Lucene search
+L

122 matches found

Kitploit
Kitploit
•added 2026/10/06 5:08 a.m.•13 views

redact

redact Supprime les contenus ressemblant à des identifiants de chaînes libres avant qu’ils n’atteignent les journaux, la télémétrie ou toute surface tierce Fait partie de laboîte à outils Go phpboyscout — de petits modules Go sans framework, extraits de go-tool-base. Documentation :...

6.2AI score
SaveExploits0References5
EUVD
EUVD
•added 2026/10/05 10:55 p.m.•17 views

EUVD-2026-72672

Snowflake drivers writes sensitive information to logs...

6.5CVSS5.9AI score0.00089EPSS
SaveExploits0References8
NVD
NVD
•added 2026/09/14 9:17 p.m.•23 views

CVE-2026-84513

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. A malicious application may be able to determine...

5.5CVSS0.00159EPSS
SaveExploits0References8
EUVD
EUVD
•added 2026/09/14 8:49 p.m.•69 views

EUVD-2026-77874

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. A malicious application may be able to determine...

5.8AI score0.00159EPSS
SaveExploits0References8
CVE
CVE
•added 2026/09/14 8:49 p.m.•41 views

CVE-2026-84513

A privacy issue was identified where a malicious application could potentially determine a user's current location . The root cause involved a need for improved private data redaction for log entries. This vulnerability is addressed in iOS 26.7 , iPadOS 26.7 , iOS 27 , iPadOS 27 , macOS Golden Ga...

5.5CVSS5.8AI score0.00159EPSS
SaveExploits0References8Affected Software6
Positive Technologies
Positive Technologies
•added 2026/09/14 12:00 a.m.•20 views

PT-2026-91577

Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.7 iPadOS versions prior to 26.7 macOS Golden Gate versions prior to 27 macOS Sequoia versions prior to 15.8 macOS Tahoe versions prior to 26.7 tvOS versions prior to 27 visionOS versions prior to 27 watchOS versions...

5.5CVSS5.8AI score0.00159EPSS
SaveExploits0References11
Snyk
Snyk
•added 2026/09/08 8:43 a.m.•12 views

Insertion of Sensitive Information into Log File

Overview snowflake-connector-python is a Snowflake Connector for Python Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File via the logging process. An attacker can obtain authentication tokens, encryption keys, pre-signed URLs, and SAML assertions...

8.2CVSS5.8AI score0.00089EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/09/08 8:24 a.m.•15 views

CVE-2026-86597 Sensitive information written to logs by Snowflake drivers

Insertion of sensitive information into log files in the Snowflake Python, Go, JDBC, Node.js, PHP PDO, and ODBC drivers allowed authentication tokens, query-result encryption keys, pre-signed cloud-storage URLs, and SAML assertions to be written to diagnostic logs in circumstances where the...

6.5CVSS5.9AI score0.00089EPSS
SaveExploits0References6
CVE
CVE
•added 2026/09/08 8:24 a.m.•51 views

CVE-2026-86597

Snowflake 's Python, Go, JDBC, Node.js, PHP PDO, and ODBC drivers write sensitive data—including authentication tokens, query-result encryption keys, pre-signed cloud-storage URLs, and SAML assertions —to diagnostic logs in paths where available log redaction did not cover all data types. An atta...

6.5CVSS5.9AI score0.00089EPSS
SaveExploits0References6
OSV
OSV
•added 2026/09/08 8:24 a.m.•24 views

CVE-2026-86597 Sensitive information written to logs by Snowflake drivers

Insertion of sensitive information into log files in the Snowflake Python, Go, JDBC, Node.js, PHP PDO, and ODBC drivers allowed authentication tokens, query-result encryption keys, pre-signed cloud-storage URLs, and SAML assertions to be written to diagnostic logs in circumstances where the...

6.5CVSS5.8AI score
SaveExploits0References17
CVE
CVE
•added 2026/08/19 2:01 p.m.•32 views

CVE-2020-37267

Renovate versions >=19.180.0 and

8.7CVSS5.8AI score0.00432EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/08/19 2:01 p.m.•34 views

CVE-2020-37267 Renovate 19.180.0 before 23.25.1 Token Leakage via Logs

Renovate versions =19.180.0 and 23.25.1, when used with Azure DevOps, may expose the bot's authorization token in server or pipeline logs because the git http.extraheader=AUTHORIZATION parameter is logged without redaction. Anyone with access to saved logs could obtain the bot credentials. Fixed ...

8.7CVSS0.00432EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/19 12:00 a.m.•24 views

PT-2026-78371

Renovate versions =19.180.0 and 23.25.1, when used with Azure DevOps, may expose the bot's authorization token in server or pipeline logs because the git http.extraheader=AUTHORIZATION parameter is logged without redaction. Anyone with access to saved logs could obtain the bot credentials. Fixed ...

7.5CVSS5.8AI score0.00432EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/08/07 8:32 p.m.•22 views

EUVD-2026-54653

OpenBao is an open source identity-based secrets management system. Prior to version 2.5.4, OpenBao's inline auth functionality incorrectly redacted audit log entries, resulting in non-auth headers being removed and auth-related headers being retained in cleartext. This requires an attacker to...

5.4CVSS7.2AI score0.0021EPSS
SaveExploits0References5
OSV
OSV
•added 2026/06/09 11:17 p.m.•19 views

UBUNTU-CVE-2026-9735

MongoDB server may log authentication parameters, including credentials, to the server log during SASL authentication. When connection health metric logging is enabled, the full authentication parameters are written to the log without redaction...

6.8CVSS5.9AI score0.00172EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2026/06/09 11:17 p.m.•14 views

CVE-2026-9735

MongoDB server may log authentication parameters, including credentials, to the server log during SASL authentication. When connection health metric logging is enabled, the full authentication parameters are written to the log without redaction...

6.8CVSS5.9AI score0.00172EPSS
SaveExploits0References2
OSV
OSV
•added 2026/05/19 3:40 p.m.•24 views

GHSA-WG5X-3G47-V38R fabric-chaincode-java: TLS Private Key Password Disclosed in INFO Startup Logs in Chaincode-as-a-Service Mode

When chaincode is deployed in chaincode-as-a-service mode with TLS enabled, the chaincode server INFO level logging includes the TLS private key password in plaintext. An attacker with access to the chaincode server logs could recover the TLS private key password. If the attacker can also obtain...

5.5CVSS5.8AI score0.00151EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/05/13 12:08 a.m.•79 views

CVE-2026-8200 Schema validation log messages may not redact user data

When schema validation is enabled on a collection and an update or insert would violate the collection's schema, the local server log message generated may not have all user data redacted. This issue impacts MongoDB Server v7.0 versions prior to 7.0.34, v8.0 versions prior to 8.0.23, v8.2 version...

4.8CVSS0.0034EPSS
SaveExploits0References1
OSV
OSV
•added 2026/05/13 12:08 a.m.•19 views

CVE-2026-8200 Schema validation log messages may not redact user data

When schema validation is enabled on a collection and an update or insert would violate the collection's schema, the local server log message generated may not have all user data redacted. This issue impacts MongoDB Server v7.0 versions prior to 7.0.34, v8.0 versions prior to 8.0.23, v8.2 version...

4.8CVSS6AI score
SaveExploits0References3
MongoDB
MongoDB
•added 2026/05/13 12:08 a.m.•34 views

Schema validation log messages may not redact user data

When schema validation is enabled on a collection and an update or insert would violate the collection's schema, the local server log message generated may not have all user data redacted. This issue impacts MongoDB Server v7.0 versions prior to 7.0.34, v8.0 versions prior to 8.0.23, v8.2 version...

5.3CVSS5.6AI score0.0034EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder