EUVD-2014-2920

Malware in sbrugna...

Information Exposure Through Log Files

github.com/hashicorp/vault is vulnerable to Information Exposure Through Log Files. The vulnerability is due to a regression that removed the HMAC functionality for sensitive headers in the audit device, leading to the storage of plaintext client tokens and token accessors in the audit log...

PT-2020-7639

Name of the Vulnerable Software and Affected Versions wolfSSL CyaSSL versions 2.5.0 through 2.9.3 Description The SSL 3 HMAC functionality does not check the padding length when verification fails, allowing remote attackers to have unspecified impact via a crafted HMAC, which triggers an...