27385 matches found
CVE-2025-3831
CVE-2025-3831 affects Check Point Harmony SASE agent. The root cause was a shared SFTP key embedded in the software with read/list permissions, granting broader access than intended to log files uploaded during troubleshooting. This could allow unauthorized parties to access logs (potentially inc...
CVE-2025-42935
The SAP NetWeaver Application Server ABAP and ABAP Platform Internet Communication Manager ICM permits authorized users with admin privileges and local access to log files to read sensitive information, resulting in information disclosure. This leads to high impact on the confidentiality of the...
CVE-2025-42935 Information Disclosure vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform(Internet Communication Manager)
The SAP NetWeaver Application Server ABAP and ABAP Platform Internet Communication Manager ICM permits authorized users with admin privileges and local access to log files to read sensitive information, resulting in information disclosure. This leads to high impact on the confidentiality of the...
CVE-2025-42935 Information Disclosure vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform(Internet Communication Manager)
The SAP NetWeaver Application Server ABAP and ABAP Platform Internet Communication Manager ICM permits authorized users with admin privileges and local access to log files to read sensitive information, resulting in information disclosure. This leads to high impact on the confidentiality of the...
CVE-2025-42935
The CVE-2025-42935 entry concerns SAP NetWeaver Application Server ABAP and ABAP Platform Internet Communication Manager (ICM). The vulnerability is an information disclosure where authorized users with admin privileges and local access can read sensitive information from log files, impacting con...
PT-2025-32734 · Intel · Intel Local Manageability Service
Name of the Vulnerable Software and Affected Versions: IntelR Local Manageability Service versions prior to 2514.7.16.0 Description: Insertion of sensitive information into a log file may allow an authenticated user to potentially enable information disclosure via local access. Recommendations:...
Check Point Response to CVE-2025-3831 - Exposed SFTP server
Cause The agent used a shared SFTP key embedded in the software to upload diagnostic logs. The key was granted permission to read and list files on the server, rather than restricted to upload-only access. As a result, anyone possessing the key could access log files uploaded by other customers...
Linux Distros Unpatched Vulnerability : CVE-2024-47252
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient escaping of user-supplied data in modssl in Apache HTTP Server 2.4.63 and earlier allows an untrusted SSL/TLS client to insert escape characters in...
Check Point Harmony SASE 安全漏洞
Check Point Harmony SASE is a Secure Access Service edge application from Check Point Israel. A security vulnerability exists in Check Point Harmony SASE that stems from improper log file access control, which could lead to information disclosure...
SAP Internet Communication Manager和SAP NetWeaver Application Server ABAP 日志信息泄露漏洞
SAP Internet Communication Manager SAP ICM and SAP NetWeaver Application Server ABAP are products of SAP, Germany.SAP Internet Communication Manager is an SAP SAP Internet Communication Manager is an SAP NetWeaver Application Server component. It is used to receive and send Web requests HTTP,...
PT-2025-32673 · Check Point · Harmony Sase Agent
Name of the Vulnerable Software and Affected Versions: Harmony SASE agent affected versions not specified Description: Log files uploaded during troubleshooting by the Harmony SASE agent may have been accessible to unauthorized parties. Recommendations: At the moment, there is no information abou...
PT-2025-32601 · Sap · Abap Platform Internet Communication Manager +1
Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Application Server ABAP and ABAP Platform Internet Communication Manager ICM affected versions not specified Description: The Internet Communication Manager ICM component allows authorized users with administrator privileges and...
Intel Local Manageability Service 日志信息泄露漏洞
Intel Local Manageability Service is a management engine from Intel Corporation USA designed to help IT administrators manage computers and devices in an organization over a local network or remote connection. A log information disclosure vulnerability exists in Intel Local Manageability Service...
Linux Distros Unpatched Vulnerability : CVE-2020-25815
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in MediaWiki 1.32.x through 1.34.x before 1.34.4. LogEventList::getFiltersDesc is insecurely using message text to build options names f...
Stable Channel Update for Desktop
The Stable channel has been updated to 139.0.7258.127/.128 for Windows, Mac and 139.0.7258.127 for Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log. Security Fixes and Rewards Note: Access to bug details and links may be kept...
Linux Distros Unpatched Vulnerability : CVE-2024-35982
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - batman-adv: Avoid infinite loop trying to resize local TT If the MTU of one of an attached interface becomes too small to transmit the local translation table...
Improper Output Neutralization for Logs
Overview litestar is a Litestar - A production-ready, highly performant, extensible ASGI API Framework Affected versions of this package are vulnerable to Improper Output Neutralization for Logs via the exception logging process. An attacker can manipulate log files and forge log entries by...
Litestar has potential log injection in exception logging
Summary Litestar does not escape url paths when logging exceptions. This makes logger vulnerable to CRLF injection if logging level is configured to debug or logexceptions is set to "always", which allows attackers to inject newlines and forge log entries. Details Litestar directly formats unquot...
GHSA-674P-XV2X-RF3G Litestar has potential log injection in exception logging
Summary Litestar does not escape url paths when logging exceptions. This makes logger vulnerable to CRLF injection if logging level is configured to debug or logexceptions is set to "always", which allows attackers to inject newlines and forge log entries. Details Litestar directly formats unquot...