CVE-2026-14948: Insertion of Sensitive Information into Log File

A low privileged remote attacker can hijack an active administrative session without needing to know the administrator password by extracting live plaintext session identifiers for authenticated users from downloadable error log archives...

CVE-2026-14163: Insertion of Sensitive Information into Log File

In affected versions of Octopus Server under certain circumstances it is possible for sensitive variables to be printed in the deployment variable snapshot in clear-text...

CVE-2026-64967: Improper Limitation of a Pathname to a Restricted Directory

A path traversal vulnerability in ATutor's error log viewer allows an attacker with administrative privileges to access arbitrary files outside the intended logs directory. This can lead to unauthorized access to sensitive files and other resources accessible to the web server process. Product is...

PT-2026-80204

Summary io.netty.incubator:netty-incubator-codec-ohttp-hpke-classes-boringssl exposes raw HPKE private key bytes in string representations and error messages. BoringSSLAsymmetricCipherKeyPair.toString includes the private-key parameter object, and BoringSSLAsymmetricKeyParameter.toString renders...

JetBrains IntelliJ IDEA < 2026.1.5 Git Credential Disclosure

The version of JetBrains IntelliJ IDEA installed on the remote host is prior to 2026.1.5. It is, therefore, affected by an information disclosure vulnerability: - In JetBrains IntelliJ IDEA before 2026.1.5 Git credentials were written in plaintext to the IDE log. CVE-2026-75057 Note that Nessus h...

Linux Distros Unpatched Vulnerability : CVE-2026-76920

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - 3gpp phone log file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service CVE-2026-76920 Note that Nessus relies on the presence of the...

Insertion of Sensitive Information into Log File

Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File in the logging process. An attacker can obtain sensitive information by accessing logs that may inadvertently contain confidential data. Remediation Upgrade...

Insertion of Sensitive Information into Log File

Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File via the logging process. An attacker can access sensitive information by triggering specific log events under certain conditions. Remediation Upgrade...

Insertion of Sensitive Information into Log File

Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File via the BrokerNotAliveException message when the RabbitMQ management aliveness check fails. An attacker can obtain sensitive credentials by accessing exception messages that are logged,...

Insertion of Sensitive Information into Log File

Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File via the logging. An attacker can access sensitive information by reviewing application logs under certain conditions. Remediation Upgrade org.springframework.cloud:spring-cloud-stream to...

PT-2026-80742

Name of the Vulnerable Software and Affected Versions Ember affected versions not specified Description An unauthenticated remote attacker can inject terminal escape sequences into the operator's terminal user interface TUI by sending HTTP requests with control bytes in the request target to a...

AZL-96812 CVE-2026-76920 affecting package wireshark 4.4.7-2

3gpp phone log file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

DEBIAN-CVE-2026-76920

3gpp phone log file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-76920

3gpp phone log file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-76920

3gpp phone log file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

UBUNTU-CVE-2026-76920

3gpp phone log file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-76920 Out-of-bounds Write in Wireshark

3gpp phone log file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-76920 Out-of-bounds Write in Wireshark

3gpp phone log file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-76920 Out-of-bounds Write in Wireshark

3gpp phone log file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-76920

Wireshark versions 4.6.0–4.6.7 and 4.4.0–4.4.18 contain an out-of-bounds write in the 3GPP phone log file parser, triggered by a crafted log file, causing a denial-of-service crash. CVSS 4.7 (Medium) requires local access and user interaction. No in-the-wild exploitation is reported; upgrade to a...