189 matches found
PYSEC-2021-125
A flaw was found in Ansible where the secret information present in asyncfiles are getting disclosed when the user changes the jobdir to a world readable directory. Any secret information in an async status file will be readable by a malicious user on that system. This flaw affects Ansible Tower...
CVE-2020-26226 Secret disclosure in semantic-release
In the npm package semantic-release before version 17.2.3, secrets that would normally be masked by semantic-release can be accidentally disclosed if they contain characters that become encoded when included in a URL. Secrets that do not contain characters that become encoded when included in a U...
GHSA-R2J6-P67H-Q639 Secret disclosure when containing characters that become URI encoded
Impact Secrets that would normally be masked by semantic-release can be accidentally disclosed if they contain characters that become encoded when included in a URL. Patches Fixed in v17.2.3 Workarounds Secrets that do not contain characters that become encoded when included in a URL are already...
UBUNTU-CVE-2020-10187
Doorkeeper version 5.0.0 and later contains an information disclosure vulnerability that allows an attacker to retrieve the client secret only intended for the OAuth application owner. After authorizing the application and allowing access, the attacker simply needs to request the list of their...
Design/Logic Flaw
A RADIUS Secret Disclosure vulnerability in the web network management interface of Cisco Prime Optical for Service Providers could allow an authenticated, remote attacker to disclose sensitive information in the configuration generated for a device. The attacker must have valid credentials for t...
CVE-2017-3871
CVE-2017-3871 affects Cisco Prime Optical for Service Providers. A RADIUS Secret Disclosure vulnerability exists in the web network management interface that could allow an authenticated, remote attacker to disclose sensitive information in the configuration generated for a device. The attacker m...
Debian: Security Advisory (DSA-3404-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Canon Printer DoS / Secret Disclosure
The below 3 issues have been tested and verified working on the following Canon Printer models May affect more, but this is all I was able to test against: MG3100, MG5300, MG6100, MP495, MX340, MX870, MX890, MX920 1 CVE-2013-4613: Canon printers do not require a password for the administrative...
