878 matches found
CVE-2021-35479
Nagios Log Server before 2.1.9 contains Stored XSS in the custom column view for the alert history and audit log function through the affected pp parameter. This affects users who open a crafted link or third-party web page...
CVE-2021-35478
Nagios Log Server before 2.1.9 contains Reflected XSS in the dropdown box for the alert history and audit log function. All parameters used for filtering are affected. This affects users who open a crafted link or third-party web page...
CVE-2021-35479
Nagios Log Server before 2.1.9 contains Stored XSS in the custom column view for the alert history and audit log function through the affected pp parameter. This affects users who open a crafted link or third-party web page...
Cross site scripting
Nagios Log Server before 2.1.9 contains Reflected XSS in the dropdown box for the alert history and audit log function. All parameters used for filtering are affected. This affects users who open a crafted link or third-party web page...
Cross site scripting
Nagios Log Server before 2.1.9 contains Stored XSS in the custom column view for the alert history and audit log function through the affected pp parameter. This affects users who open a crafted link or third-party web page...
CVE-2021-35478
Nagios Log Server before 2.1.9 contains Reflected XSS in the dropdown box for the alert history and audit log function. All parameters used for filtering are affected. This affects users who open a crafted link or third-party web page...
CVE-2021-35479
Nagios Log Server before 2.1.9 contains Stored XSS in the custom column view for the alert history and audit log function through the affected pp parameter. This affects users who open a crafted link or third-party web page...
Nagios Log Server 跨站脚本漏洞
Nagios Log Server is a suite of centralized log management, monitoring, and analysis software from Nagios, Inc. A cross-site scripting vulnerability exists in Nagios Log Server versions prior to 2.1.9. The vulnerability stems from Nagios Log Server including XSS in the customized column views of...
Nagios Log Server 跨站脚本漏洞
Nagios Log Server is a suite of centralized log management, monitoring, and analysis software from Nagios, Inc. A cross-site scripting vulnerability exists in Nagios Log Server versions prior to 2.1.9. The vulnerability stems from Nagios Log Server including XSS in the drop-down boxes of the Aler...
CVE-2021-35479
CVE-2021-35479 affects Nagios Log Server prior to version 2.1.9, where a Stored XSS vulnerability exists in the custom column view of the alert history and audit log via the affected pp parameter. Exploitation is described as requiring a crafted link or a third‑party webpage to trigger the vulner...
CVE-2021-35478
Nagios Log Server before 2.1.9 contains Reflected XSS in the dropdown box for the alert history and audit log function. All parameters used for filtering are affected. This affects users who open a crafted link or third-party web page...
CVE-2021-35478
CVE-2021-35478 and CVE-2021-35479 pertain to Nagios Log Server prior to 2.1.9. The CVE-2021-35478 entry describes a Reflected XSS in the dropdown for the alert history and audit log filtering parameters, exploitable when a user opens a crafted link or third‑party page. The CVE-2021-35479 entry de...
CVE-2021-33689
When user with insufficient privileges tries to access any application in SAP NetWeaver Administrator Administrator applications, version - 7.50, no security audit log is created. Therefore, security audit log Integrity is impacted...
Design/Logic Flaw
When user with insufficient privileges tries to access any application in SAP NetWeaver Administrator Administrator applications, version - 7.50, no security audit log is created. Therefore, security audit log Integrity is impacted...
CVE-2021-33689
When user with insufficient privileges tries to access any application in SAP NetWeaver Administrator Administrator applications, version - 7.50, no security audit log is created. Therefore, security audit log Integrity is impacted...
CVE-2021-33689
SAP NetWeaver AS Java 7.50 Administrator applications are affected by CVE-2021-33689: insufficient logging for users with limited privileges that access any Administrator app, impacting audit log integrity. The issue is documented across multiple feeds (NVD/Red Hat/Nessus) with low–medium severit...
Nextcloud: No admin audit log for auth tokens
There seems to be no audit trail for auth tokens. Creating tokens Revoking tokens Scope changes Renames Marking the token to be wiped Impact As auth tokens are used to access your data having a track record when they are created helps a lot. If you also take https://hackerone.com/reports/1193321...
Nextcloud: No admin audit entry for enabling/disabling 2FA
Related to https://hackerone.com/reports/1177353 When a user enables or disables 2FA there is no entry in the audit log. Impact Especially for disabling it should probably be logged there. But account security related things should be in there...
Nextcloud: Federated share accepting/declining is not logged in audit log
In relation to https://hackerone.com/reports/1177353 1. Enable the audit log 2. Share a file to a federated user 3. So far all looks good in the log 4. the recipient checks either accepts or declines the share 5. There is no line regarding this in the logs. Impact The audit log is used to get a...
CVE-2021-31906
CVE-2021-31906 affects JetBrains TeamCity prior to 2020.2.2. The issue is that audit logs were not sufficient when an administrator uploaded a file, leading to potential information disclosure implied by insufficient logging. Exploitation details are not provided in the supplied documents, and th...