ansible · Ansible Automation Platform

Name of the Vulnerable Software and Affected Versions: Ansible Automation platform affected versions not specified Description: A logic flaw exists in the Ansible Automation platform. Whenever a private project is created with incorrect credentials, they are logged in plaintext. This flaw allows ...

Thales Group SafeNet Authentication Service 安全漏洞

Thales Group SafeNet Authentication Service is an authentication service from Thales Group, a French company. A security vulnerability exists in SafeNet Authentication Service version 3.4.0, which stems from a misconfiguration of logging privileges. An attacker could use this vulnerability to cau...

Denial Of Service (DoS)

libbind9.so is vulnerable to Denial Of Service DoS. The vulnerability exists when debug logging is turned on, due to assertion errors in renderecs which allows an attacker to cause an application crash...

Gigabud RAT Android Banking Malware Targets Institutions Across Countries

Account holders of over numerous financial institutions in Thailand, Indonesia, Vietnam, the Philippines, and Peru are being targeted by an Android banking malware called Gigabud RAT. "One of Gigabud RAT's unique features is that it doesn't execute any malicious actions until the user is authoriz...

Information Disclosure

github.com/mattermost/mattermost-server is vulnerable to Information Disclosure. The vulnerability exists due to the lack of restricting the post metadata during audit logging, which allows an attacker to gain sensitive information through the permalink contents in logs...

CUPS 2.2.0 < 2.4.6 Use After Free Vulnerability

CUPS is prone to an use after free vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:openprinting:cups"; if...

Mattermost fails to sanitize post metadata

Mattermost fails to sanitize post metadata during audit logging, resulting in permalinks' contents being logged...

GHSA-9RWW-66W7-7VJX Mattermost fails to sanitize post metadata

Mattermost fails to sanitize post metadata during audit logging, resulting in permalinks' contents being logged...

SUSE-FU-2023:3283-1 Feature update for cloud-init

This update for cloud-init fixes the following issues: - Default route is not configured bsc1212879 - cloud-final service failing in powerVS bsc1210273 - Randomly generated passwords logged in clear-text to world-readable file bsc1184758, CVE-2021-3429...

CVE-2023-4108

Mattermost fails to sanitize post metadata during audit logging resulting in permalinks contents being logged...

Code injection

Mattermost fails to sanitize post metadata during audit logging resulting in permalinks contents being logged...

CVE-2023-4108 Audit logging fails to sanitize post metadata

Mattermost fails to sanitize post metadata during audit logging resulting in permalinks contents being logged...

CVE-2023-4108 Audit logging fails to sanitize post metadata

Mattermost fails to sanitize post metadata during audit logging resulting in permalinks contents being logged...

CVE-2023-4108

Mattermost Audit Logging vulnerability (CVE-2023-4108): the product fails to sanitize post metadata during audit logging, causing permalinks contents to be logged. Affects Mattermost servers; CVE details indicate a high confidentiality impact (C:H) with no integrity or availability impact reporte...

CVE-2023-4108 Audit logging fails to sanitize post metadata

Mattermost fails to sanitize post metadata during audit logging resulting in permalinks contents being logged...

PT-2023-27774 · Unknown · Mattermost

Name of the Vulnerable Software and Affected Versions: Mattermost affected versions not specified Description: The issue is related to Mattermost's failure to sanitize post metadata during audit logging, resulting in the contents of permalinks being logged. Recommendations: At the moment, there i...

Mattermost Log Information Disclosure Vulnerability

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from a security vulnerability that stems from a failure to properly clean post metadata during audit logging, resulting in permalinks permanent links being recorded...

CVE-2022-48604

A SQL injection vulnerability exists in the “logging export” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database...

CVE-2022-48604

A SQL injection vulnerability exists in the “logging export” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database...