CVE-2021-43584

DOM-based Cross Site Scripting XSS vulnerability in 'Tail Event Logs' functionality in Nagios Nagios Cross-Platform Agent NCPA before 2.4.0 allows attackers to run arbitrary code via the name element when filtering for a log...

PT-2024-11029 · Nagios · Nagios Cross-Platform Agent

Name of the Vulnerable Software and Affected Versions: Nagios Nagios Cross-Platform Agent NCPA versions prior to 2.4.0 Description: The issue is related to a DOM-based Cross Site Scripting XSS vulnerability in the 'Tail Event Logs' functionality. This vulnerability allows attackers to run arbitra...

CVE-2024-23210

This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 17.3 and iPadOS 17.3, macOS Sonoma 14.3, tvOS 17.3, watchOS 10.3. An app may be able to view a user's phone number in system logs...

CVE-2024-23210

This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Sonoma 14.3, watchOS 10.3, tvOS 17.3, iOS 17.3 and iPadOS 17.3. An app may be able to view a user's phone number in system logs...

Information disclosure

This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Sonoma 14.3, watchOS 10.3, tvOS 17.3, iOS 17.3 and iPadOS 17.3. An app may be able to view a user's phone number in system logs...

CVE-2024-23210

This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 17.3 and iPadOS 17.3, macOS Sonoma 14.3, tvOS 17.3, watchOS 10.3. An app may be able to view a user's phone number in system logs...

CVE-2024-23210

CVE-2024-23210 affects Apple platforms (macOS Sonoma 14.3, iOS/iPadOS 17.3, watchOS 10.3, tvOS 17.3). The issue, resolved by improved redaction of sensitive information, could allow an app to view a user’s phone number in system logs. Root cause details are not explicitly disclosed in the provide...

CVE-2024-23677

In Splunk Enterprise versions below 9.0.8, the Splunk RapidDiag utility discloses server responses from external applications in a log file...

Exploit for Heap-based Buffer Overflow in Gnu Glibc

GNU C Library's Dynamic Loader Vulnerability CVE-2023-4911...

GHSA-3P77-WG4C-QM24 Duplicate Advisory: Exposure of sensitive information in ClickHouse

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-g8ph-74m6-8m7r. This link is maintained to preserve external references. Original Description Exposure of sensitive information in exceptions in ClickHouse's clickhouse-r2dbc, com.clickhouse:clickhouse-jdbc, and...

Code injection

Exposure of sensitive information in exceptions in ClichHouse's clickhouse-r2dbc, com.clickhouse:clickhouse-jdbc, and com.clickhouse:clickhouse-client versions less than 0.4.6 allows unauthorized users to gain access to client certificate passwords via client exception logs. This occurs when...

CVE-2024-23689

Summary: CVE-2024-23689 affects ClickHouse Java libraries (clickhouse-r2dbc, com.clickhouse:clickhouse-jdbc, com.clickhouse:clickhouse-client) with versions

CVE-2024-23689 ClickHouse Client Certificate Password Exposure

Exposure of sensitive information in exceptions in ClichHouse's clickhouse-r2dbc, com.clickhouse:clickhouse-jdbc, and com.clickhouse:clickhouse-client versions less than 0.4.6 allows unauthorized users to gain access to client certificate passwords via client exception logs. This occurs when...

ClickHouse Security Breach

ClickHouse is ClickHouse's fastest and most resource efficient open source database for real-time applications and analytics. A security vulnerability exists in ClickHouse. An attacker exploited the vulnerability to gain access to client certificate passwords via client-side exception logs...

OpenJDK: logging of digital signature private keys (8316976)

Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks o...

TensorFlow CI/CD Flaw Exposed Supply Chain to Poisoning Attacks

Continuous integration and continuous delivery CI/CD misconfigurations discovered in the open-source TensorFlow machine learning framework could have been exploited to orchestrate supply chain attacks. The misconfigurations could be abused by an attacker to "conduct a supply chain compromise of...

CVE-2023-52068

kodbox v1.43 was discovered to contain a cross-site scripting XSS vulnerability via the operation and login logs...

CVE-2023-52068

kodbox v1.43 was discovered to contain a cross-site scripting XSS vulnerability via the operation and login logs...

Cross site scripting

kodbox v1.43 was discovered to contain a cross-site scripting XSS vulnerability via the operation and login logs...

CVE-2023-7234 Integration Objects OPC UA Server Toolkit Improper Output Neutralization for Logs

OPCUAServerToolkit will write a log message once an OPC UA client has successfully connected containing the client's self-defined description field...