Lucene search
K

321 matches found

Snyk
Snyk
added 2026/02/26 3:13 a.m.2 views

Insertion of Sensitive Information into Log File

Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File in the provider debug logging. An attacker can obtain sensitive information such as passwords, StackScript content, and object storage data by accessing provider debug logs when it is...

7.7CVSS5.9AI score0.00014EPSS
Exploits0References2
Snyk
Snyk
added 2026/02/26 3:13 a.m.1 views

Insertion of Sensitive Information into Log File

Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File in the provider debug logging. An attacker can obtain sensitive information such as passwords, StackScript content, and object storage data by accessing provider debug logs when it is...

7.7CVSS5.9AI score0.00014EPSS
Exploits0References2
Snyk
Snyk
added 2026/02/26 3:13 a.m.1 views

Insertion of Sensitive Information into Log File

Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File in the provider debug logging. An attacker can obtain sensitive information such as passwords, StackScript content, and object storage data by accessing provider debug logs when it is...

7.7CVSS5.9AI score0.00014EPSS
Exploits0References2
Snyk
Snyk
added 2026/02/26 3:13 a.m.0 views

Insertion of Sensitive Information into Log File

Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File in the provider debug logging. An attacker can obtain sensitive information such as passwords, StackScript content, and object storage data by accessing provider debug logs when it is...

7.7CVSS5.9AI score0.00014EPSS
Exploits0References2
Snyk
Snyk
added 2026/02/26 3:13 a.m.0 views

Insertion of Sensitive Information into Log File

Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File in the provider debug logging. An attacker can obtain sensitive information such as passwords, StackScript content, and object storage data by accessing provider debug logs when it is...

7.7CVSS5.9AI score0.00014EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/02/26 12:53 a.m.2 views

CVE-2026-27900

The Terraform Provider for Linode versions prior to v3.9.0 logged sensitive information including some passwords, StackScript content, and object storage data in debug logs without redaction. Provider debug logging is not enabled by default. This issue is exposed when debug/provider logs are...

7.7CVSS5.5AI score0.00014EPSS
Exploits0References5Affected Software1
OSV
OSV
added 2026/02/26 12:53 a.m.2 views

CVE-2026-27900 Terraform Provider Debug Logs Vulnerable to Sensitive Information Exposure

The Terraform Provider for Linode versions prior to v3.9.0 logged sensitive information including some passwords, StackScript content, and object storage data in debug logs without redaction. Provider debug logging is not enabled by default. This issue is exposed when debug/provider logs are...

5CVSS5.7AI score0.00014EPSS
Exploits0References7
SUSE CVE
SUSE CVE
added 2026/02/20 12:25 a.m.1 views

SUSE CVE-2026-23131

In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: Fix kobject warnings for empty attribute names The hp-bioscfg driver attempts to register kobjects with empty names when the HP BIOS returns attributes with empty name strings. This causes multiple kerne...

5.5CVSS5.6AI score0.00017EPSS
Exploits0References9
CVE
CVE
added 2026/02/19 3:25 a.m.9 views

CVE-2025-13113

CVE-2025-13113 concerns the WordPress plugin “Web Accessibility by accessiBe.” The issue is an unauthenticated sensitive information exposure caused by the function accessibe_render_js_in_footer() logging the full plugin options array to the browser console on public pages. This output is not res...

5.3CVSS5.5AI score0.00046EPSS
Exploits0References2
OSV
OSV
added 2026/02/14 3:16 p.m.3 views

UBUNTU-CVE-2026-23131

In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: Fix kobject warnings for empty attribute names The hp-bioscfg driver attempts to register kobjects with empty names when the HP BIOS returns attributes with empty name strings. This causes multiple kerne...

5.5CVSS5.7AI score0.00017EPSS
Exploits0References13
RedhatCVE
RedhatCVE
added 2026/01/09 12:30 p.m.4 views

CVE-2023-40600

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Exactly WWW EWWW Image Optimizer. It works only when debug.log is turned on.This issue affects EWWW Image Optimizer: from n/a through 7.2.0...

7.5CVSS7.8AI score0.46927EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2026/01/01 12:0 a.m.0 views

PT-2026-27668

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue where enabling debug logging in the SMB client can expose plaintext credentials. Specifically, the cifs set cifscreds function logs the key payload,...

7.8CVSS5.9AI score0.00021EPSS
Exploits0References79
OSV
OSV
added 2025/12/09 1:29 a.m.2 views

CVE-2022-50665 wifi: ath11k: fix failed to find the peer with peer_id 0 when disconnected

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix failed to find the peer with peerid 0 when disconnected It has a fail log which is ath11kdbg in ath11kdprxprocessmonstatus, as below, it will not print when debugmask is not set ATH11KDBGDATA. ath11kdbgab,...

6.4AI score0.00024EPSS
Exploits0References6
Tenable Nessus
Tenable Nessus
added 2025/10/31 12:0 a.m.4 views

Unity Linux 20.1070e Security Update: xml-security (UTSA-2025-988626)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988626 advisory. All versions of Apache Santuario - XML Security for Java prior to 2.2.6, 2.3.4, and 3.0.3, when using the JSR 105 API, are vulnerable to an issue where a private key...

6.5CVSS6.6AI score0.00173EPSS
Exploits0References4
OSV
OSV
added 2025/10/11 1:20 p.m.3 views

OESA-2025-2385 xml-security security update

The XML Security project is aimed at providing implementation of security standards for XML. Currently the focus is on the W3C standards : - XML-Signature Syntax and Processing; and - XML Encryption Syntax and Processing. Security Fixes: All versions of Apache Santuario - XML Security for Java...

6.5CVSS6.9AI score0.00173EPSS
Exploits0References2
OSV
OSV
added 2025/10/11 1:20 p.m.4 views

OESA-2025-2380 xml-security security update

The XML Security project is aimed at providing implementation of security standards for XML. Currently the focus is on the W3C standards : - XML-Signature Syntax and Processing; and - XML Encryption Syntax and Processing. Security Fixes: All versions of Apache Santuario - XML Security for Java...

6.5CVSS6.9AI score0.00173EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2017-3014

Malware in sbrugna...

7.5CVSS7.6AI score0.02088EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2013-3224

Malware in sbrugna...

1.9CVSS6.4AI score0.00057EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2011-0211

Malware in sbrugna...

4.4CVSS6.1AI score0.00059EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2018-13408

Malware in sbrugna...

5.5CVSS5.5AI score0.00082EPSS
Exploits0References2
Rows per page
Query Builder