MagnusBilling Login Logs - Cross-Site Scripting

Improper neutralization of input during web page generation vulnerability in MagnusSolution MagnusBilling login logging allows unauthenticated users to store HTML content in the viewable log component accessible at /mbilling/index.php/logUsers/read" cross-site scripting This vulnerability is...

CVE-2026-14948

FDS102 for FAdC/FAdCi R2 logs plaintext session identifiers into downloadable error log archives, allowing a low-privileged remote attacker to hijack admin sessions without credentials. No patch or exploitation evidence is provided; see VDE-2026-078 advisory.

CVE-2026-14948 Frauscher Sensortechnik: FDS102 for FAdC/FAdCi R2 is vulnerable to Insertion of Sensitive Information into Log File via error log archives

A low privileged remote attacker can hijack an active administrative session without needing to know the administrator password by extracting live plaintext session identifiers for authenticated users from downloadable error log archives...

EUVD-2026-63171

3gpp phone log file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

DEBIAN-CVE-2026-76920

3gpp phone log file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

EUVD-2026-60256

In JetBrains IntelliJ IDEA before 2026.1.5 git credentials were written in plaintext to the IDE log...

CVE-2026-75057

In JetBrains IntelliJ IDEA before 2026.1.5 git credentials were written in plaintext to the IDE log...

CVE-2026-59911

Dell ObjectScale, versions prior to 4.3.0.1, contains an Insertion of Sensitive Information into Log File vulnerability in the svctools. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure...

EUVD-2026-60203

Dell ObjectScale, versions prior to 4.3.0.1, contains an Insertion of Sensitive Information into Log File vulnerability in the svctools. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure...

CVE-2026-59911

Dell ObjectScale, versions prior to 4.3.0.1, contains an Insertion of Sensitive Information into Log File vulnerability in the svctools. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure...

PT-2026-76665

Name of the Vulnerable Software and Affected Versions Dell ObjectScale versions prior to 4.3.0.1 Description The svc tools component allows the insertion of sensitive information into log files. A low privileged attacker with local access could exploit this issue to cause information disclosure...

CVE-2026-19725

The WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.131 does not sanitise a value taken from an unauthenticated request before using it to build a log file path, allowing an attacker holding a site to site transfer key to create a log file in any existing writable directory of t...

CVE-2026-19725

The WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.131 does not sanitise a value taken from an unauthenticated request before using it to build a log file path, allowing an attacker holding a site to site transfer key to create a log file in any existing writable directory of t...

CVE-2026-19725 WPvivid Backup & Migration < 0.9.131 - Unauthenticated Path Traversal via send_to_site_connect

The WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.131 does not sanitise a value taken from an unauthenticated request before using it to build a log file path, allowing an attacker holding a site to site transfer key to create a log file in any existing writable directory of t...

CVE-2026-19725

The WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.131 fails to sanitise a value from an unauthenticated request before using it to build a log file path, allowing an attacker holding a site-to-site transfer key to write a file in any writable directory, including the web root....

EUVD-2026-59918

The WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.131 does not sanitise a value taken from an unauthenticated request before using it to build a log file path, allowing an attacker holding a site to site transfer key to create a log file in any existing writable directory of t...

CVE-2026-19880 Incomplete protection against CVE-2025-11226

Path-traversal vulnerability in QOS.CH Sarl Logback-classic on Java logback-classic module allows path-traversal vulnerability. More specifically, an MDC-based discriminator value flows unsanitized into a nested FileAppender path, letting an attacker who influences that MDC value e.g. via an HTTP...

CVE-2026-19880

CVE-2026-19880 affects Logback-classic (Java) with a path-traversal flaw where an MDC discriminator value flows into a nested FileAppender path, enabling log file creation outside the intended directory. Affected versions: 0.9.14 through 1.6.2. Per linked advisories, the recommended remediation i...

CVE-2026-19829 648540858 wvp-GB28181-pro Log File Download Endpoint LogController.java path traversal

A security flaw has been discovered in 648540858 wvp-GB28181-pro 2.7.4-20260107. This vulnerability affects unknown code of the file LogController.java of the component Log File Download Endpoint. The manipulation of the argument fileName results in path traversal. The attack may be launched...

CVE-2026-19829 648540858 wvp-GB28181-pro Log File Download Endpoint LogController.java path traversal

A security flaw has been discovered in 648540858 wvp-GB28181-pro 2.7.4-20260107. This vulnerability affects unknown code of the file LogController.java of the component Log File Download Endpoint. The manipulation of the argument fileName results in path traversal. The attack may be launched...