GHSA-99J7-MHFH-W84P Slack Morphism for Rust before 0.41.0 can leak Slack OAuth client information in application debug logs

Impact Potential/accidental leaking of Slack OAuth client information in application debug logs. Patches More strict and secure debug formatting was introduced in v0.41 for OAuth secret types to avoid the possibility of printing sensitive information in application logs. Workarounds Don't...

PT-2022-16782

Name of the Vulnerable Software and Affected Versions Goldshell ASIC Miners versions 2.2.1 and below Description The debug interface of Goldshell ASIC Miners was discovered to be exposed publicly on the web interface, allowing attackers to access passwords and other sensitive information in...

PT-2022-20577 · Slack · Slack Morphism

Name of the Vulnerable Software and Affected Versions: Slack Morphism versions prior to 0.41.0 Description: The issue concerns the potential leakage of Slack OAuth client information into application debug logs due to insecure debug log formatting. This could lead to the accidental exposure of...

CVE-2022-24660: Cleartext Storage of Sensitive Information

The debug interface of Goldshell ASIC Miners v2.2.1 and below was discovered to be exposed publicly on the web interface, allowing attackers to access passwords and other sensitive information in plaintext...

Fedora: Security Advisory for golang-github-google-dap (FEDORA-2022-ba365d3703)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 36 Update: golang-github-google-dap-0.4.0-4.fc36

Go implementation of the Debug Adapter Protocol...

[SECURITY] Fedora 36 Update: golang-github-google-dap-0.6.0-5.fc36

Go implementation of the Debug Adapter Protocol...

xnio: org.xnio.StreamConnection.notifyReadClosed log to debug instead of stderr

A flaw was found in XNIO, specifically in the notifyReadClosed method. The issue revealed this method was logging a message to another expected end. This flaw allows an attacker to send flawed requests to a server, possibly causing log contention-related performance concerns or an unwanted disk...

Fedora: Security Advisory for golang-x-debug (FEDORA-2022-fae3ecee19)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

django: Possible XSS via '{% debug %}' template tag

A flaw was found in Django. The % debug % template tag did not properly encode the current context, posing a Cross-site scripting attack vector XSS...

[SECURITY] Fedora 36 Update: golang-x-debug-0-0.14.20210123gitc934e1b.fc36

This repository holds utilities and libraries for debugging Go programs...

IBM InfoSphere Information Server 访问控制错误漏洞

IBM InfoSphere Information Server is a set of data integration platforms from IBM in the United States. The platform can be used to integrate data information obtained from various sources. A security vulnerability exists in IBM InfoSphere Information Server 11.7, which stems from an incorrect...

GSD-2022-1003973 coresight: cpu-debug: Replace mutex with mutex_trylock on panic notifier

coresight: cpu-debug: Replace mutex with mutextrylock on panic notifier This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.283 by commit...

GSD-2022-1003856 coresight: cpu-debug: Replace mutex with mutex_trylock on panic notifier

coresight: cpu-debug: Replace mutex with mutextrylock on panic notifier This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.247 by commit...

GSD-2022-1003730 coresight: cpu-debug: Replace mutex with mutex_trylock on panic notifier

coresight: cpu-debug: Replace mutex with mutextrylock on panic notifier This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.198 by commit...

GSD-2022-1003541 coresight: cpu-debug: Replace mutex with mutex_trylock on panic notifier

coresight: cpu-debug: Replace mutex with mutextrylock on panic notifier This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.122 by commit...

GSD-2022-1003287 coresight: cpu-debug: Replace mutex with mutex_trylock on panic notifier

coresight: cpu-debug: Replace mutex with mutextrylock on panic notifier This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.47 by commit...

GSD-2022-1002998 coresight: cpu-debug: Replace mutex with mutex_trylock on panic notifier

coresight: cpu-debug: Replace mutex with mutextrylock on panic notifier This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.15 by commit...

GSD-2022-1002658 coresight: cpu-debug: Replace mutex with mutex_trylock on panic notifier

coresight: cpu-debug: Replace mutex with mutextrylock on panic notifier This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.4 by commit...

PT-2022-31261

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v4.13 through v5.17.14 Description The issue is related to the replacement of a mutex with mutex trylock on a panic notifier in the coresight cpu-debug component. The actual impact and attack plausibility have not yet bee...