NULL Pointer Dereference

Overview ogre-python is an Object-Oriented Graphics Rendering Engine - python package Affected versions of this package are vulnerable to NULL Pointer Dereference via the stream function. An attacker can cause a denial of service by manipulating the mDefaultLog argument to trigger a null pointer...

CVE-2025-11017

A vulnerability was detected in OGRECave Ogre up to 14.4.1. The impacted element is the function Ogre::LogManager::stream of the file /ogre/OgreMain/src/OgreLogManager.cpp. Performing manipulation of the argument mDefaultLog results in null pointer dereference. The attack must be initiated from a...

DEBIAN-CVE-2025-11017

A vulnerability was detected in OGRECave Ogre up to 14.4.1. The impacted element is the function Ogre::LogManager::stream of the file /ogre/OgreMain/src/OgreLogManager.cpp. Performing manipulation of the argument mDefaultLog results in null pointer dereference. The attack must be initiated from a...

CVE-2025-11017 OGRECave Ogre OgreLogManager.cpp stream null pointer dereference

A vulnerability was detected in OGRECave Ogre up to 14.4.1. The impacted element is the function Ogre::LogManager::stream of the file /ogre/OgreMain/src/OgreLogManager.cpp. Performing manipulation of the argument mDefaultLog results in null pointer dereference. The attack must be initiated from a...

CVE-2025-11017

A vulnerability was detected in OGRECave Ogre up to 14.4.1. The impacted element is the function Ogre::LogManager::stream of the file /ogre/OgreMain/src/OgreLogManager.cpp. Performing manipulation of the argument mDefaultLog results in null pointer dereference. The attack must be initiated from a...

CVE-2025-11017 OGRECave Ogre OgreLogManager.cpp stream null pointer dereference

A vulnerability was detected in OGRECave Ogre up to 14.4.1. The impacted element is the function Ogre::LogManager::stream of the file /ogre/OgreMain/src/OgreLogManager.cpp. Performing manipulation of the argument mDefaultLog results in null pointer dereference. The attack must be initiated from a...

CVE-2025-11017

CVE-2025-11017 affects OGRECave Ogre up to version 14.4.1. The vulnerability lies in Ogre::LogManager::stream within /ogre/OgreMain/src/OgreLogManager.cpp, where manipulating the mDefaultLog argument can cause a null pointer dereference. The flaw requires local access to exploit. Public exploitat...

Security Bulletin: IBM Lakehouse stores potentially sensitive information in log files that could be read by a local user, affects watsonx.data

Summary IBM Lakehouse stores potentially sensitive information in log files that could be read by a local user. This could affect watsonx.data. Vulnerability Details CVEID:CVE-2025-36144 DESCRIPTION: IBM Lakehouse stores potentially sensitive information in log files that could be read by a local...

CVE-2025-9985

The Featured Image from URL FIFU plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.2.7 through publicly exposed log files. This makes it possible for unauthenticated attackers to view potentially sensitive information contained in the...

CVE-2025-9985 Featured Image from URL (FIFU) <= 5.2.7 - Unauthenticated Information Exposure via Log File

The Featured Image from URL FIFU plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.2.7 through publicly exposed log files. This makes it possible for unauthenticated attackers to view potentially sensitive information contained in the...

CVE-2025-9985 Featured Image from URL (FIFU) <= 5.2.7 - Unauthenticated Information Exposure via Log File

The Featured Image from URL FIFU plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.2.7 through publicly exposed log files. This makes it possible for unauthenticated attackers to view potentially sensitive information contained in the...

CVE-2025-9985

CVE-2025-9985 concerns the WordPress plugin Featured Image from URL (FIFU) , with an unauthenticated information exposure in all versions up to and including 5.2.7 due to publicly exposed log files. The Nuclei template and related sources confirm that unauthenticated attackers can view sensitive ...

PT-2025-39499

Name of the Vulnerable Software and Affected Versions Featured Image from URL FIFU plugin for WordPress versions 5.2.7 and earlier Description The Featured Image from URL FIFU plugin for WordPress is susceptible to Sensitive Information Exposure due to publicly exposed log files. This allows...

WordPress plugin Featured Image from URL 日志信息泄露漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A log information...

PT-2025-39641

Name of the Vulnerable Software and Affected Versions OGRECave Ogre versions prior to 14.4.1 Description A flaw exists in OGRECave Ogre that allows for a null pointer dereference. This occurs due to manipulation of the mDefaultLog argument within the Ogre::LogManager::stream function, located in...

ogre 安全漏洞

ogre is a scene-oriented 3D engine open-sourced by OGRECave. A security vulnerability exists in ogre 14.4.1 and earlier versions, which stems from an incorrect manipulation of the parameter mDefaultLog in the file /ogre/OgreMain/src/OgreLogManager.cpp, which may result in a null pointer dereferen...

Insertion Of Sensitive Information Into Log File

github.com/edgelesssys/contrast vulnerable to Insertion of Sensitive Information into Log File. The vulnerability is due to the logging configuration. An attacker can access sensitive information by exploiting the log output when the log level is set to info or debug...

Deserialization of Untrusted Data

Overview Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the loghandler function of the Ping Handler component in the server process. An attacker can execute arbitrary code or manipulate application behavior by sending specially crafted data to be...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via the loghandler function. An unauthenticated user can access or modify files outside the intended directory by supplying crafted input to the file argument. Details A Directory Traversal attack also known as path...

ml-logger deserialization vulnerability

A vulnerability was determined in geyang ml-logger 0.10.36 and prior. Affected is the function loghandler of the file mllogger/server.py of the component Ping Handler. This manipulation of the argument data causes deserialization. It is possible to initiate the attack remotely. The exploit has be...