9174 matches found
CVE-2021-22115
Cloud Controller API versions prior to 1.106.0 logs service broker credentials if the default value of db logging config field is changed. CAPI database logs service broker password in plain text whenever a job to clean up orphaned items is run by Cloud Controller...
CVE-2021-22115
CVE-2021-22115 affects Cloud Foundry Cloud Controller API prior to version 1.106.0. The vulnerability arises because the CAPI database logs service broker passwords in plain text when a job to clean up orphaned items runs, exposing credentials if log access is compromised. Affected product/versio...
Cross site scripting
The Squirro Insights Engine was affected by a Reflected Cross-Site Scripting XSS vulnerability affecting versions 2.0.0 up to and including 3.2.4. An attacker can use the vulnerability to inject malicious JavaScript code into the application, which will execute within the browser of any user who...
CVE-2021-27945
The Squirro Insights Engine was affected by a Reflected Cross-Site Scripting XSS vulnerability affecting versions 2.0.0 up to and including 3.2.4. An attacker can use the vulnerability to inject malicious JavaScript code into the application, which will execute within the browser of any user who...
Squirro Insights Engine 跨站脚本漏洞
Squirro Insights Engine is an application from the Swiss company Squirro. Provides the most relevant data directly or through the workbench to integrate sources and display insights in their context. Squirro Insights Engine suffers from a security vulnerability that can be exploited by an attacke...
CVE-2021-29671
IBM Spectrum Scale 5.1.0.1 could allow a local attacker to bypass the filesystem audit logging mechanism when file audit logging is enabled. IBM X-Force ID: 199478...
Cloud Foundry Cloud Controller 安全漏洞
The Cloud Foundry Cloud Controller is a component of the Cloud Foundry Foundation that is responsible for interacting with users in the Cloud Foundry architecture. This component manages the entire lifecycle of an app and allows users to interact with Cloud Server from the command line. A securit...
GHSA-XW22-WV29-3299 ApiKey secret could be revelated on network issue
Impact What kind of vulnerability is it? Who is impacted? Applications that are using node-etsy-client and reporting client error to the end user will offer api key value too Patches Has the problem been patched? What versions should users upgrade to? creharmony/node-etsy-client18 fixes this issu...
CVE-2020-11923
An issue was discovered in WiZ Colors A60 1.14.0. API credentials are locally logged...
CVE-2020-11923
Product/Version affected: WiZ Colors A60 1.14.0. Vulnerability: API credentials are logged locally, which can expose sensitive information. Root cause (as stated): Credentials end up in local logs. Impact (as stated): Potential exposure of API credentials due to local logging (no details on explo...
CVE-2021-3447
A flaw was found in several ansible modules, where parameters containing credentials, such as secrets, were being logged in plain-text on managed nodes, as well as being made visible on the controller node when run in verbose mode. These parameters were not protected by the nolog feature. An...
UBUNTU-CVE-2021-3447
A flaw was found in several ansible modules, where parameters containing credentials, such as secrets, were being logged in plain-text on managed nodes, as well as being made visible on the controller node when run in verbose mode. These parameters were not protected by the nolog feature. An...
Citrix Receiver for iOS common settings reference
This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. There are many differences when it comes to configuring the Citrix receiver for Windows and the Citr...
CVE-2021-3447
CVE-2021-3447 describes a vulnerability in several ansible modules where credentials and secrets logged in plain text on managed nodes or controller when verbose mode is used, not protected by no_log. Affected: Red Hat Ansible Automation Platform <1.2.2; Ansible Tower
SUSE-SU-2021:0989-1 Security update for tomcat
This update for tomcat fixes the following issues: - Fixed CVEs: CVE-2021-25122: Apache Tomcat h2c request mix-up bsc1182912 CVE-2021-25329: Complete fix for CVE-2020-9484 bsc1182909 - Log if file access is blocked due to symlinks: CVE-2021-24122 bsc1180947...
U.S. Dept Of Defense: Elmah.axd is publicly accessible leaking Error Log
Summary ELMAH Error Logging Modules and Handlers is an application-wide error logging facility that is completely pluggable. If ELMAH is not properly configured, the elmah.axd handler can be accessed without authorization. This page will list all the error messages generated by the web applicatio...
The vulnerability of the information protection system against unauthorized access in Dallas Lock, related to security errors, allows a malicious individual to print text files without saving information about the printing events.
The vulnerability of the Dallas Lock information protection system against unauthorized access is related to security-related errors. Exploiting this vulnerability allows a malicious actor to print text files without storing information about the printing events...
Moderate: Red Hat Security Advisory: pki-core and redhat-pki-theme security and bug fix update
An update for pki-core and redhat-pki-theme is now available for Red Hat Certificate System 9.7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
CVE-2021-28667
StackStorm before 3.4.1, in some situations, has an infinite loop that consumes all available memory and disk space. This can occur if Python 3.x is used, the locale is not utf-8, and there is an attempt to log Unicode data from an action or rule name...