CVE-2024-47822

CVE-2024-47822 – Directus : The issue arises from access tokens in query strings not being redacted when LOG_STYLE is set to raw, allowing potential exposure of long‑lived tokens in system logs. This could enable an attacker with log access to gain administrative control or perform unauthorized d...

CVE-2024-47822 Directus inserts access token from query string into logs

Directus is a real-time API and App dashboard for managing SQL database content. Access tokens from query strings are not redacted and are potentially exposed in system logs which may be persisted. The access token in req.query is not redacted when the LOGSTYLE is set to raw. If these logs are no...

CVE-2024-7421

An information exposure in Devolutions Remote Desktop Manager 2024.2.20.0 and earlier on Windows allows local attackers with access to system logs to obtain session credentials via passwords included in command-line arguments when launching WinSCP sessions...

CVE-2024-7421

An information exposure in Devolutions Remote Desktop Manager 2024.2.20.0 and earlier on Windows allows local attackers with access to system logs to obtain session credentials via passwords included in command-line arguments when launching WinSCP sessions...

CVE-2024-7421

The vulnerability CVE-2024-7421 affects Devolutions Remote Desktop Manager (versions up to 2024.2.20.0) on Windows. The issue is an information exposure where credentials used for WinSCP sessions can be retrieved by local attackers who can access system logs, via passwords found in command-line a...

CVE-2024-39339

A vulnerability has been discovered in all versions of Smartplay headunits, which are widely used in Suzuki and Toyota cars. This misconfiguration can lead to information disclosure, leaking sensitive details such as diagnostic log traces, system logs, headunit passwords, and personally...

CVE-2024-39339

A misconfiguration in all versions of Smartplay headunits , commonly used in Suzuki and Toyota vehicles, leads to information disclosure . This flaw allows for the leaking of sensitive data, including diagnostic log traces , system logs , headunit passwords , and personally identifiable informati...

CVE-2024-39339

A vulnerability has been discovered in all versions of Smartplay headunits, which are widely used in Suzuki and Toyota cars. This misconfiguration can lead to information disclosure, leaking sensitive details such as diagnostic log traces, system logs, headunit passwords, and personally...

PT-2024-28457 · Unknown · Smartplay Headunits

Name of the Vulnerable Software and Affected Versions: Smartplay headunits affected versions not specified Description: A misconfiguration in Smartplay headunits can lead to information disclosure, potentially leaking sensitive details such as diagnostic log traces, system logs, headunit password...

Who - Caller ID, Spam Block 安全漏洞

Who - Caller ID, Spam Block is a globally recognized excellent caller identification and spam call blocking application from RD Labs LLC, USA. A security vulnerability exists in Who - Caller ID, Spam Block version 15.0 that stems from storing sensitive information in the system log...

PT-2024-28781 · Unknown · Com.Cascadialabs.Who

Name of the Vulnerable Software and Affected Versions: com.cascadialabs.who aka Who - Caller ID, Spam Block version 15.0 Description: The issue concerns the placement of sensitive information in the system log by the application. Recommendations: For version 15.0, consider restricting access to...

CVE-2024-40832

The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.6. An app may be able to view a contact's phone number in system logs...

CVE-2024-40832

The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.6. An app may be able to view a contact's phone number in system logs...

CVE-2024-40832

The CVE-2024-40832 vulnerability affects macOS Sonoma, specifically within the Messages component. It could allow an app to view a contact’s phone number in system logs. The issue is fixed in macOS Sonoma 14.6 through improved checks. The CVSS data from NVD/CISA indicates a LOW-severity, local, u...

PT-2024-29089 · Apple · Macos Sonoma +1

Name of the Vulnerable Software and Affected Versions: macOS Sonoma versions prior to 14.6 Description: The issue allows an app to potentially view a contact's phone number in system logs. This was addressed with improved checks. Recommendations: For macOS Sonoma versions prior to 14.6, update to...

CVE-2024-32757

Under certain circumstances unnecessary user details are provided within system logs...

CVE-2024-32757 American Dynamics Illustra Essentials Gen 4 - Linux Credential Leak

Under certain circumstances unnecessary user details are provided within system logs...

CVE-2024-32757

CVE-2024-32757 affects Johnson Controls Illustra Essentials Gen 4. The issue is insertion of sensitive information into system logs, potentially exposing Linux user credentials. Affected version: Illustra.Ess4.01.02.10.5982 and prior. CVSS v3.1 base score 6.8 (AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N)...

Johnson Controls Illustra Essentials Gen 4 Security Vulnerability

Johnson Controls Illustra Essentials Gen 4 is a bullet camera from Johnson Controls USA. A security vulnerability exists in Johnson Controls Illustra Essentials Gen 4 Illustra.Ess4.01.02.10.5982 and prior versions, which stems from unnecessary user details being provided in the system log...

PT-2024-24830 · Johnson Controls · American Dynamics Illustra Essentials Gen 4 +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned Description: The issue involves unnecessary user details being provided within system logs under certain circumstances. Recommendations: At the moment, there is no information about a newer version...