4750 matches found
IBM QRadar SIEM 日志信息泄露漏洞
IBM QRadar SIEM is an IBM USA solution that utilizes security intelligence to protect assets and information from advanced threats. The solution provides oversight of the entire scope of the IT architecture, generates detailed reports on data access and user activity, and more. An information...
CVE-2021-38939
IBM QRadar SIEM 7.3, 7.4, and 7.5 stores potentially sensitive information in log files that could be read by an user with access to creating domains. IBM X-Force ID: 211037...
WordPress plugin Easy Digital Downloads 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin. WordPress Easy Digital Downloads plugin is vulnerable to a cross-site scripting vulnerability that stems from...
Insertion of Sensitive Information into Log File
Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File due to a lack of sanitization of exception messages. Remediation Upgrade Microsoft.Rest.ClientRuntime to version 2.3.24 or higher. References - Microsoft Security Advisory - Update Guide ...
CVE-2022-24521
Windows Common Log File System Driver Elevation of Privilege Vulnerability...
CVE-2022-24481
Windows Common Log File System Driver Elevation of Privilege Vulnerability...
CVE-2022-24481
Windows Common Log File System Driver Elevation of Privilege Vulnerability...
Privilege escalation
Windows Common Log File System Driver Elevation of Privilege Vulnerability...
CVE-2022-24521 Windows Common Log File System Driver Elevation of Privilege Vulnerability
...
CVE-2022-24521
CVE-2022-24521 is a Windows Windows Common Log File System Driver Privilege Escalation vulnerability. The CVE entry reports an elevation-of-privilege flaw in the CLFS driver; CVSS scores shown include a 2.0/2.0 base (MEDIUM) on NVD and a 3.1-based HIGH score from Microsoft, both indicating local ...
CVE-2022-24521 Windows Common Log File System Driver Elevation of Privilege Vulnerability
...
CVE-2022-24481
CVE-2022-24481 is a Windows Common Log File System Driver elevation-of-privilege vulnerability. The connected exploit reports describe a memory/counterpart corruption involving CLFS_CONTAINER_CONTEXT.pContainer that can be triggered from CClfsContainer::Close by modifying CLFS_BASE_RECORD_HEADER....
CVE-2022-24481 Windows Common Log File System Driver Elevation of Privilege Vulnerability
...
CVE-2022-24481 Windows Common Log File System Driver Elevation of Privilege Vulnerability
...
The vulnerability of the Common Log File System Driver in the Windows operating system allows a hacker to gain increased privileges.
The vulnerability of the Common Log File System Driver in the Windows operating system is related to privilege management errors. Exploiting this vulnerability can allow an attacker to increase their privileges...
CVE-2022-24521
Windows Common Log File System Driver Elevation of Privilege Vulnerability Recent assessments: cbeek-r7 at March 21, 2025 12:29pm UTC reported: RansomHub affiliate observed in abusing this vulnerability including 3 files that were weaponizing this vulnerability:...
CVE-2022-25165
An issue was discovered in Amazon AWS VPN Client 2.0.0. A TOCTOU race condition exists during the validation of VPN configuration files. This allows parameters outside of the AWS VPN Client allow list to be injected into the configuration file prior to the AWS VPN Client service running as SYSTEM...
Windows Common Log File System Driver Elevation of Privilege Vulnerability
...
