10999 matches found
morgan vulnerable to Log Forging via unescaped Unicode line separators
Impact Morgan writes attacker-controlled request data to the access log through its tokens. The 1.11.0 fix neutralizes C0 control characters, DEL, and backslash, but it does not escape the Unicode line separators U+0085 NEL, U+2028 LINE SEPARATOR, or U+2029 PARAGRAPH SEPARATOR. These code points...
EUVD-2026-74183
The Okta Hyperdrive Agent writes the decoded SAML bearer assertion to a local application log file at the default log level on every successful MFA completion. This insertion of sensitive information into the log file makes a live authentication credential readable by any local user with access t...
CVE-2026-78627 Improper Credential Protection in Okta Hyperdrive Integration Installer Logging
The Okta Hyperdrive Integration installer does not mask the OAuth client secret when passed as an MSI property. The credential is recorded in plaintext in the installer log, the Application Event Log, and the process command line, all of which are readable by an authenticated local user on the...
CVE-2026-78627 Improper Credential Protection in Okta Hyperdrive Integration Installer Logging
The Okta Hyperdrive Integration installer does not mask the OAuth client secret when passed as an MSI property. The credential is recorded in plaintext in the installer log, the Application Event Log, and the process command line, all of which are readable by an authenticated local user on the...
CVE-2026-78627
Okta Hyperdrive Integration installer exposes the OAuth client secret in plaintext when it is passed as an MSI property. The credential is recorded in three locations readable by an authenticated local user: the installer log , the Application Event Log , and the process command line . The CVSS 3...
CVE-2026-69495
Heap-based buffer overflow in Windows Event Logging Service allows an unauthorized attacker to execute code over a network...
CVE-2026-69493
Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network...
CVE-2026-69494
Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network...
CVE-2026-66816
Insufficient logging in SQL Server allows an authorized attacker to bypass a security feature over a network...
EUVD-2026-73523
Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network...
CVE-2026-69493
CVE-2026-69493 is a critical (CVSS 9.8) out-of-bounds read vulnerability in Windows Event Logging Service , as assigned by Microsoft . The flaw allows an unauthorized, network-based attacker to achieve remote code execution without user interaction, with high impact to confidentiality, integrity,...
CVE-2026-66816
Microsoft SQL Server is affected by a security feature bypass vulnerability caused by insufficient logging , allowing an authorized attacker with low privileges to bypass a security feature over a network. The vulnerability carries a CVSS 3.1 score of 6.5 (Medium) with a High confidentiality impa...
EUVD-2026-73376
Insufficient logging in SQL Server allows an authorized attacker to bypass a security feature over a network...
EUVD-2026-72993
Heap-based buffer overflow in Windows Event Logging Service allows an unauthorized attacker to execute code over a network...
CVE-2026-69495
A heap-based buffer overflow in the Windows Event Logging Service allows an unauthorized attacker to achieve remote code execution over a network. The assigned CVSS 3.1 score is 8.8 (HIGH) , with the vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating that exploitation requires user interactio...
EUVD-2026-72992
Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network...
CVE-2026-69494
CVE-2026-69494 is an out-of-bounds read vulnerability in the Windows Event Logging Service that allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability requires user interaction (CVSS: UI:R) and no prior privileges (PR:N), yielding a CVSS 3.1 score of 8....
Windows Event Logging Service Remote Code Execution Vulnerability
Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network...