199 matches found
CVE-2026-85959
The Progress MarkLogic Server is impacted by CVE-2026-85959 , where versions 12.x before 12.1.0 and 11.x before 11.3.7 fail to consistently record successful authentication events in audit logs. This insufficient logging (CWE-778) can hinder the ability to detect or investigate unauthorized acces...
CVE-2026-105243
Insufficient Logging vulnerability in the EventLogAppender of Apache l...
DEBIAN-CVE-2026-105243
Insufficient Logging vulnerability in the EventLogAppender of Apache log4net. Long messages were truncated to a fixed size that exceeds what the Windows Event Log accepts once the log and source names are counted, and the event log then stored nothing and reported nothing. A party whose data...
CVE-2026-105243
Insufficient Logging vulnerability in the EventLogAppender of Apache log4net. Long messages were truncated to a fixed size that exceeds what the Windows Event Log accepts once the log and source names are counted, and the event log then stored nothing and reported nothing. A party whose data...
CVE-2026-105243 Apache log4net: Oversize EventLogAppender record silently discarded
Insufficient Logging vulnerability in the EventLogAppender of Apache log4net. Long messages were truncated to a fixed size that exceeds what the Windows Event Log accepts once the log and source names are counted, and the event log then stored nothing and reported nothing. A party whose data...
CVE-2026-105243
The Apache log4net logging framework (versions 1.2.9 before 3.5.0 ) contains an Insufficient Logging vulnerability in the EventLogAppender component on Windows. The root cause is that long messages are truncated to a fixed size that exceeds the Windows Event Log capacity once log and source names...
EUVD-2026-93869
Insufficient Logging vulnerability in the EventLogAppender of Apache log4net. Long messages were truncated to a fixed size that exceeds what the Windows Event Log accepts once the log and source names are counted, and the event log then stored nothing and reported nothing. A party whose data...
CVE-2026-105243 Apache log4net: Oversize EventLogAppender record silently discarded
Insufficient Logging vulnerability in the EventLogAppender of Apache log4net. Long messages were truncated to a fixed size that exceeds what the Windows Event Log accepts once the log and source names are counted, and the event log then stored nothing and reported nothing. A party whose data...
CVE-2026-105243
Insufficient Logging vulnerability in the EventLogAppender of Apache log4net. Long messages were truncated to a fixed size that exceeds what the Windows Event Log accepts once the log and source names are counted, and the event log then stored nothing and reported nothing. A party whose data...
PT-2026-107235
Name of the Vulnerable Software and Affected Versions Apache log4net versions 1.2.9 through 3.4.x Description Insufficient logging occurs in the EventLogAppender on Windows. Long messages are truncated to a fixed size that, when combined with log and source names, exceeds the Windows Event Log...
CVE-2026-105243: Insufficient Logging
Insufficient Logging vulnerability in the EventLogAppender of Apache log4net. Long messages were truncated to a fixed size that exceeds what the Windows Event Log accepts once the log and source names are counted, and the event log then stored nothing and reported nothing. A party whose data...
ROS-20261005-73-0146
The vulnerability of the f81604readintcallback function in the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver is related to insufficient logging. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, a...
CVE-2026-92002: Insufficient Logging
Affected versions of MISP use Redis to throttle repeated authentication-failure log entries. The intent is to avoid excessive duplicate logs while still recording failed authentication activity. However, User-setupRedis returns false when Redis cannot be reached. The vulnerable shouldLog logic on...
CVE-2026-90955: Insufficient Logging
Affected versions of MISP’s interactive CLI shell do not reliably preserve the identity of the impersonated MISP user across audit logging. The shell is designed to run actions as a supplied MISP user ID. However, the legacy SysLogLogable behavior stored that identity in behavior-instance state...
CVE-2026-29812: Insufficient Logging
CyberPanel before 2.4.4 has no logging for actions that could potentially manipulate the child domains list...
CVE-2026-66816
Insufficient logging in SQL Server allows an authorized attacker to bypass a security feature over a network...
EUVD-2026-73376
Insufficient logging in SQL Server allows an authorized attacker to bypass a security feature over a network...
CVE-2026-66816
Microsoft SQL Server is affected by a security feature bypass vulnerability caused by insufficient logging , allowing an authorized attacker with low privileges to bypass a security feature over a network. The vulnerability carries a CVSS 3.1 score of 6.5 (Medium) with a High confidentiality impa...
