414 matches found
PT-2022-23681 · Samsung · Samsung Members
Name of the Vulnerable Software and Affected Versions: Samsung Members versions prior to 4.3.00.11 Samsung Members version prior to 14.0.02.4 in China Description: The issue allows local attackers to access device identification via log, due to exposure of sensitive information in...
Elastic Cloud Enterprise 3.4.0 Security Update
Elastic Cloud Enterprise Sensitive information disclosure issue ESA-2022-10 A flaw was discovered in ECE before 3.4.0 that might lead to the disclosure of sensitive information such as user passwords and Elasticsearch keystore settings values in logs such as the audit log or deployment logs in th...
CVE-2022-33724
Exposure of Sensitive Information in Samsung Dialer application?prior to SMR Aug-2022 Release 1 allows local attackers to access ICCID via log...
SAMSUNG Mobile devices 安全漏洞
SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from South Korea's Samsung SAMSUNG. SAMSUNG Mobile devices A security vulnerability exists in versions prior to Samsung Dialer SMR Aug-2022 Release 1, which stems from the presence of secretly...
WordPress plugin YaySMTP 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
CVE-2022-34826
In Couchbase Server 7.1.x before 7.1.1, an encrypted Private Key passphrase may be leaked in the logs...
CVE-2022-33686
Exposure of Sensitive Information in GsmAlarmManager prior to SMR Jul-2022 Release 1 allows local attacker to access iccid via log...
CVE-2022-33692
Exposure of Sensitive Information in Messaging application prior to SMR Jul-2022 Release 1 allows local attacker to access imsi and iccid via log...
CVE-2022-33687
Exposure of Sensitive Information in telephony-common.jar prior to SMR Jul-2022 Release 1 allows local attackers to access IMSI via log...
CVE-2022-33700
Exposure of Sensitive Information in putDsaSimImsi in TelephonyUI prior to SMR Jul-2022 Release 1 allows local attacker to access imsi via log...
SAMSUNG Mobile devices CID Manager 日志信息泄露漏洞
SAMSUNG Mobile devices are a range of Samsung mobile devices from the South Korean company Samsung SAMSUNG, including cell phones, tablets, and more. An information disclosure vulnerability exists in SAMSUNG Mobile devices CID Manager, which originates from exposing sensitive information during...
SAMSUNG Mobile devices telephony-common.jar 日志信息泄露漏洞
Samsung telephony-common.jar is a Telephony service for Samsung mobile devices that provides support for the Telephony Application Programming Interface TAPI. A local attacker with log access could exploit the vulnerability to obtain IMSI through device logs...
SAMSUNG Mobile devices Telephony service 安全漏洞
Samsung Telephony service is a Telephony service for Samsung mobile devices that provides support for the Telephony Application Programming Interface TAPI.An information disclosure vulnerability exists in Samsung Telephony service, which stems from the Telephony service performing messaging to...
SAMSUNG Mobile devices Messaging 安全漏洞
Samsung Message App is a messaging feature for Samsung SAMSUNG mobile devices.Samsung Message App is vulnerable to an information disclosure vulnerability that stems from exposing sensitive information when the application is messaging. An attacker could exploit the vulnerability to access IMSI a...
PT-2022-20525 · Weave · Weave Gitops
Name of the Vulnerable Software and Affected Versions: Weave GitOps versions prior to v0.8.1-rc.6 Description: A vulnerability in the logging of Weave GitOps could allow an authenticated remote attacker to view sensitive cluster configurations, aka KubeConfg, of registered Kubernetes clusters,...
CVE-2022-24414
Dell EMC CloudLink 7.1.3 and all earlier versions, Auth Token is exposed in GET requests. These request parameters can get logged in reverse proxies and server logs. Attackers may potentially use these tokens to access CloudLink server. Tokens should not be used in request URL to avoid such attac...
CVE-2021-39020
IBM Guardium Data Encryption GDE 4.0.0.7 and lower stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 213855...
UBUNTU-CVE-2021-20180
A flaw was found in ansible module where credentials are disclosed in the console log by default and not protected by the security feature when using the bitbucketpipelinevariable module. This flaw allows an attacker to steal bitbucketpipeline credentials. The highest threat from this vulnerabili...