Lucene search
+L

480 matches found

OSV
OSV
added 2022/03/10 5:44 p.m.12 views

UBUNTU-CVE-2022-0725

A flaw was found in keepass. The vulnerability occurs due to logging the plain text passwords in system log and leads to an Information Exposure vulnerability. This flaw allows an attacker to interact and read sensitive passwords and logs...

7.5CVSS7AI score0.02451EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2022/03/10 12:00 a.m.13 views

KeePass 日志信息泄露漏洞

KeePass is an open source password manager. KeePass suffers from a log information disclosure vulnerability that occurs due to recording plain text passwords in system logs and results in an information exposure vulnerability. This vulnerability allows an attacker to interact and read sensitive...

7.5CVSS7.3AI score0.02451EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2022/03/07 12:00 a.m.19 views

PT-2022-13391 · Keepass · Keepass

Name of the Vulnerable Software and Affected Versions: KeePass affected versions not specified Description: A flaw in KeePass leads to an Information Exposure issue due to the logging of plain text passwords in the system log. This allows an attacker to interact with and read sensitive passwords...

7.5CVSS7.2AI score0.02451EPSS
SaveExploits1References9
OSV
OSV
added 2021/11/23 5:59 p.m.19 views

GHSA-2XWQ-H7R9-6W27 Cross-site Scripting in kimai2

Cross site request forgery vulnerability is present in delete functionality of doctor feature. This vulnerability is capable of deleting system logs...

4.6CVSS4.5AI score0.00371EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
added 2021/11/23 5:59 p.m.51 views

Cross-site Scripting in kimai2

Cross site request forgery vulnerability is present in delete functionality of doctor feature. This vulnerability is capable of deleting system logs...

4.6CVSS5.2AI score0.00371EPSS
SaveExploits1References4Affected Software1
CNNVD
CNNVD
added 2021/11/15 12:00 a.m.9 views

IBM Spectrum Scale 安全漏洞

IBM Spectrum Scale is a scalable data and file management solution from IBM USA based on IBM GPFS, an enterprise file management system optimized for petabyte-scale storage management. The product supports helping clients reduce storage costs while improving security and management efficiency in...

4.4CVSS5.6AI score0.00227EPSS
SaveExploits0References4
CNVD
CNVD
added 2021/10/14 12:00 a.m.28 views

Draytek VigorConnect Information Disclosure Vulnerability

VigorConnect is the local network management software for DrayTek devices.An information disclosure vulnerability exists in Draytek VigorConnect version 1.6.0-B3. An attacker could exploit this vulnerability to export system logs...

5CVSS3AI score0.01698EPSS
SaveExploits1
NVD
NVD
added 2021/10/13 4:15 p.m.30 views

CVE-2021-20129

An information disclosure vulnerability exists in Draytek VigorConnect 1.6.0-B3, allowing an unauthenticated attacker to export system logs...

7.5CVSS0.01698EPSS
SaveExploits1References1
OSV
OSV
added 2021/10/13 4:15 p.m.14 views

CVE-2021-20129

An information disclosure vulnerability exists in Draytek VigorConnect 1.6.0-B3, allowing an unauthenticated attacker to export system logs...

7.5CVSS5.8AI score0.01698EPSS
SaveExploits1References1
Prion
Prion
added 2021/10/13 4:15 p.m.27 views

Information disclosure

An information disclosure vulnerability exists in Draytek VigorConnect 1.6.0-B3, allowing an unauthenticated attacker to export system logs...

5CVSS7.2AI score0.01698EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2021/10/13 3:49 p.m.37 views

CVE-2021-20129

An information disclosure vulnerability exists in Draytek VigorConnect 1.6.0-B3, allowing an unauthenticated attacker to export system logs...

7.4AI score0.01698EPSS
SaveExploits1References1
CVE
CVE
added 2021/10/13 3:49 p.m.57 views

CVE-2021-20129

CVE-2021-20129 affects Draytek VigorConnect 1.6.0-B3. An unauthenticated attacker can export system logs via network exposure (information disclosure). Other connected sources also describe a local file inclusion risk in related endpoints (WebServlet/DownloadFileServlet) on the same version, enab...

7.5CVSS7.2AI score0.01698EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2021/10/13 12:00 a.m.15 views

Draytek VigorConnect 日志信息泄露漏洞

VigorConnect is the local network management software for DrayTek devices.An information disclosure vulnerability exists in Draytek VigorConnect version 1.6.0-B3. An attacker could exploit this vulnerability to export system logs...

7.5CVSS5.6AI score0.01698EPSS
SaveExploits1References2
Prion
Prion
added 2021/08/15 6:15 p.m.15 views

Cross site scripting

TastyIgniter 3.0.7 allows XSS via /account, /reservation, /admin/dashboard, and /admin/systemlogs...

3.5CVSS5.2AI score0.07977EPSS
SaveExploits5References6Affected Software1
Cvelist
Cvelist
added 2021/08/15 5:32 p.m.42 views

CVE-2021-38699

TastyIgniter 3.0.7 allows XSS via /account, /reservation, /admin/dashboard, and /admin/systemlogs...

5.5AI score0.07977EPSS
SaveExploits5References6
CNNVD
CNNVD
added 2021/08/15 12:00 a.m.21 views

Tastylgniter 跨站脚本漏洞

TastyIgniter is a free open source restaurant online ordering system based on Laravel PHP Framework. A cross-site scripting vulnerability exists in Tastylgniter 3.0.7, which originates from the lack of validation of user-submitted data in the /account, /reservation, /admin/dashboard, and...

5.4CVSS5.7AI score0.07977EPSS
SaveExploits5References9
GithubExploit
GithubExploit
added 2021/08/12 10:32 p.m.95 views

Exploit for Cross-site Scripting in Tastyigniter

CVE-2021-38699: Stored XSS in TastyIgniter v3.0.7 Restaurtant...

5.4CVSS5.2AI score0.07977EPSS
SaveExploits5
CNVD
CNVD
added 2021/05/21 12:00 a.m.18 views

Unspecified Vulnerability in BMC Remedy Mid Tier 9.1SP3

BMC Software BMC Remedy 9.1SP3 is an application from BMC Software, Inc. It provides off-the-shelf IT Information Library ITIL service support functionality. A security vulnerability exists in BMC Remedy Mid Tier 9.1SP3 that originates from an unauthenticated user having access to remote logs,...

5.3CVSS7AI score0.0086EPSS
SaveExploits0References1
NVD
NVD
added 2021/05/19 2:15 p.m.35 views

CVE-2017-17675

BMC Remedy Mid Tier 9.1SP3 is affected by log hijacking. Remote logging can be accessed by unauthenticated users, allowing for an attacker to hijack the system logs. This data can include user names and HTTP data...

5.3CVSS0.0086EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2021/05/19 1:11 p.m.44 views

CVE-2017-17675

BMC Remedy Mid Tier 9.1SP3 is affected by log hijacking. Remote logging can be accessed by unauthenticated users, allowing for an attacker to hijack the system logs. This data can include user names and HTTP data...

5.4AI score0.0086EPSS
SaveExploits0References2
Rows per page
Query Builder