474 matches found
Authentication flaw
A vulnerability in the web-based management interface of Cisco UCS Director could allow an unauthenticated, remote attacker to download system log files from an affected device. The vulnerability is due to an issue in the authentication logic of the web-based management interface. An attacker cou...
CVE-2019-16003 Cisco UCS Director Information Disclosure Vulnerability
A vulnerability in the web-based management interface of Cisco UCS Director could allow an unauthenticated, remote attacker to download system log files from an affected device. The vulnerability is due to an issue in the authentication logic of the web-based management interface. An attacker cou...
CVE-2019-16003 Cisco UCS Director Information Disclosure Vulnerability
A vulnerability in the web-based management interface of Cisco UCS Director could allow an unauthenticated, remote attacker to download system log files from an affected device. The vulnerability is due to an issue in the authentication logic of the web-based management interface. An attacker cou...
CVE-2019-16003
CVE-2019-16003 affects Cisco UCS Director Web-based management interface. A flaw in the authentication logic could allow an unauthenticated, remote attacker to download system log files generated by an administrator by sending a crafted request to the web interface. The vulnerability stems from h...
Linux: Separate partition for /var/log
The /var/log directory is used to store system log data. This script tests if a separate partition exists for /var/log. Copyright C 2020 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the...
PT-2020-1431
Name of the Vulnerable Software and Affected Versions Cisco UCS Director affected versions not specified Description A vulnerability in the web-based management interface could allow an unauthenticated, remote attacker to download system log files from an affected device. The issue is due to a...
CVE-2012-5535
gnome-system-log polkit policy allows arbitrary files on the system to be read...
CVE-2012-5535
gnome-system-log polkit policy allows arbitrary files on the system to be read...
CVE-2012-5535
CVE-2012-5535 concerns gnome-system-log polkit policy that allows reading arbitrary files on the system. The root cause is a polkit policy mistake that grants read access beyond intended scope. Impact: confidentiality is potentially HIGH (per CVSS-3.1), with non-trivial access possible without us...
PT-2019-6790
Name of the Vulnerable Software and Affected Versions gnome-system-log affected versions not specified Description The issue allows arbitrary files on the system to be read due to a polkit policy in gnome-system-log. Recommendations At the moment, there is no information about a newer version tha...
CVE-2012-5535: Exposure of Sensitive Information to an Unauthorized Actor
gnome-system-log polkit policy allows arbitrary files on the system to be read...
Win32k Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data;...
CVE-2019-17512
There are some web interfaces without authentication requirements on D-Link DIR-412 A1-1.14WW routers. An attacker can clear the router's log file via act=clear&logtype=sysact to logclear.php, which could be used to erase attack traces...
PT-2019-15178
Name of the Vulnerable Software and Affected Versions D-Link DIR-412 A1 version 1.14WW Description The issue concerns the presence of unauthenticated web interfaces on the affected router. An attacker can exploit this by accessing the "log clear.php" endpoint with specific parameters, such as...
CVE-2019-12658: Uncontrolled Resource Consumption
A vulnerability in the filesystem resource management code of Cisco IOS XE Software could allow an unauthenticated, remote attacker to exhaust filesystem resources on an affected device and cause a denial of service DoS condition. The vulnerability is due to ineffective management of the underlyi...
Weak Password Vulnerability in the System-Log Audit System of Taihe Information Security Operation Center of Beijing Qixingchen Information Security Technology Co.
TAICHI Information Security Operation Center System - Log Audit System TSOC-SA, TSOC-SA is capable of real-time collection of logs, events, alarms and other information generated by security devices, network devices, hosts, operating systems, and various application systems from different vendors...
Cross-site Scripting (XSS)
Bolt is vulnerable to cross-site scripting XSS. The vulnerability exists due to lack of proper handling of Create file for system log in file manager, allowing a remote attacker to inject arbitrary Javascript into a victim's browser through the affected parameters...
CVE-2019-15483
Bolt before 3.6.10 has XSS via a title that is mishandled in the system log...