Lucene search
K

8606 matches found

NVD
NVD
added 2026/01/17 2:15 a.m.8 views

CVE-2026-0519

In Secure Access 12.70 and prior to 14.20, the logging subsystem may write an unredacted authentication token to logs under certain configurations. Any party with access to those logs could read the token and reuse it to access an integrated system...

4.6CVSS0.0012EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/01/17 1:13 a.m.20 views

CVE-2026-0519 Information Disclosure in Secure Access Between 12.70 and 14.20

In Secure Access 12.70 and prior to 14.20, the logging subsystem may write an unredacted authentication token to logs under certain configurations. Any party with access to those logs could read the token and reuse it to access an integrated system...

4.6CVSS0.0012EPSS
Exploits0References1
CVE
CVE
added 2026/01/17 1:13 a.m.12 views

CVE-2026-0519

CVE-2026-0519 : In Secure Access 12.70 and earlier than 14.20, the logging subsystem may write an unredacted authentication token to logs under certain configurations. This could allow any party with access to those logs to read the token and reuse it to access an integrated system. The provided ...

4.6CVSS6.6AI score0.0012EPSS
Exploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/01/17 1:13 a.m.5 views

CVE-2026-0519

In Secure Access 12.70 and prior to 14.20, the logging subsystem may write an unredacted authentication token to logs under certain configurations. Any party with access to those logs could read the token and reuse it to access an integrated system...

4.6CVSS5.3AI score0.0012EPSS
Exploits0References2Affected Software1
SUSE CVE
SUSE CVE
added 2026/01/17 12:51 a.m.7 views

SUSE CVE-2017-18896

An issue was discovered in Mattermost Server before 4.2.0, 4.1.1, and 4.0.5. It allows attackers to add DEBUG lines to the logs via a REST API version 3 logging endpoint...

5.3CVSS6.9AI score0.00769EPSS
Exploits0References2
OSV
OSV
added 2026/01/16 6:16 p.m.5 views

CVE-2025-43508

A logging issue was addressed with improved data redaction. This issue is fixed in macOS Tahoe 26.1. An app may be able to access sensitive user data...

5.5CVSS5.7AI score0.00147EPSS
Exploits0References1
NVD
NVD
added 2026/01/16 6:16 p.m.9 views

CVE-2025-43508

A logging issue was addressed with improved data redaction. This issue is fixed in macOS Tahoe 26.1. An app may be able to access sensitive user data...

5.5CVSS0.00147EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/01/16 5:6 p.m.19 views

CVE-2025-43508

A logging issue was addressed with improved data redaction. This issue is fixed in macOS Tahoe 26.1. An app may be able to access sensitive user data...

0.00147EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/01/16 5:6 p.m.4 views

CVE-2025-43508

A logging issue was addressed with improved data redaction. This issue is fixed in macOS Tahoe 26.1. An app may be able to access sensitive user data...

5.6AI score0.00147EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/16 5:6 p.m.4 views

CVE-2025-43508

A logging issue was addressed with improved data redaction. This issue is fixed in macOS Tahoe 26.1. An app may be able to access sensitive user data...

5.5CVSS5.4AI score0.00147EPSS
Exploits0References2
CVE
CVE
added 2026/01/16 5:6 p.m.13 views

CVE-2025-43508

CVE-2025-43508 affects macOS Tahoe 26.1 where a logging issue allowed potential access to sensitive user data due to insufficient data redaction. The root cause is improper logging of sensitive information, which has been addressed with improved data redaction. The vulnerability is mitigated by t...

5.5CVSS5.6AI score0.00147EPSS
Exploits0References1Affected Software1
EUVD
EUVD
added 2026/01/16 4:14 p.m.5 views

EUVD-2026-2923

RustFS is a distributed object storage system built in Rust. From = 1.0.0-alpha.1 to 1.0.0-alpha.79, invalid RPC signatures cause the server to log the shared HMAC secret and expected signature, which exposes the secret to log readers and enables forged RPC calls. In...

6.3CVSS6.1AI score0.00472EPSS
Exploits1References5
Github Security Blog
Github Security Blog
added 2026/01/16 3:48 p.m.10 views

RustFS's RPC signature verification logs shared secret

Summary Invalid RPC signatures cause the server to log the shared HMAC secret and expected signature, which exposes the secret to log readers and enables forged RPC calls. Details In crates/ecstore/src/rpc/httpauth.rs:115-122 , the invalid signature branch logs sensitive data: rs if signature !=...

7.5CVSS6.7AI score0.00472EPSS
Exploits1References5Affected Software1
OSV
OSV
added 2026/01/16 11:57 a.m.10 views

OESA-2026-1073 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Fix crash in transport port remove by using iocinfo During mpt3sastransportportremove, messages were logged with devprintk against...

6.5AI score0.00187EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/01/16 12:0 a.m.4 views

PT-2026-3267

A logging issue was addressed with improved data redaction. This issue is fixed in macOS Tahoe 26.1. An app may be able to access sensitive user data...

6AI score0.00147EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:0 a.m.4 views

MiracleLinux 4 : libvirt-0.10.2-18.5.0.1.AXS4 (AXSA:2013-450:06)

The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2013-450:06 advisory. Libvirt is a C toolkit to interact with the virtualization capabilities of recent versions of Linux and other OSes. The main package includes the libvirtd...

5CVSS7AI score0.03513EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:0 a.m.6 views

MiracleLinux 4 : rh-mariadb101-galera-25.3.12-12.AXS4, rh-mariadb101-mariadb-10.1.29-3.AXS4 (AXSA:2018-2644:01)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2018-2644:01 advisory. mysql: insecure error log file handling in mysqldsafe CPU Oct 2016 CVE-2016-5617, CVE-2016-6664 mysql: Server: Optimizer unspecified vulnerability C...

7.7CVSS7AI score0.04945EPSS
Exploits11References27
RedhatCVE
RedhatCVE
added 2026/01/15 6:53 a.m.2 views

CVE-2026-0961

A flaw was found in Wireshark. This vulnerability allows an attacker to trigger a crash in the BLF file parser by providing a specially crafted file. Successful exploitation leads to a denial of service DoS, making the application unavailable to legitimate users. Mitigation To mitigate this issue...

6.5CVSS6.3AI score0.00174EPSS
Exploits1References5
RedhatCVE
RedhatCVE
added 2026/01/15 4:40 a.m.5 views

CVE-2025-68778

A data corruption flaw was found in the Linux kernel's Btrfs filesystem log replay mechanism. When a directory is moved between parent directories in the same transaction and then a file with the same name is created and synced, the log replay can create a directory with two hard links. This caus...

5.5CVSS5.3AI score0.00168EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2026/01/14 10:50 p.m.6 views

CVE-2025-68771

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix kernel BUG in ocfs2findvictimchain syzbot reported a kernel BUG in ocfs2findvictimchain because the clnextfreerec field of the allocation chain list next free slot in the chain list is 0, triggring the...

5.9AI score0.00173EPSS
Exploits0References4
Rows per page
Query Builder