Hitachi Vantara Pentaho Business Analytics Server 日志信息泄露漏洞

Hitachi Vantara Pentaho Business Analytics Server is a modern data blending, integration, and business analytics platform from Hitachi, Ltd Hitachi, Japan. A security vulnerability exists in Hitachi Vantara Pentaho Business Analytics Server that originates from exposing sensitive data to system...

[SECURITY] Fedora 37 Update: netconsd-0.2-1.fc37

This is a daemon for receiving and processing logs from the Linux Kernel, as emitted over a network by the kernel's netconsole module. It supports both the old "legacy" text-only format, and the new extended format added in v4.4. The core of the daemon does nothing but process messages and drop...

[SECURITY] Fedora 36 Update: netconsd-0.2-1.fc36

This is a daemon for receiving and processing logs from the Linux Kernel, as emitted over a network by the kernel's netconsole module. It supports both the old "legacy" text-only format, and the new extended format added in v4.4. The core of the daemon does nothing but process messages and drop...

Exploit for Untrusted Search Path in Softexpert Excellence_Suite

Remote Code Execution in SoftExpert Excellence Suite 2.0 - CVE...

Apple macOS Ventura 安全漏洞

Apple macOS Ventura is a desktop operating system from Apple Inc. in the United States. A security vulnerability exists in Apple macOS Ventura version 13.0 and earlier versions. An attacker could exploit the vulnerability to collect system logs...

[CGS] Citrix Cloud Workspace launching Desktop via CSG is stuck at "connecting" and failed

Citrix Cloud Workspace launching Desktop/App via CSG Citrix Gateway Service is stuck at "connecting" and failed. In the Netscaler Gateway Service logs, seen in ns.log: Event "Application launch failed. Connect command sent to Controller."...

PT-2023-22034 · Malwarebytes · Malwarebytes Adwcleaner

Name of the Vulnerable Software and Affected Versions: Malwarebytes AdwCleaner version 8.4.0 Description: The issue allows a non-admin user to escalate privileges to SYSTEM via a symbolic link. This is due to an insecure file delete operation performed by Malwarebytes AdwCleaner on a...

GHSA-C4JR-VJM4-27HQ Veracode Scan Jenkins Plugin vulnerable to information disclosure

Veracode Scan Jenkins Plugin before 23.3.19.0 is vulnerable to information disclosure of proxy credentials in job logs under specific configurations. Users are potentially affected if they: - are using Veracode Scan Jenkins Plugin prior to 23.3.19.0 - AND have configured Veracode Scan to run on...

PT-2023-20273 · Veracode · Veracode Scan Jenkins Plugin

Name of the Vulnerable Software and Affected Versions: Veracode Scan Jenkins Plugin versions prior to 23.3.19.0 Description: The issue allows users with access to view the job log to discover proxy credentials under specific configurations. This includes when the "Connect using proxy" option is...

CVE-2023-22300

An unauthenticated remote attacker could force all authenticated users, such as administrative users, to perform unauthorized actions by viewing the logs. This action would also grant the attacker privilege escalation...

CVE-2023-22300

CVE-2023-22300 affects SAUTER EY-modulo 5 Building Automation Stations (EY-AS525F001 with moduWeb). The ICS advisory describes an unauthenticated remote attacker who can force all authenticated users (including admins) to perform unauthorized actions by viewing logs, enabling privilege escalation...

CVE-2022-39043

Juiker app stores debug logs which contains sensitive information to mobile external storage. An unauthenticated physical attacker can access these files to acquire partial user information such as personal contacts...

CVE-2022-39043

Juiker app stores debug logs which contains sensitive information to mobile external storage. An unauthenticated physical attacker can access these files to acquire partial user information such as personal contacts...

Information disclosure

Juiker app stores debug logs which contains sensitive information to mobile external storage. An unauthenticated physical attacker can access these files to acquire partial user information such as personal contacts...

Insecure Session Management

spring-vault-core is vulnerable to Insecure Session Management. The vulnerability exists because the library does not properly hide sensitive information from logs after a revocation failure, which allows an attacker to insert sensitive information into a log file when it attempts to revoke a Vau...

CVE-2022-39043 Juiker app - Information Leakage

Juiker app stores debug logs which contains sensitive information to mobile external storage. An unauthenticated physical attacker can access these files to acquire partial user information such as personal contacts...

PT-2023-13676 · Unknown · Juiker App

Name of the Vulnerable Software and Affected Versions: Juiker app affected versions not specified Description: The issue concerns the storage of debug logs by the Juiker app, which includes sensitive information such as personal contacts, to the mobile device's external storage. This allows an...

CVE-2022-39043 Juiker app - Information Leakage

Juiker app stores debug logs which contains sensitive information to mobile external storage. An unauthenticated physical attacker can access these files to acquire partial user information such as personal contacts...

CVE-2022-39043

Juiker app suffers an information disclosure vulnerability caused by storing debug logs on the mobile device’s external storage. Multiple sources describe that an unauthenticated physical attacker could access these logs and obtain partial user information (e.g., personal contacts). Some reports ...

PT-2023-18410 · Sauter +1 · Ey-As525F001 With Moduweb +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: An unauthenticated remote attacker could force all authenticated users, such as administrative users, to perform unauthorized actions by viewing the log...