Lucene search
+L

10782 matches found

NVD
NVD
•added 2022/03/28 6:15 p.m.•27 views

CVE-2022-0770

The Translate WordPress with GTranslate WordPress plugin before 2.9.9 does not have CSRF check in some files, and write debug data such as user's cookies in a publicly accessible file if a specific parameter is used when requesting them. Combining those two issues, an attacker could gain access t...

8.8CVSS0.00612EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2022/03/28 6:15 p.m.•14 views

CVE-2022-0770

The Translate WordPress with GTranslate WordPress plugin before 2.9.9 does not have CSRF check in some files, and write debug data such as user's cookies in a publicly accessible file if a specific parameter is used when requesting them. Combining those two issues, an attacker could gain access t...

8.8CVSS5.5AI score0.00612EPSS
SaveExploits1References2
CVE
CVE
•added 2022/03/28 5:23 p.m.•117 views

CVE-2022-0770

The Translate WordPress with GTranslate plugin for WordPress is affected by a CSRF vulnerability in versions before 2.9.9, due to missing CSRF checks in certain files. This flaw can cause the plugin to write debug data such as a user’s cookies to publicly accessible files when a specific paramete...

8.8CVSS8.8AI score0.00612EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
•added 2022/03/28 12:00 a.m.•2 views

PT-2022-13426

Name of the Vulnerable Software and Affected Versions Translate WordPress with GTranslate WordPress plugin versions prior to 2.9.9 Description The issue allows an attacker to gain access to a logged-in admin's cookies by making them open a malicious link or page. This is possible due to the lack ...

8.8CVSS5.8AI score0.00612EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/28 12:00 a.m.•3 views

CVE-2022-0770: Cross-Site Request Forgery (CSRF)

The Translate WordPress with GTranslate WordPress plugin before 2.9.9 does not have CSRF check in some files, and write debug data such as user's cookies in a publicly accessible file if a specific parameter is used when requesting them. Combining those two issues, an attacker could gain access t...

8.8CVSS7.8AI score0.00612EPSS
SaveExploits1References2
RedHat Linux
RedHat Linux
•added 2022/03/23 10:12 p.m.•14 views

python-oslo-utils: incorrect password masking in debug output

A flaw was found in python-oslo-utils. Due to improper parsing, passwords with a double quote " in them cause incorrect masking in debug logs, causing any part of the password after the double quote to be plaintext...

4.9CVSS5.7AI score0.01743EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2022/03/23 12:00 a.m.•11 views

PT-2022-13384 · Openstack +4 · Python-Oslo-Utils +4

Name of the Vulnerable Software and Affected Versions: python-oslo-utils affected versions not specified Description: A flaw was found in python-oslo-utils due to improper parsing. Passwords with a double quote " in them cause incorrect masking in debug logs, causing any part of the password afte...

6.9CVSS7AI score0.01743EPSS
SaveExploits1References35
UbuntuCve
UbuntuCve
•added 2022/03/23 12:00 a.m.•34 views

CVE-2022-0718

A flaw was found in python-oslo-utils. Due to improper parsing, passwords with a double quote " in them cause incorrect masking in debug logs, causing any part of the password after the double quote to be plaintext...

4.9CVSS6.2AI score0.01743EPSS
SaveExploits1References3
OSV
OSV
•added 2022/03/23 12:00 a.m.•11 views

UBUNTU-CVE-2022-0718

A flaw was found in python-oslo-utils. Due to improper parsing, passwords with a double quote " in them cause incorrect masking in debug logs, causing any part of the password after the double quote to be plaintext...

4.9CVSS7AI score0.01743EPSS
SaveExploits1References4
Ubuntu
Ubuntu
•added 2022/03/22 12:12 p.m.•186 views

USN-5341-1: GNU binutils vulnerabilities

It was discovered that GNU binutils incorrectly handled checks for memory allocation when parsing relocs in a corrupt file. An attacker could possibly use this issue to cause a denial of service. CVE-2017-17122 It was discovered that GNU binutils incorrectly handled certain corrupt DWARF debug...

7.8CVSS6.7AI score0.01885EPSS
SaveExploits2
OSV
OSV
•added 2022/03/18 6:15 p.m.•7 views

CVE-2021-27789

The Web application of Brocade Fabric OS before versions Brocade Fabric OS v9.0.1a and v8.2.3a contains debug statements that expose sensitive information to the program's standard output device. An attacker who has compromised the FOS system may utilize this weakness to capture sensitive...

6.5CVSS6.9AI score0.00818EPSS
SaveExploits0References1
NVD
NVD
•added 2022/03/18 6:15 p.m.•45 views

CVE-2021-27789

The Web application of Brocade Fabric OS before versions Brocade Fabric OS v9.0.1a and v8.2.3a contains debug statements that expose sensitive information to the program's standard output device. An attacker who has compromised the FOS system may utilize this weakness to capture sensitive...

6.5CVSS0.00818EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2022/03/18 6:15 p.m.•10 views

CVE-2021-27789

The Web application of Brocade Fabric OS before versions Brocade Fabric OS v9.0.1a and v8.2.3a contains debug statements that expose sensitive information to the program's standard output device. An attacker who has compromised the FOS system may utilize this weakness to capture sensitive...

6.5CVSS6.4AI score0.00818EPSS
SaveExploits0References2
Prion
Prion
•added 2022/03/18 6:15 p.m.•26 views

Design/Logic Flaw

The Web application of Brocade Fabric OS before versions Brocade Fabric OS v9.0.1a and v8.2.3a contains debug statements that expose sensitive information to the program's standard output device. An attacker who has compromised the FOS system may utilize this weakness to capture sensitive...

4CVSS6.3AI score0.00818EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2022/03/18 5:59 p.m.•50 views

CVE-2021-27789

The Web application of Brocade Fabric OS before versions Brocade Fabric OS v9.0.1a and v8.2.3a contains debug statements that expose sensitive information to the program's standard output device. An attacker who has compromised the FOS system may utilize this weakness to capture sensitive...

6.5AI score0.00818EPSS
SaveExploits0References1
CVE
CVE
•added 2022/03/18 5:59 p.m.•142 views

CVE-2021-27789

CVE-2021-27789 affects Brocade Fabric OS web app and CLI on Brocade Fabric OS versions prior to v9.0.1a and v8.2.3a. The issue stems from debug statements that print sensitive information to stdout, enabling an attacker who has already compromised the FOS system to capture credentials and other s...

6.5CVSS6.3AI score0.00818EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2022/03/18 12:00 a.m.•1 views

PT-2022-29057

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.27 Description The issue is related to the riscv configuration in the Linux Kernel, specifically with KASAN and DEBUG VIRTUAL. The actual impact and attack plausibility have not yet been proven...

5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/03/18 12:00 a.m.•2 views

PT-2022-29115

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.104 Description The issue is related to the riscv configuration in the Linux Kernel, specifically with KASAN and DEBUG VIRTUAL. The actual impact and attack plausibility have not yet been proven...

5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/03/18 12:00 a.m.•2 views

PT-2025-8028

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, specifically in the virtio console module. The issue was caused by anonymous module init and module exit functions, which could lea...

5.5CVSS5.7AI score0.0026EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2022/03/18 12:00 a.m.•1 views

PT-2022-28988

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.13 Description The issue is related to the riscv configuration in the Linux Kernel, specifically with KASAN and DEBUG VIRTUAL. The actual impact and attack plausibility have not yet been proven...

5.8AI score
SaveExploits0References1
Rows per page
Query Builder