CVE-2024-49355

IBM OpenPages with Watson 8.3 and 9.0 may write improperly neutralized data to server log files when the tracing is enabled per the System Tracing feature...

CVE-2024-55578

Zammad before 6.4.1 places sensitive data such as authmicrosoftoffice365credentials and applicationsecret in log files...

Insertion of Sensitive Information into Log File

Overview snowflake-connector-python is a Snowflake Connector for Python Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File due to the logging of sensitive information when the logging level is set to DEBUG. An attacker can access sensitive data su...

CVE-2021-22533

Possible Insertion of Sensitive Information into Log File Vulnerability in eDirectory has been discovered in OpenText™ eDirectory 9.2.4.0000...

biscuit-java 安全漏洞

biscuit-java is a Java implementation of Biscuit authentication and authorization tokens from the biscuit-auth open source. A security vulnerability exists in biscuit-java version 3, which stems from a malicious user's spoofed third-party block request that can trick a third-party organization in...

Cato Networks Windows SDP Client 安全漏洞

Cato Networks Windows SDP Client is a secure remote access software from Cato Networks, Israel. A security vulnerability exists in Cato Networks Windows SDP Client versions prior to 5.10.28, which stems from allowing sensitive information to be inserted into log files, potentially leading to...

CVE-2024-6793

A deserialization of untrusted data vulnerability exists in NI VeriStand DataLogging Server that may result in remote code execution. Successful exploitation requires an attacker to send a specially crafted message. These vulnerabilities affect NI VeriStand 2024 Q2 and prior versions...

PT-2024-23997 · Tribulant · Tribulant Slideshow Gallery

Name of the Vulnerable Software and Affected Versions: Tribulant Slideshow Gallery versions 1.7.8 and earlier Description: The issue is related to the insertion of sensitive information into log files. This could potentially expose sensitive data. Recommendations: For versions 1.7.8 and earlier,...

PT-2024-23439 · Unknown · Fg Prestashop To Woocommerce

Name of the Vulnerable Software and Affected Versions: FG PrestaShop to WooCommerce versions n/a through 4.45.1 Description: The issue is related to the insertion of sensitive information into log files. This can potentially expose confidential data. There is no information provided about the...

PT-2024-13207 · Unknown · Cf7 Google Sheets Connector

Name of the Vulnerable Software and Affected Versions: CF7 Google Sheets Connector versions through 5.0.5 Description: The issue is related to the insertion of sensitive information into log files. This can potentially expose confidential data. Recommendations: For versions through 5.0.5, update ...

CVE-2023-46230

In Splunk Add-on Builder versions below 4.1.4, the app writes sensitive information to internal log files...

CVE-2024-23791 Unnecessary data is written to log if issues during indexing occurs

Insertion of debug information into log file during building the elastic search index allows reading of sensitive information from articles.This issue affects OTRS: from 7.0.X through 7.0.48, from 8.0.X through 8.0.37, from 2023.X through 2023.1.1...

SUSE-SU-2023:1830-1 Security update for SUSE Manager Server 4.3

This update fixes the following issues: spacewalk-java: - Version 4.3.52-1 Add more restricted arguments to prevent HTTP API logging sensitive data bsc1209386, bsc1209395 spacewalk-web: - Version 4.3.29-1 Fix datepicker appearing behind modal edge bsc1209703 Fix datepicker layout shift on Highsta...

USN-5896-1 ruby-rack vulnerabilities

It was discovered that Rack was not properly parsing data when processing multipart POST requests. If a user or automated system were tricked into sending a specially crafted multipart POST request to an application using Rack, a remote attacker could possibly use this issue to cause a denial of...

Important: kernel

Issue Overview: In v4l2m2mquerybuf of v4l2-mem2mem.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Andro...

CVE-2022-3594

A vulnerability was found in Linux Kernel. It has been declared as problematic. Affected by this vulnerability is the function intrcallback of the file drivers/net/usb/r8152.c of the component BPF. The manipulation leads to logging of excessive data. The attack can be launched remotely. It is...

Design/Logic Flaw

A vulnerability was found in Linux Kernel. It has been declared as problematic. Affected by this vulnerability is the function intrcallback of the file drivers/net/usb/r8152.c of the component BPF. The manipulation leads to logging of excessive data. The attack can be launched remotely. It is...

CVE-2022-3594

A vulnerability was found in Linux Kernel. It has been declared as problematic. Affected by this vulnerability is the function intrcallback of the file drivers/net/usb/r8152.c of the component BPF. The manipulation leads to logging of excessive data. The attack can be launched remotely. It is...

CVE-2022-36200

CVE-2022-36200 affects FiberHome VDSL2 Modem HG150-Ub_V3.0. The admin credentials are submitted in the URL, creating risk of logging/sniffing and exposure of confidential data. The vulnerability is described across multiple sources (NVD entry mirrors a network-accessible issue with high impact on...

CVE-2022-25779

Logging of Excessive Data vulnerability in audit log of Secomea GateManager allows logged in user to write text entries in audit log. This issue affects: Secomea GateManager versions prior to 9.7...