533 matches found
Information disclosure
Home Assistant before 0.67.0 was vulnerable to an information disclosure that allowed an unauthenticated attacker to read the application's error log via components/api.py...
CVE-2018-21019
Home Assistant before 0.67.0 was vulnerable to an information disclosure that allowed an unauthenticated attacker to read the application's error log via components/api.py...
CVE-2018-21019: Exposure of Sensitive Information to an Unauthorized Actor
Home Assistant before 0.67.0 was vulnerable to an information disclosure that allowed an unauthenticated attacker to read the application's error log via components/api.py...
PT-2019-10444
Name of the Vulnerable Software and Affected Versions Home Assistant versions prior to 0.67.0 Description The issue allows an unauthenticated attacker to read the application's error log via the components/api.py component. Recommendations For versions prior to 0.67.0, update to version 0.67.0 or...
WordPress error-log-viewer plugin cross-site scripting vulnerability
WordPress is the WordPress Foundation's set of blogging platforms developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. error-log-viewer is an error log viewer plugin used in it. A cross-site scripting vulnerability exists in the WordPress...
CVE-2017-18562
The error-log-viewer plugin before 1.0.6 for WordPress has multiple XSS issues...
Cross site scripting
The error-log-viewer plugin before 1.0.6 for WordPress has multiple XSS issues...
CVE-2017-18562
The error-log-viewer plugin before 1.0.6 for WordPress has multiple XSS issues...
CVE-2017-18562
The error-log-viewer plugin before 1.0.6 for WordPress has multiple XSS issues...
CVE-2017-18562
CVE-2017-18562 affects the WordPress Error Log Viewer plugin by BestWebSoft prior to version 1.0.6. The connected documents confirm multiple XSS flaws in this plugin, enabling an authenticated attacker to execute arbitrary JavaScript in victims’ browsers (potentially stealing session data or acti...
PT-2019-8496
Name of the Vulnerable Software and Affected Versions error-log-viewer plugin versions prior to 1.0.6 Description The issue concerns multiple XSS problems. Recommendations For versions prior to 1.0.6, update to version 1.0.6 or later to resolve the issue...
CVE-2017-18562: Improper Neutralization of Input During Web Page Generation
The error-log-viewer plugin before 1.0.6 for WordPress has multiple XSS issues...
CVE-2017-18425
In cPanel before 66.0.2, the cpdavderrorlog file can be created with weak permissions SEC-280...
CVE-2019-9838
VFront 0.99.5 has stored XSS via the admin/syncregtab.php azzera parameter, which is mishandled during admin/errorlog.php rendering...
CVE-2019-4039
IBM WebSphere MQ 8.0.0.0 through 8.0.0.9 and 9.0.0.0 through 9.1.1 could allow a local attacker to cause a denial of service within the error log reporting system. IBM X-Force ID: 156163...
Design/Logic Flaw
IBM WebSphere MQ 8.0.0.0 through 8.0.0.9 and 9.0.0.0 through 9.1.1 could allow a local attacker to cause a denial of service within the error log reporting system. IBM X-Force ID: 156163...
CVE-2019-4039
CVE-2019-4039 affects IBM WebSphere MQ: 8.0.0.0–8.0.0.9 and 9.0.0.0–9.1.1. The issue allows a local attacker to cause a denial of service within the error log reporting system. Root cause is tied to the error logging function; no exploit details are provided in the documents. The vulnerability is...
CVE-2019-4039
IBM WebSphere MQ 8.0.0.0 through 8.0.0.9 and 9.0.0.0 through 9.1.1 could allow a local attacker to cause a denial of service within the error log reporting system. IBM X-Force ID: 156163...
CVE-2019-4039: Undefined Security Weakness
IBM WebSphere MQ 8.0.0.0 through 8.0.0.9 and 9.0.0.0 through 9.1.1 could allow a local attacker to cause a denial of service within the error log reporting system. IBM X-Force ID: 156163...
PT-2019-16856 · Ibm · Ibm Websphere Mq
Name of the Vulnerable Software and Affected Versions: IBM WebSphere MQ versions 8.0.0.0 through 8.0.0.9 IBM WebSphere MQ versions 9.0.0.0 through 9.1.1 Description: The issue allows a local attacker to cause a denial of service within the error log reporting system. Recommendations: For IBM...