472 matches found
Apple iOS和Apple iPadOS 安全漏洞
Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A security vulnerability exists in Apple iOS version 18.1 and Apple iPadOS version 18.1, which stems from a sandboxed...
CVE-2024-44205
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Ventura 13.6.8, macOS Monterey 12.7.6, iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6. A sandboxed app may be able to access sensitive user data in system lo...
CVE-2024-44205
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Ventura 13.6.8, macOS Monterey 12.7.6, iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6. A sandboxed app may be able to access sensitive user data in system lo...
CVE-2024-44205
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8. A sandboxed app may be able to access sensitive user data in system lo...
CVE-2024-44205
CVE-2024-44205 describes a privacy issue where a sandboxed app may access sensitive user data in system logs. The vendor-fixed versions are: macOS Ventura 13.6.8, macOS Monterey 12.7.6, macOS Sonoma 14.6, iOS 16.7.9 and iPadOS 16.7.9, and iOS 17.6 and iPadOS 17.6. The NVD/NVD-derived entry notes ...
Apple iOS和iPadOS 安全漏洞
Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A security vulnerability exists in Apple iOS version 16.7.9 and iPadOS version 16.7.9, which stems from a sandboxed...
CVE-2024-47822
CVE-2024-47822 – Directus : The issue arises from access tokens in query strings not being redacted when LOG_STYLE is set to raw, allowing potential exposure of long‑lived tokens in system logs. This could enable an attacker with log access to gain administrative control or perform unauthorized d...
CVE-2024-47822 Directus inserts access token from query string into logs
Directus is a real-time API and App dashboard for managing SQL database content. Access tokens from query strings are not redacted and are potentially exposed in system logs which may be persisted. The access token in req.query is not redacted when the LOGSTYLE is set to raw. If these logs are no...
CVE-2024-47822 Directus inserts access token from query string into logs
Directus is a real-time API and App dashboard for managing SQL database content. Access tokens from query strings are not redacted and are potentially exposed in system logs which may be persisted. The access token in req.query is not redacted when the LOGSTYLE is set to raw. If these logs are no...
CVE-2024-47822 Directus inserts access token from query string into logs
Directus is a real-time API and App dashboard for managing SQL database content. Access tokens from query strings are not redacted and are potentially exposed in system logs which may be persisted. The access token in req.query is not redacted when the LOGSTYLE is set to raw. If these logs are no...
CVE-2024-7421
An information exposure in Devolutions Remote Desktop Manager 2024.2.20.0 and earlier on Windows allows local attackers with access to system logs to obtain session credentials via passwords included in command-line arguments when launching WinSCP sessions...
CVE-2024-7421
The vulnerability CVE-2024-7421 affects Devolutions Remote Desktop Manager (versions up to 2024.2.20.0) on Windows. The issue is an information exposure where credentials used for WinSCP sessions can be retrieved by local attackers who can access system logs, via passwords found in command-line a...
CVE-2024-7421
An information exposure in Devolutions Remote Desktop Manager 2024.2.20.0 and earlier on Windows allows local attackers with access to system logs to obtain session credentials via passwords included in command-line arguments when launching WinSCP sessions...
CVE-2024-39339
A vulnerability has been discovered in all versions of Smartplay headunits, which are widely used in Suzuki and Toyota cars. This misconfiguration can lead to information disclosure, leaking sensitive details such as diagnostic log traces, system logs, headunit passwords, and personally...
CVE-2024-39339
CVE-2024-39339 affects all versions of Smartplay headunits used in Suzuki and Toyota vehicles. The issue is described as a misconfiguration that leads to information disclosure, exposing diagnostic log traces, system logs, headunit passwords, and PII. The available documents provide the impact as...
CVE-2024-39339
A vulnerability has been discovered in all versions of Smartplay headunits, which are widely used in Suzuki and Toyota cars. This misconfiguration can lead to information disclosure, leaking sensitive details such as diagnostic log traces, system logs, headunit passwords, and personally...
PT-2024-28457 · Unknown · Smartplay Headunits
Name of the Vulnerable Software and Affected Versions: Smartplay headunits affected versions not specified Description: A misconfiguration in Smartplay headunits can lead to information disclosure, potentially leaking sensitive details such as diagnostic log traces, system logs, headunit password...
PT-2024-28781 · Unknown · Com.Cascadialabs.Who
Name of the Vulnerable Software and Affected Versions: com.cascadialabs.who aka Who - Caller ID, Spam Block version 15.0 Description: The issue concerns the placement of sensitive information in the system log by the application. Recommendations: For version 15.0, consider restricting access to...
Who - Caller ID, Spam Block 安全漏洞
Who - Caller ID, Spam Block is a globally recognized excellent caller identification and spam call blocking application from RD Labs LLC, USA. A security vulnerability exists in Who - Caller ID, Spam Block version 15.0 that stems from storing sensitive information in the system log...