9635 matches found
PT-2024-22767 · Alcatel Lucent · Alcatel-Lucent Ale Noe Deskphones +1
Name of the Vulnerable Software and Affected Versions: Alcatel-Lucent ALE NOE deskphones versions 86x8 NOE-R300.1.40.12.4180 and earlier Alcatel-Lucent ALE SIP deskphones versions 86x8 SIP-R200.1.01.10.728 and earlier Description: An issue was discovered due to improper privilege management,...
Security Bulletin: IBM Watson CP4D Data Stores is vulnerable to ETCD logs Information disclosure vulnerabilitiy.(CVE-2023-40694)
Summary Potential ETCD logs Information disclosure vulnerabilitiy CVE-2023-40694 has been identified that may affect IBM Watson CP4D Data Stores. The vulnerability have been addressed. Refer to details for additional information. Vulnerability Details CVEID:CVE-2023-40694 DESCRIPTION: IBM Watson...
CVE-2023-41818
An improper use of the SD card for sensitive data vulnerability was reported in the Motorola Device Help application that could allow a local attacker to read system logs...
CVE-2023-41818
An improper use of the SD card for sensitive data vulnerability was reported in the Motorola Device Help application that could allow a local attacker to read system logs...
CVE-2023-39460
Triangle MicroWorks SCADA Data Gateway Event Log Directory Traversal Arbitrary File Creation Vulnerability. This vulnerability allows remote attackers to create arbitrary files on affected installations of Triangle MicroWorks SCADA Data Gateway. Although authentication is required to exploit this...
CVE-2023-39461
Triangle MicroWorks SCADA Data Gateway Event Log Improper Output Neutralization For Logs Arbitrary File Write Vulnerability. This vulnerability allows remote attackers to write arbitrary files on affected installations of Triangle MicroWorks SCADA Data Gateway. Although authentication is required...
CVE-2023-39460
Triangle MicroWorks SCADA Data Gateway Event Log Directory Traversal Arbitrary File Creation Vulnerability. This vulnerability allows remote attackers to create arbitrary files on affected installations of Triangle MicroWorks SCADA Data Gateway. Although authentication is required to exploit this...
CVE-2023-39460
CVE-2023-39460 affects Triangle MicroWorks SCADA Data Gateway. The vulnerability lies in event log creation, where a user-supplied path is not properly validated before file operations, enabling directory traversal and arbitrary file creation. The root cause is inadequate validation of the path, ...
Motorola Device Help 安全漏洞
Motorola Device Help is a feature of Motorola USA Inc. It provides a full product lifecycle service experience. A security vulnerability exists in the Motorola Device Help Application, which stems from improper use of sensitive SD card data and could allow a local attacker to read system logs...
PT-2024-12982 · Motorola · Motorola Device Help
Name of the Vulnerable Software and Affected Versions: Motorola Device Help application affected versions not specified Description: An improper use of the SD card for sensitive data could allow a local attacker to read system logs. This issue affects the Motorola Device Help application...
CVE-2024-25047
IBM Cognos Analytics 11.2.0 through 11.2.4 and 12.0.0 through 12.0.2 is vulnerable to injection attacks in application logging by not sanitizing user provided data. This could lead to further attacks against the system. IBM X-Force ID: 282956...
CVE-2024-26169
creationtimestamp| type| source ---|---|--- 2024-05-02 02:23:04+00:00| seen| Telegram/yoNNgIU2JU4zwFL5vXqVgP00V9P0beeHjRLaro8CHcaWRn8 2024-05-02 02:23:05+00:00| seen| Telegram/E3iST3lZwZOutaoSgFfuoZ6eFjpwUIDeSKbyxLV2xONR5Q 2024-05-02 02:23:05+00:00| seen|...
UBUNTU-CVE-2024-26983
In the Linux kernel, the following vulnerability has been resolved: bootconfig: use memblockfreelate to free xbc memory to buddy On the time to free xbc memory in xbcexit, memblock may has handed over memory to buddy allocator. So it doesn't make sense to free memory back to memblock. memblockfre...
Linux kernel 安全漏洞
Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. A security vulnerability exists in the Linux kernel, which stems from a failure to write-protect the TDP MMU SPTE will result in writes performed by L2 not being reflected in dirty logs...
CVE-2024-2877
Summary: CVE-2024-2877 affects Vault Enterprise when configured with performance standby nodes and a configured audit device, causing inadvertent logging of HTTP request headers on the standby node in cleartext. Affected component: Vault Enterprise (standby/log audit path). Root cause / impact: S...
Vault Enterprise Leaks Sensitive HTTP Request Headers in Audit Log When Deployed With a Performance Standby Node
Summary Vault Enterprise, when configured with both performance standby nodes and an audit device, will inadvertently log request headers on the standby node. These logs may have included sensitive HTTP request header information in cleartext. This vulnerability, CVE-2024-2877, was fixed in Vault...
SUSE CVE-2023-52723
In KDE libksieve before 23.03.80, kmanagesieve/session.cpp places a cleartext password in server logs because a username variable is accidentally given a password value...
MAL-2024-1329 Malicious code in discords-logs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6c1b92f0e953b444061efac030e0d56d873e9e8bbe7e9b9557db0aeda361092e The OpenSSF Package Analysis project identified 'discords-logs' @ 1.2.6 npm as malicious. It is considered malicious because: - The package...
Malicious code in discords-logs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6c1b92f0e953b444061efac030e0d56d873e9e8bbe7e9b9557db0aeda361092e The OpenSSF Package Analysis project identified 'discords-logs' @ 1.2.6 npm as malicious. It is considered malicious because: - The package...