32907 matches found
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-11792 389-ds-base: 389-ds-base: heap buffer overflow in audit log password masking (create_masked_entry_string)
A heap buffer overflow flaw was found in 389 Directory Server. When audit logging is enabled, the createmaskedentrystring function in auditlog.c copies a fixed-length password mask into a precisely-sized heap buffer without checking available space. If a short cleartext password is logged requiri...
EUVD-2026-35424
A heap buffer overflow flaw was found in 389 Directory Server. When audit logging is enabled, the createmaskedentrystring function in auditlog.c copies a fixed-length password mask into a precisely-sized heap buffer without checking available space. If a short cleartext password is logged requiri...
CVE-2026-11789
A flaw was found in 389 Directory Server. The SMD5 password storage plugin performs unsigned integer underflow when computing salt length from a crafted password hash shorter than 16 bytes, causing a buffer over-read that crashes the LDAP server during authentication. Mitigation Disable...
CVE-2026-49742
Backend users with file download permissions were able to download files from the fallback storage of the file abstraction layer FAL via the Media Module. Since the fallback storage resolves paths relative to the server's document root, this could expose sensitive files such as log files. This...
CVE-2026-41977
DoS vulnerability in the log service. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-41977
DoS vulnerability in the log service. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-41977
DoS vulnerability in the log service. Impact: Successful exploitation of this vulnerability may affect availability...
EUVD-2026-35363
DoS vulnerability in the log service. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-41977
Technical details about CVE-2026-41977 are not publicly available in the provided documents. Monitor for updates from trusted sources.
PT-2026-47925
Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...
PT-2026-47696
DoS vulnerability in the log service. Impact: Successful exploitation of this vulnerability may affect availability...
PT-2026-47749
Name of the Vulnerable Software and Affected Versions TYPO3 CMS versions 11.0.0 through 11.5.50 TYPO3 CMS versions 12.0.0 through 12.4.45 TYPO3 CMS versions 13.0.0 through 13.4.30 TYPO3 CMS versions 14.0.0 through 14.3.2 Description Backend users with file download permissions can download files...
Huawei EMUI and Huawei HarmonyOS have vulnerabilities related to input validation.
Huawei HarmonyOS EMUI is a microkernel-based distributed operating system developed by Huawei, offering seamless collaboration across devices. There are input validation vulnerabilities in Huawei EMUI and Huawei HarmonyOS. These vulnerabilities stem from the log service’s failure to properly hand...
MongoDB Server log information leakage vulnerability
MongoDB Server is an open-source NoSQL database developed by MongoDB, a US-based company. This database offers features such as collection-oriented storage, dynamic querying, data replication, and automatic failover. There is a vulnerability in MongoDB Server where log information may be leaked...
Microsoft Windows Common Log File System Driver Resource Management Error Vulnerability
The Microsoft Windows Common Log File System Driver provides a high-performance, general-purpose log file subsystem. Dedicated client applications can utilize this subsystem, and multiple clients can share it to optimize log access. The Microsoft Windows Common Log File System Driver has a resour...
TYPO3 CMS path traversal vulnerability
TYPO3 CMS is a content management system developed under the TYPO3 open source framework. Versions 11.0.0 to 11.5.50, 12.0.0 to 12.4.45, 13.0.0 to 13.4.30, and 14.0.0 to 14.3.2 of TYPO3 CMS contain a path traversal vulnerability. This vulnerability arises from backend users with file download...
CVE-2026-9735: Insertion of Sensitive Information into Log File
MongoDB server may log authentication parameters, including credentials, to the server log during SASL authentication. When connection health metric logging is enabled, the full authentication parameters are written to the log without redaction...