CVE-2022-39289 Database log access in ZoneMinder

ZoneMinder is a free, open source Closed-circuit television software application. In affected versions the ZoneMinder API Exposes Database Log contents to user without privileges, allows insertion, modification, deletion of logs without System Privileges. Users are advised yo upgrade as soon as...

ASUS Armoury Crate Service Symbolic Link Replacement Vulnerability

ASUS Armoury Crate Service is a software utility from ASUS China designed to provide centralized control of supported ROG gaming products. An attacker could use the vulnerability to modify the log file attributes to symbolic links to arbitrary system files, causing the logging function to overwri...

The vulnerability of the centralized system for managing emergency messages and events in CAMS for HIS distributed control systems CENTUM VP and CENTUM VP Entry Class, along with the OPC-server Exaopc, allows a intruder to cause service failures or modify the log files on the server.

The vulnerability of the centralized system for managing emergency messages and events in CAMS for HIS distributed control systems CENTUM VP and CENTUM VP Entry Class, along with the OPC-server Exaopc, stems from improper processing of output data for registration logs. Exploiting this...

CVE-2021-33706

Due to improper input validation in InfraBox, logs can be modified by an authenticated user...

SAP InfraBox 输入验证错误漏洞

SAP InfraBox is a cloud-native Continuous Integration system from SAP, a German company specializing in serverless computing platforms for CI/CD. It can build, deploy, and test software projects. An input validation error vulnerability exists in SAP InfraBox that stems from incorrect input...

Identity Manager Log Modification Vulnerability

Identity Manager 4.5 is a comprehensive identity management suite that provides an intelligent identity management framework that allows users to maintain enterprise-grade control by managing, configuring and de-configuring identities within the firewall and extending to the cloud. Identity Manag...

Cisco Firepower Threat Defense Log Modification Vulnerability

Cisco Firepower is a firewall device developed by Cisco. A security vulnerability in the Cisco Firepower Threat Defense logging subsystem allows an unauthenticated remote attacker to exploit the vulnerability to add arbitrary entries to the logging system...

Backdoor Vulnerability in Juniper Networks ScreenOS (CNVD-2015-08307)

ScreenOS is an operating system developed by Juniper Networks that runs on the NetScreen family of firewall products. An unauthorized access vulnerability exists in Juniper Networks ScreenOS, which can be exploited by an attacker to remotely gain administrative access to the device via SSH or...

CVE-2014-2748

Technical details about CVE-2014-2748 are not provided in the supplied documents. No concrete information on affected product versions, vulnerable component, root cause, exploit vectors, or fixes is available here. Monitor for updated advisories.

CVE-2007-6081: Undefined Security Weakness

AdventNet EventLog Analyzer build 4030 for Windows, and possibly other versions and platforms, installs a mysql instance with a default "root" account without a password, which allows remote attackers to gain privileges and modify logs. Fixed in EventLog Analyzer Build 6000...

CVE-2006-4991: Undefined Security Weakness

RSA Keon Certificate Authority KeonCA Manager 6.5.1 and 6.6 allows privileged local users to hide malicious Certificate Authority CA activities by modifying CA auditor logs without detection by 1 modifying or deleting a and its signature from the XML log in a way that is not detected by the...

CVE-2003-1122: Undefined Security Weakness

ScriptLogic 4.01, and possibly other versions before 4.14, uses insecure permissions for the LOGS$ share, which allows users to modify log records and possibly execute arbitrary code...

CVE-2003-1122

ScriptLogic 4.01, and possibly other versions before 4.14, uses insecure permissions for the LOGS$ share, which allows users to modify log records and possibly execute arbitrary code...

ScriptLogic sets insecure permissions on "LOGS$" share

Overview Version 4.01 of ScriptLogic contains a vulnerability in the default permissions assigned to the network share used for logging. Description The ScriptLogic product from ScriptLogic, Inc. provides remote system administration capabilities for Microsoft Windows systems in a domain...