Design/Logic Flaw

A flaw was found in the PKI-server, where the spkispawn command, when run in debug mode, stores admin credentials in the installation log file. This flaw allows a local attacker to retrieve the file to obtain the admin password and gain admin privileges to the Dogtag CA manager. The highest threa...

CVE-2021-3551

A flaw was found in the PKI-server, where the spkispawn command, when run in debug mode, stores admin credentials in the installation log file. This flaw allows a local attacker to retrieve the file to obtain the admin password and gain admin privileges to the Dogtag CA manager. The highest threa...

CVE-2021-3551

CVE-2021-3551 is described in connected documents as a vulnerability in the PKI-server where the spkispawn command, when run in debug mode, stores admin credentials in the installation log file. This allows a local attacker to retrieve the log and obtain the admin password, enabling admin privile...

The vulnerability of the Windows Common Log File System Driver in the Windows operating system allows a hacker to cause a service failure.

The vulnerability of the Windows Common Log File System Driver exists due to insufficient checking of input data. Exploiting this vulnerability can allow a hacker to cause system failures...

WordPress Error Log Viewer 1.1.1 Plugin - Arbitrary File Clearing (Authenticated) Vulnerability

Exploit Title: WordPress Plugin Error Log Viewer 1.1.1 - Arbitrary File Clearing Authenticated Exploit Author: Ceylan Bozogullarindan Exploit Website: https://bozogullarindan.com Vendor Homepage: https://bestwebsoft.com/ Software Link:...

Wildfly logs plaintext passwords

A flaw was discovered in WildFly before 21.0.0.Final where, Resource adapter logs plain text JMS password at warning level on connection error, inserting sensitive information in the log file...

EulerOS Virtualization 3.0.6.0 : cloud-init (EulerOS-SA-2022-1058)

According to the versions of the cloud-init package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - When instructing cloud-init to set a random password for a new user account, versions before 21.2 would write that password to...

CVE-2022-0021

An information exposure through log file vulnerability exists in the Palo Alto Networks GlobalProtect app on Windows that logs the cleartext credentials of the connecting GlobalProtect user when authenticating using Connect Before Logon feature. This issue impacts GlobalProtect App 5.2 versions...

CVE-2022-0021

Palo Alto Networks GlobalProtect App for Windows is affected by CVE-2022-0021. The vulnerability arises from an information exposure in the log files where cleartext credentials of the connected GlobalProtect user are logged during authentication via Connect Before Logon. Affected product/version...

The vulnerability of the Windows Common Log File System, a system for journaling on Windows operating systems, allows attackers to escalate their privileges.

The vulnerability of the Windows Common Log File System in the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the Windows Common Log File System (CLFS) driver in Windows operating systems allows a hacker to gain elevated privileges.

The vulnerability of the Windows Common Log File System CLFS driver in Windows operating systems is related to privilege management errors. Exploiting this vulnerability can allow an attacker to increase their privileges...

GHSA-J667-C2HM-F2WP Insertion of Sensitive Information into Log File and Improper Output Neutralization for Logs in ansible

A flaw was found in the Ansible Engine when using moduleargs. Tasks executed with check mode --check-mode do not properly neutralize sensitive data exposed in the event data. This flaw allows unauthorized users to read this data. The highest threat from this vulnerability is to confidentiality...

CVE-2022-22710

Windows Common Log File System Driver Denial of Service Vulnerability...

CVE-2022-22710

Windows Common Log File System Driver Denial of Service Vulnerability...

CVE-2022-22000

Windows Common Log File System Driver Elevation of Privilege Vulnerability...

CVE-2022-21998

Windows Common Log File System Driver Information Disclosure Vulnerability...

CVE-2022-21998

Windows Common Log File System Driver Information Disclosure Vulnerability...

CVE-2022-22000

Windows Common Log File System Driver Elevation of Privilege Vulnerability...

CVE-2022-21998

Windows Common Log File System Driver Information Disclosure Vulnerability...

CVE-2022-22000

Windows Common Log File System Driver Elevation of Privilege Vulnerability...