9635 matches found
GO-2024-2978 Private tokens could appear in logs if context containing gRPC metadata is logged in google.golang.org/grpc
If applications print or log a context containing gRPC metadata, the output will contain all the metadata, which may include private information. This represents a potential PII concern...
Fortinet FortiAIOps 日志信息泄露漏洞
Fortinet FortiAIOps is a Fortinet networking solution that combines artificial intelligence and machine learning AI/ML from Fortinet. A log information disclosure vulnerability exists in Fortinet FortiAIOps version 2.0.0, which stems from an application that does not adequately protect sensitive...
Dark Web Malware Logs Expose 3,300 Users Linked to Child Abuse Sites
An analysis of information-stealing malware logs published on the dark web has led to the discovery of thousands of consumers of child sexual abuse material CSAM, indicating how such information could be used to combat serious crimes. "Approximately 3,300 unique users were found with accounts on...
GHSA-XR7Q-JX4M-X55M Private tokens could appear in logs if context containing gRPC metadata is logged in github.com/grpc/grpc-go
Impact This issue represents a potential PII concern. If applications were printing or logging a context containing gRPC metadata, the affected versions will contain all the metadata, which may include private information. Patches The issue first appeared in 1.64.0 and is patched in 1.64.1 and...
Private tokens could appear in logs if context containing gRPC metadata is logged in github.com/grpc/grpc-go
Impact This issue represents a potential PII concern. If applications were printing or logging a context containing gRPC metadata, the affected versions will contain all the metadata, which may include private information. Patches The issue first appeared in 1.64.0 and is patched in 1.64.1 and...
PT-2024-10116
Name of the Vulnerable Software and Affected Versions NetworkManager affected versions not specified Description A flaw was found in NetworkManager, allowing a malicious user to inject a malformed LLDP packet when the system is running NetworkManager with DEBUG logs enabled and an interface...
PT-2024-28468 · Mattermost · Mattermost
Name of the Vulnerable Software and Affected Versions: Mattermost versions 9.5.x through 9.5.5 Mattermost version 9.8.0 Description: The issue allows a high-privileged attacker with access to the audit logs to read message contents due to the failure to sanitize the RemoteClusterFrame payloads...
CVE-2022-25477
Vulnerability in Realtek RtsPer driver for PCIe Card Reader RtsPer.sys before 10.0.22000.21355 and Realtek RtsUer driver for USB Card Reader RtsUer.sys before 10.0.22000.31274 leaks driver logs that contain addresses of kernel mode objects, weakening KASLR...
CVE-2022-25477
Vulnerability in Realtek RtsPer driver for PCIe Card Reader RtsPer.sys before 10.0.22000.21355 and Realtek RtsUer driver for USB Card Reader RtsUer.sys before 10.0.22000.31274 leaks driver logs that contain addresses of kernel mode objects, weakening KASLR...
CVE-2024-32757
Under certain circumstances unnecessary user details are provided within system logs...
CVE-2024-32757 American Dynamics Illustra Essentials Gen 4 - Linux Credential Leak
Under certain circumstances unnecessary user details are provided within system logs...
CVE-2024-32757
CVE-2024-32757 affects Johnson Controls Illustra Essentials Gen 4. The issue is insertion of sensitive information into system logs, potentially exposing Linux user credentials. Affected version: Illustra.Ess4.01.02.10.5982 and prior. CVSS v3.1 base score 6.8 (AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N)...
Realtek RtsPer driver for PCIe Card Reader and Realtek RtsUer driver for USB Card Reader Security Vulnerabilities
Realtek RtsPer driver for PCIe Card Reader and Realtek RtsUer driver for USB Card Reader are both a card reader driver from Realtek Semiconductor Realtek of China. A security vulnerability exists in Realtek RtsPer driver for PCIe Card Reader and Realtek RtsUer driver for USB Card Reader. An...
CVE-2022-25477
The CVE-2022-25477 issue affects Realtek RtsPer.sys (PCIe Card Reader) and Realtek RtsUer.sys (USB Card Reader). Affected versions are RtsPer before 10.0.22000.21355 and RtsUer before 10.0.22000.31274. The vulnerability leaks driver logs that contain addresses of kernel-mode objects, weakening KA...
CVE-2022-25477
Vulnerability in Realtek RtsPer driver for PCIe Card Reader RtsPer.sys before 10.0.22000.21355 and Realtek RtsUer driver for USB Card Reader RtsUer.sys before 10.0.22000.31274 leaks driver logs that contain addresses of kernel mode objects, weakening KASLR...
PT-2024-24830 · Johnson Controls · American Dynamics Illustra Essentials Gen 4 +1
Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned Description: The issue involves unnecessary user details being provided within system logs under certain circumstances. Recommendations: At the moment, there is no information about a newer version...
Johnson Controls Illustra Essentials Gen 4 Security Vulnerability
Johnson Controls Illustra Essentials Gen 4 is a bullet camera from Johnson Controls USA. A security vulnerability exists in Johnson Controls Illustra Essentials Gen 4 Illustra.Ess4.01.02.10.5982 and prior versions, which stems from unnecessary user details being provided in the system log...
SSSD: Command Injection
Background SSSD provides a set of daemons to manage access to remote directories and authentication mechanisms such as LDAP, Kerberos or FreeIPA. It provides an NSS and PAM interface toward the system and a pluggable backend system to connect to multiple different account sources. Description A...
GO-2024-2434 CubeFS leaks users key in logs in github.com/cubefs/cubefs
CubeFS leaks users key in logs in github.com/cubefs/cubefs. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from vulnerability scanners, please suggest an edit t...