Lucene search
+L

301 matches found

Vulnrichment
Vulnrichment
•added 2024/11/29 12:00 a.m.•16 views

CVE-2024-35371

Ant-Media-Serverv2.8.2 is affected by Improper Output Neutralization for Logs. The vulnerability stems from insufficient input sanitization in the logging mechanism. Without proper filtering or validation, user-controllable data, such as identifiers or other sensitive information, can be included...

6.8AI score0.00544EPSS
SaveExploits0References3
CVE
CVE
•added 2024/11/29 12:00 a.m.•81 views

CVE-2024-35371

Ant-Media-Server version v2.8.2 is vulnerable to Improper Output Neutralization for Logs due to insufficient input sanitization within the logging mechanism. The flaw allows user-controllable data, including identifiers or other sensitive information, to be included in log entries without proper ...

7.5CVSS6.9AI score0.00544EPSS
SaveExploits0References3
Mend
Mend
•added 2024/11/29 12:00 a.m.•9 views

CVE-2024-35371

Ant-Media-Serverv2.8.2 is affected by Improper Output Neutralization for Logs. The vulnerability stems from insufficient input sanitization in the logging mechanism. Without proper filtering or validation, user-controllable data, such as identifiers or other sensitive information, can be included...

8.7CVSS0.00544EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/29 12:00 a.m.•7 views

CVE-2024-35371: Out-of-bounds Read

Ant-Media-Serverv2.8.2 is affected by Improper Output Neutralization for Logs. The vulnerability stems from insufficient input sanitization in the logging mechanism. Without proper filtering or validation, user-controllable data, such as identifiers or other sensitive information, can be included...

7.5CVSS5.9AI score0.00544EPSS
SaveExploits0References1
OSV
OSV
•added 2024/11/29 12:00 a.m.•22 views

CVE-2024-35371

Ant-Media-Serverv2.8.2 is affected by Improper Output Neutralization for Logs. The vulnerability stems from insufficient input sanitization in the logging mechanism. Without proper filtering or validation, user-controllable data, such as identifiers or other sensitive information, can be included...

7.5CVSS6.7AI score
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2024/11/18 12:00 a.m.•22 views

Siemens SCALANCE M-800 Improper Output Neutralization For Logs (CVE-2024-5594)

control channel: refuse control channel messages with nonprintable characters in them. Security scope: a malicious openvpn peer can send garbage to openvpn log, or cause high CPU load This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...

9.1CVSS7.7AI score0.00817EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/25 12:00 a.m.•7 views

CVE-2024-47083: Improper Output Neutralization for Logs

Power Platform Terraform Provider allows managing environments and other resources within Power Platform. Versions prior to 3.0.0 have an issue in the Power Platform Terraform Provider where sensitive information, specifically the clientsecret used in the service principal authentication, may be...

8.8CVSS5.7AI score0.01554EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/20 12:00 a.m.•4 views

CVE-2024-45808: Improper Output Neutralization for Logs

Envoy is a cloud-native high-performance edge/middle/service proxy. A vulnerability has been identified in Envoy that allows malicious attackers to inject unexpected content into access logs. This is achieved by exploiting the lack of validation for the REQUESTEDSERVERNAME field for access logger...

6.5CVSS6.3AI score0.00351EPSS
SaveExploits0References1
NVD
NVD
•added 2024/08/30 1:15 p.m.•28 views

CVE-2024-8334

A vulnerability was found in master-nan Sweet-CMS up to 5f441e022b8876f07cde709c77b5be6d2f262e3f. It has been rated as problematic. This issue affects the function LogHandler of the file middleware/log.go. The manipulation leads to improper output neutralization for logs. The attack may be...

8.1CVSS0.00478EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2024/08/30 12:31 p.m.•23 views

CVE-2024-8334 master-nan Sweet-CMS log.go LogHandler neutralization for logs

A vulnerability was found in master-nan Sweet-CMS up to 5f441e022b8876f07cde709c77b5be6d2f262e3f. It has been rated as problematic. This issue affects the function LogHandler of the file middleware/log.go. The manipulation leads to improper output neutralization for logs. The attack may be...

5.3CVSS7AI score0.00478EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2024/08/30 12:31 p.m.•55 views

CVE-2024-8334 master-nan Sweet-CMS log.go LogHandler neutralization for logs

A vulnerability was found in master-nan Sweet-CMS up to 5f441e022b8876f07cde709c77b5be6d2f262e3f. It has been rated as problematic. This issue affects the function LogHandler of the file middleware/log.go. The manipulation leads to improper output neutralization for logs. The attack may be...

5.3CVSS0.00478EPSS
SaveExploits0References6
Mend
Mend
•added 2024/08/30 12:31 p.m.•3 views

CVE-2024-8334

A vulnerability was found in master-nan Sweet-CMS up to 5f441e022b8876f07cde709c77b5be6d2f262e3f. It has been rated as problematic. This issue affects the function LogHandler of the file middleware/log.go. The manipulation leads to improper output neutralization for logs. The attack may be...

8.1CVSS0.00478EPSS
SaveExploits0References8
CVE
CVE
•added 2024/08/30 12:31 p.m.•72 views

CVE-2024-8334

The CVE-2024-8334 entry affects master-nan Sweet-CMS, specifically the LogHandler function in middleware/log.go. The root cause is improper output neutralization for logs, enabling a potential remote abuse. The issue is tied to a patch identified as 2024c370e6c78b07b358c9d4257fa5d1be732c38; apply...

8.1CVSS5.8AI score0.00478EPSS
SaveExploits0References6Affected Software1
Positive Technologies
Positive Technologies
•added 2024/08/30 12:00 a.m.•22 views

PT-2024-38949 · Unknown · Master-Nan Sweet-Cms

Name of the Vulnerable Software and Affected Versions: master-nan Sweet-CMS up to 5f441e022b8876f07cde709c77b5be6d2f262e3f Description: A vulnerability was found in master-nan Sweet-CMS, affecting the function LogHandler of the file middleware/log.go. The manipulation leads to improper output...

8.1CVSS5.1AI score0.00478EPSS
SaveExploits0References14
OSV
OSV
•added 2024/08/29 12:31 p.m.•27 views

CVE-2024-8297 kitsada8621 Digital Library Management System jwt_refresh_token_middleware.go JwtRefreshAuth neutralization for logs

A vulnerability was found in kitsada8621 Digital Library Management System 1.0. It has been classified as problematic. Affected is the function JwtRefreshAuth of the file middleware/jwtrefreshtokenmiddleware.go. The manipulation of the argument Authorization leads to improper output neutralizatio...

6.9CVSS5.2AI score
SaveExploits0References7
Vulnrichment
Vulnrichment
•added 2024/08/29 12:31 p.m.•19 views

CVE-2024-8297 kitsada8621 Digital Library Management System jwt_refresh_token_middleware.go JwtRefreshAuth neutralization for logs

A vulnerability was found in kitsada8621 Digital Library Management System 1.0. It has been classified as problematic. Affected is the function JwtRefreshAuth of the file middleware/jwtrefreshtokenmiddleware.go. The manipulation of the argument Authorization leads to improper output neutralizatio...

6.9CVSS5.5AI score0.00534EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/29 12:00 a.m.•8 views

CVE-2024-8297: Improper Output Neutralization for Logs

A vulnerability was found in kitsada8621 Digital Library Management System 1.0. It has been classified as problematic. Affected is the function JwtRefreshAuth of the file middleware/jwtrefreshtokenmiddleware.go. The manipulation of the argument Authorization leads to improper output neutralizatio...

7.5CVSS5.3AI score0.00534EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
•added 2024/08/05 10:01 p.m.•37 views

Security Bulletin: IBM Storage Ceph is vulnerable to Improper Output Neutralization for Logs in the RHEL UBI (CVE-2023-28486)

Summary RHEL UBI is used by IBM Storage Ceph as the base operating system. This bulletin identifies the steps to take to address the vulnerability in the RHEL UBI. CVE-2023-28486. Vulnerability Details CVEID:CVE-2023-28486 DESCRIPTION: Sudo Project Sudo could allow a remote attacker to obtain...

5.3CVSS5.4AI score0.00915EPSS
SaveExploits0Affected Software1
NVD
NVD
•added 2024/07/11 3:15 a.m.•40 views

CVE-2024-23194

Improper output Neutralization for Logs CWE-117 in the Command Centre API Diagnostics Endpoint could allow an attacker limited ability to modify Command Centre log files. This issue affects: Gallagher Command Centre v9.10 prior to vEL9.10.1268 MR1...

3.3CVSS0.00148EPSS
SaveExploits0References1
CVE
CVE
•added 2024/07/11 2:39 a.m.•121 views

CVE-2024-23194

CVE-2024-23194 describes an improper output neutralization for logs (CWE-117) in the Gallagher Command Centre API Diagnostics Endpoint. The issue affects Gallagher Command Centre v9.10 prior to vEL9.10.1268 (MR1). The NVD/NVD-derived data show a local attacker with low privileges and no user inte...

3.3CVSS4.1AI score0.00148EPSS
SaveExploits0References1
Rows per page
Query Builder