27500 matches found
CVE-2022-32556
An issue was discovered in Couchbase Server before 7.0.4. A private key is leaked to the log files with certain crashes...
CVE-2022-47356
In log service, there is a missing permission check. This could lead to local denial of service in log service...
CVE-2022-47354
In log service, there is a missing permission check. This could lead to local denial of service in log service...
CVE-2022-47358
In log service, there is a missing permission check. This could lead to local denial of service in log service...
CVE-2022-47359
In log service, there is a missing permission check. This could lead to local denial of service in log service...
CVE-2022-47360
In log service, there is a missing permission check. This could lead to local denial of service in log service...
CVE-2022-47357
In log service, there is a missing permission check. This could lead to local denial of service in log service...
CVE-2022-47355
In log service, there is a missing permission check. This could lead to local denial of service in log service...
CVE-2022-46685
In Jenkins Gitea Plugin 1.4.4 and earlier, the implementation of Gitea personal access tokens did not support credentials masking, potentially exposing them through the build log...
CVE-2022-48319
Sensitive host secret disclosed in cmk-update-agent.log file in Tribe29's Checkmk = 2.1.0p13, Checkmk = 2.0.0p29, and all versions of Checkmk 1.6.0 EOL allows an attacker to gain access to the host secret through the unprotected agent updater log file...
CVE-2022-47767
A backdoor in Solar-Log Gateway products allows remote access via web panel gaining super administration privileges to the attacker. This affects Solar-Log devices that use firmware version v4.2.7 up to v5.1.1 included. This does not exist in SL 200, 500, 1000 / fixed in 4.2.8 for SL 250, 300,...
CVE-2022-45394
A missing permission check in Jenkins Delete log Plugin 1.0 and earlier allows attackers with Item/Read permission to delete build logs...
CVE-2022-45473
In drachtio-server 0.8.18, /var/log/drachtio has mode 0777 and drachtio.log has mode 0666...
CVE-2022-44624
In JetBrains TeamCity version before 2022.10, Password parameters could be exposed in the build log if they contained special characters...
CVE-2022-44587
Insertion of Sensitive Information into Log File vulnerability in WP 2FA allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WP 2FA: from n/a through 2.6.3...
CVE-2022-44356
WAVLINK Quantum D4G WL-WN531G3 running firmware versions M31G3.V5030.201204 and M31G3.V5030.200325 has an access control issue which allows unauthenticated attackers to download configuration data and log files...
📄 ABB Cylon Aspect 3.08.03 logYumLookup.php Path Traversal
The ABB Cylon Aspect BAS controller is vulnerable to an authenticated hybrid path traversal vulnerability in logYumLookup.php due to insufficient validation of the logFile parameter. The script checks for the presence of an expected path /var/log/yum.log using strpos, which can be bypassed by...
📄 ABB Cylon Aspect 3.08.03 Java/PHP Log Forging
Multiple PHP and Java components across the system fail to properly sanitize user-supplied input before including it in application logs. In PHP, files like supervisorProxy.php directly embed values such as $SERVER'REQUESTURI' and raw POST bodies into log messages without filtering, enabling...