Lucene search
+L

68 matches found

osv_pysec
osv_pysec
•added 2026/10/15 10:22 a.m.•12 views

PYSEC-2026-4301 Snowflake drivers writes sensitive information to logs

Insertion of sensitive information into log files in the Snowflake Python, Go, JDBC, Node.js, PHP PDO, and ODBC drivers allowed authentication tokens, query-result encryption keys, pre-signed cloud-storage URLs, and SAML assertions to be written to diagnostic logs in circumstances where the...

6.5CVSS5.8AI score0.00089EPSS
SaveExploits0References11
NVD
NVD
•added 2026/10/12 5:17 p.m.•12 views

CVE-2026-85961

On Azure deployments, Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 may record security-sensitive authentication information in diagnostic logs under certain configurations. An attacker with access to the affected logs could use this information to obtain...

7.5CVSS0.00401EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/12 4:17 p.m.•9 views

CVE-2026-85949

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 may record security-sensitive information in diagnostic logs under certain configurations. An attacker with access to the affected logs could use this information to obtain unauthorized access to protected...

8.1CVSS0.00241EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/12 4:10 p.m.•20 views

CVE-2026-85961

Progress MarkLogic Server versions 12.x before 12.1.0 and 11.x before 11.3.7 on Azure deployments may record security-sensitive authentication information in diagnostic logs under certain configurations. This exposure occurs due to the insertion of sensitive data into log files (CWE-532 ), potent...

7.5CVSS6.1AI score0.00401EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/12 4:10 p.m.•33 views

CVE-2026-85961 Sensitive information exposure in Progress MarkLogic Server Azure deployments

On Azure deployments, Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 may record security-sensitive authentication information in diagnostic logs under certain configurations. An attacker with access to the affected logs could use this information to obtain...

7.5CVSS0.00401EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/12 4:10 p.m.•8 views

EUVD-2026-97675

On Azure deployments, Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 may record security-sensitive authentication information in diagnostic logs under certain configurations. An attacker with access to the affected logs could use this information to obtain...

7.5CVSS6.1AI score0.00401EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/12 3:36 p.m.•7 views

EUVD-2026-97507

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 may record security-sensitive information in diagnostic logs under certain configurations. An attacker with access to the affected logs could use this information to obtain unauthorized access to protected...

8.1CVSS6.1AI score0.00241EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/12 3:36 p.m.•12 views

CVE-2026-85949

Progress MarkLogic Server versions 12.x before 12.1.0 and 11.x before 11.3.7 are vulnerable to sensitive information exposure . Under certain configurations, the software may record security-sensitive data into diagnostic trace logs . An attacker with access to these logs could leverage the expos...

8.1CVSS6.1AI score0.00241EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/10/12 12:00 a.m.•8 views

PT-2026-110793

🚨 CVE-2026-85961 On Azure deployments, Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 may record security-sensitive authentication information in diagnostic logs under certain configurations. An attacker with access to the affected logs could use this...

7.5CVSS6.1AI score0.00401EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/12 12:00 a.m.•8 views

CVE-2026-85961: Insertion of Sensitive Information into Log File

On Azure deployments, Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 may record security-sensitive authentication information in diagnostic logs under certain configurations. An attacker with access to the affected logs could use this information to obtain...

7.5CVSS6.1AI score0.00401EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/12 12:00 a.m.•5 views

CVE-2026-85949: Insertion of Sensitive Information into Log File

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 may record security-sensitive information in diagnostic logs under certain configurations. An attacker with access to the affected logs could use this information to obtain unauthorized access to protected...

8.1CVSS6.1AI score0.00241EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/12 12:00 a.m.•9 views

PT-2026-110642

🚨 CVE-2026-85949 Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 may record security-sensitive information in diagnostic logs under certain configurations. An attacker with access to the affected logs could use this information to obtain unauthorized access t...

8.1CVSS6.1AI score0.00241EPSS
SaveExploits0References3
Veracode
Veracode
•added 2026/10/06 5:17 a.m.•27 views

Sensitive Data Leakage

Snowflake drivers are vulnerable to Insertion of Sensitive Data Leakage. The vulnerability is due to sensitive data such as authentication tokens, encryption keys, pre-signed cloud-storage URLs, and SAML assertions being written to diagnostic logs, which allows an attacker with read access to the...

6.5CVSS6AI score0.00089EPSS
SaveExploits0References2Affected Software6
Github Security Blog
Github Security Blog
•added 2026/10/05 10:55 p.m.•20 views

Snowflake drivers writes sensitive information to logs

Insertion of sensitive information into log files in the Snowflake Python, Go, JDBC, Node.js, PHP PDO, and ODBC drivers allowed authentication tokens, query-result encryption keys, pre-signed cloud-storage URLs, and SAML assertions to be written to diagnostic logs in circumstances where the...

6.5CVSS5.8AI score0.00089EPSS
SaveExploits0References9Affected Software7
EUVD
EUVD
•added 2026/10/05 10:55 p.m.•19 views

EUVD-2026-72672

Snowflake drivers writes sensitive information to logs...

6.5CVSS5.8AI score0.00089EPSS
SaveExploits0References8
NVD
NVD
•added 2026/09/24 9:18 p.m.•24 views

CVE-2026-82716

The Botslab G980H dash camera firmware includes sensitive configuration information, including WiFi credentials, in diagnostic logs generated during the support process. These logs remain accessible on removable storage after the support operation has completed. An unauthenticated attacker with...

5.1CVSS0.00169EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/09/24 8:02 p.m.•18 views

EUVD-2026-86456

The Botslab G980H dash camera firmware includes sensitive configuration information, including WiFi credentials, in diagnostic logs generated during the support process. These logs remain accessible on removable storage after the support operation has completed. An unauthenticated attacker with...

5.1CVSS5.8AI score0.00169EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/09/24 8:02 p.m.•37 views

CVE-2026-82716 Botslab G980H Dashcams Insertion of Sensitive Information into Log File

The Botslab G980H dash camera firmware includes sensitive configuration information, including WiFi credentials, in diagnostic logs generated during the support process. These logs remain accessible on removable storage after the support operation has completed. An unauthenticated attacker with...

5.1CVSS0.00169EPSS
SaveExploits0References3
CVE
CVE
•added 2026/09/24 8:02 p.m.•42 views

CVE-2026-82716

The Botslab G980H dash camera firmware contains a vulnerability where diagnostic logs generated during the support process include sensitive configuration information , such as WiFi credentials . These logs remain accessible on removable storage after the support operation is finished. An unauthe...

5.1CVSS5.8AI score0.00169EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/24 12:00 a.m.•9 views

PT-2026-98279

Name of the Vulnerable Software and Affected Versions Botslab G980H affected versions not specified Description The firmware includes sensitive configuration information, such as WiFi credentials, within diagnostic logs created during the support process. These logs persist on removable storage...

5.1CVSS5.8AI score0.00169EPSS
SaveExploits0References5
Rows per page
Query Builder