Lucene search
+L

13 matches found

NVD
NVD
•added 2026/10/01 11:17 a.m.•9 views

CVE-2026-78242

Insertion of sensitive information into log file vulnerability in Apache APISIX. This vulnerability can cause the unmasked header value to be written to the log sink under a certain response structure. This issue affects Apache APISIX: 3.17.0. Users are recommended to upgrade to version 3.18.0,...

5.7CVSS0.00152EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/10/01 10:58 a.m.•6 views

EUVD-2026-90763

Insertion of sensitive information into log file vulnerability in Apache APISIX. This vulnerability can cause the unmasked header value to be written to the log sink under a certain response structure. This issue affects Apache APISIX: 3.17.0. Users are recommended to upgrade to version 3.18.0,...

5.7CVSS5.8AI score0.00152EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/12 1:58 p.m.•14 views

EUVD-2026-57215

Admidio is an open-source user management solution. Prior to version 5.0.10, when debug logging is enabled, Session::setCookie logs full cookie values and Session::start logs the current session ID. In a real Admidio deployment this includes both the active session cookie and the persistent...

4.4CVSS5.3AI score0.00172EPSS
SaveExploits0References3
CVE
CVE
•added 2026/08/12 1:58 p.m.•57 views

CVE-2026-47234

CVE-2026-47234 affects Admidio before 5.0.10. When debug logging is enabled, Admidio logs raw cookie values and the active session ID via Session::setCookie() and Session::start(), exposing live session tokens (including auto-login cookies) in application logs. This creates a local/credential-sto...

4.4CVSS5.9AI score0.00172EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/05/29 12:00 a.m.•29 views

PT-2026-45044

Name of the Vulnerable Software and Affected Versions Admidio versions prior to 5.0.10 Description When debug logging is enabled, the application logs sensitive credentials in cleartext. Specifically, the Session::setCookie function logs full cookie values and the Session::start function logs the...

4.4CVSS5.4AI score0.00172EPSS
SaveExploits0References7
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•21 views

EUVD-2005-0361

Malware in sbrugna...

5CVSS6.4AI score0.12333EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/05/21 9:07 p.m.•12 views

CVE-2005-0360

The Microsoft Log Sink Class ActiveX control in pkmcore.dll is marked as "safe for scripting" for Internet Explorer, which allows remote attackers to create or append to arbitrary files...

5CVSS7.2AI score0.12333EPSS
SaveExploits0References1
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•22 views

Microsoft Log Sink Class ActiveX Control Arbitrary File Creation Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/12646/info Microsoft Log Sink Class ActiveX control can allow remote attackers to create arbitrary files on an affected computer. A remote attacker can exploit this issue by crafting a malicious Web site that triggers thi...

7.1AI score
SaveExploits0
NVD
NVD
•added 2005/07/05 4:00 a.m.•23 views

CVE-2005-0360

The Microsoft Log Sink Class ActiveX control in pkmcore.dll is marked as "safe for scripting" for Internet Explorer, which allows remote attackers to create or append to arbitrary files...

5CVSS6.8AI score0.12333EPSS
SaveExploits0References1
CVE
CVE
•added 2005/07/01 4:00 a.m.•51 views

CVE-2005-0360

The CVE-2005-0360 issue involves the Microsoft Log Sink Class ActiveX control in pkmcore.dll, which is marked as unsafe for scripting yet is labeled safe for scripting. The ActiveX control can create or append to arbitrary files on the local file system when exploited via Internet Explorer, enabl...

5CVSS6.8AI score0.12333EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2005/07/01 4:00 a.m.•45 views

CVE-2005-0360

The Microsoft Log Sink Class ActiveX control in pkmcore.dll is marked as "safe for scripting" for Internet Explorer, which allows remote attackers to create or append to arbitrary files...

6.8AI score0.12333EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/07/01 12:00 a.m.•5 views

CVE-2005-0360: Undefined Security Weakness

The Microsoft Log Sink Class ActiveX control in pkmcore.dll is marked as "safe for scripting" for Internet Explorer, which allows remote attackers to create or append to arbitrary files...

5CVSS5.9AI score0.12333EPSS
SaveExploits0References1
exploitpack
exploitpack
•added 2003/04/29 12:00 a.m.•45 views

Microsoft Log Sink Class - ActiveX Control Arbitrary File Creation

Microsoft Log Sink Class - ActiveX Control Arbitrary File Creation source: https://www.securityfocus.com/bid/12646/info Microsoft Log Sink Class ActiveX control can allow remote attackers to create arbitrary files on an affected computer. A remote attacker can exploit this issue by crafting a...

0.5AI score
SaveExploits0
Rows per page
Query Builder