Lucene search
+L

4766 matches found

Cvelist
Cvelist
added 2024/09/27 11:55 a.m.26 views

CVE-2024-8609 Improper Access Control in Oceanic Software's ValeApp

Insertion of Sensitive Information into Log File vulnerability in Oceanic Software ValeApp allows Query System for Information. This issue affects ValeApp: before v2.0.0...

8.8CVSS0.00472EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/09/27 12:00 a.m.13 views

PT-2024-39130

Name of the Vulnerable Software and Affected Versions: ValeApp versions prior to 2.0.0 Description: The issue allows the insertion of sensitive information into a log file, enabling the query system for information. Recommendations: For versions prior to 2.0.0, update to version 2.0.0 or later to...

8.8CVSS5.8AI score0.00472EPSS
SaveExploits0References9
OSV
OSV
added 2024/09/26 2:15 p.m.10 views

CVE-2023-46175

IBM Cloud Pak for Multicloud Management 2.3 through 2.3 FP8 stores user credentials in a log file plain clear text which can be read by a privileged user...

4.9CVSS7.3AI score0.00341EPSS
SaveExploits0References1
NVD
NVD
added 2024/09/26 2:15 p.m.27 views

CVE-2023-46175

IBM Cloud Pak for Multicloud Management 2.3 through 2.3 FP8 stores user credentials in a log file plain clear text which can be read by a privileged user...

4.9CVSS0.00341EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/09/26 1:24 p.m.36 views

CVE-2023-46175 IBM Cloud Pak for Multicloud Management information disclosure

IBM Cloud Pak for Multicloud Management 2.3 through 2.3 FP8 stores user credentials in a log file plain clear text which can be read by a privileged user...

4.4CVSS0.00341EPSS
SaveExploits0References1
CVE
CVE
added 2024/09/26 1:24 p.m.54 views

CVE-2023-46175

CVE-2023-46175 affects IBM Cloud Pak for Multicloud Management (CP4MCM) versions 2.3 through 2.3 FP8. The issue is that credentials are stored in a log file in plain text, which could be read by a privileged user, exposing sensitive data. The available public remediation is to upgrade to version ...

4.9CVSS4.5AI score0.00341EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/09/26 1:24 p.m.14 views

CVE-2023-46175 IBM Cloud Pak for Multicloud Management information disclosure

IBM Cloud Pak for Multicloud Management 2.3 through 2.3 FP8 stores user credentials in a log file plain clear text which can be read by a privileged user...

4.4CVSS6.6AI score0.00341EPSS
SaveExploits0References1
OSV
OSV
added 2024/09/26 11:58 a.m.28 views

USN-7039-1 linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - GPU drivers; - Input Device Tablet drivers; - Modular ISDN driver; - Multiple devices driver; - Network drivers; -...

9.8CVSS6.7AI score0.00735EPSS
SaveExploits1References23
OSV
OSV
added 2024/09/26 4:15 a.m.10 views

CVE-2022-49037

Insertion of sensitive information into log file vulnerability in proxy settings component in Synology Drive Client before 3.3.0-15082 allows remote authenticated users to obtain sensitive information via unspecified vectors...

6.5CVSS5.8AI score0.00547EPSS
SaveExploits0References1
NVD
NVD
added 2024/09/26 4:15 a.m.21 views

CVE-2022-49037

Insertion of sensitive information into log file vulnerability in proxy settings component in Synology Drive Client before 3.3.0-15082 allows remote authenticated users to obtain sensitive information via unspecified vectors...

6.5CVSS0.00547EPSS
SaveExploits0References1
CVE
CVE
added 2024/09/26 3:32 a.m.61 views

CVE-2022-49037

CVE-2022-49037 affects Synology Drive Client before 3.3.0-15082. The vulnerability is an insertion of sensitive information into a log file in the proxy settings component, enabling remote authenticated users to obtain sensitive information via unspecified vectors. Sources from NVD/Red Hat/CVE re...

6.5CVSS6AI score0.00547EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/09/26 3:32 a.m.30 views

CVE-2022-49037

Insertion of sensitive information into log file vulnerability in proxy settings component in Synology Drive Client before 3.3.0-15082 allows remote authenticated users to obtain sensitive information via unspecified vectors...

6.5CVSS0.00547EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/09/26 3:32 a.m.13 views

CVE-2022-49037

Insertion of sensitive information into log file vulnerability in proxy settings component in Synology Drive Client before 3.3.0-15082 allows remote authenticated users to obtain sensitive information via unspecified vectors...

6.5CVSS6AI score0.00547EPSS
SaveExploits0References1
NVD
NVD
added 2024/09/25 3:15 p.m.38 views

CVE-2024-43990

Insertion of Sensitive Information into Log File vulnerability in StylemixThemes Masterstudy LMS Starter.This issue affects Masterstudy LMS Starter: from n/a through 1.1.8...

5.3CVSS0.00367EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/09/25 2:47 p.m.29 views

CVE-2024-43990 WordPress Masterstudy LMS Starter theme <= 1.1.8 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information into Log File vulnerability in StylemixThemes Masterstudy LMS Starter.This issue affects Masterstudy LMS Starter: from n/a through 1.1.8...

5.3CVSS5.4AI score0.00367EPSS
SaveExploits0References1
CVE
CVE
added 2024/09/25 2:47 p.m.71 views

CVE-2024-43990

CVE-2024-43990 (Masterstudy LMS Starter) describes an unauthenticated sensitive information exposure caused by insertion of data into log files. The vulnerability affects Masterstudy LMS Starter versions up to and including 1.1.8. Public sources in the Connected documents indicate this is a WordP...

5.3CVSS5.7AI score0.00367EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/09/25 2:47 p.m.49 views

CVE-2024-43990 WordPress Masterstudy LMS Starter theme <= 1.1.8 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information into Log File vulnerability in StylemixThemes Masterstudy LMS Starter.This issue affects Masterstudy LMS Starter: from n/a through 1.1.8...

5.3CVSS0.00367EPSS
SaveExploits0References1
Amazon
Amazon
added 2024/09/18 12:00 a.m.26 views

Low: systemd

Issue Overview: An issue was discovered in systemd 253. An attacker can modify the contents of past events in a sealed log file and then adjust the file such that checking the integrity shows no error, despite modifications. NOTE: the vendor reportedly sent "a reply denying that any of the findin...

5.3CVSS5.2AI score0.00349EPSS
SaveExploits0
OSV
OSV
added 2024/09/14 11:07 a.m.7 views

OESA-2024-2132 clamav security update

Clam AntiVirus clamav is an open source antivirus engine for detecting trojans, viruses, malware & other malicious threats. The main purpose of this software is the integration with mail servers attachment scanning. The package provides a flexible and scalable multi-threaded daemon, a command lin...

6.1CVSS6.8AI score0.00555EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2024/09/12 6:26 p.m.50 views

CVE-2024-4472 Insertion of Sensitive Information into Log File in GitLab

An issue was discovered in GitLab CE/EE affecting all versions starting from 16.5 prior to 17.1.7, starting from 17.2 prior to 17.2.5, and starting from 17.3 prior to 17.3.2, where dependency proxy credentials are retained in graphql Logs...

4CVSS0.00216EPSS
SaveExploits0References2
Rows per page
Query Builder