Lucene search
+L

94 matches found

attackerkb
attackerkb
•added 2022/04/19 9:15 p.m.•15 views

CVE-2022-21460

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Logging. Supported versions that are affected are 5.7.37 and prior and 8.0.28 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL...

4.4CVSS6.6AI score0.01322EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
•added 2022/04/19 12:00 a.m.•15 views

PT-2022-3048 · Oracle +8 · Mysql Server +7

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 5.7.37 and prior MySQL Server versions 8.0.28 and prior Description: The issue is related to insufficient input validation in the Server: Logging component of MySQL Server, allowing a high-privileged attacker with networ...

10CVSS6.7AI score0.87816EPSS
SaveExploits22References826
Positive Technologies
Positive Technologies
•added 2022/01/12 12:00 a.m.•15 views

PT-2022-1420 · Cisco · Cisco Adaptive Security Device Manager

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Device Manager ASDM affected versions not specified Description: The issue is related to insufficient protection of registration data in the logging component of Cisco Adaptive Security Device Manager ASDM. This could...

5.5CVSS6.6AI score0.00424EPSS
SaveExploits1References9
osv_ubuntu
osv_ubuntu
•added 2021/10/20 11:17 a.m.•11 views

UBUNTU-CVE-2021-35633

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Logging. Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attac...

2.7CVSS6.5AI score0.01497EPSS
SaveExploits0References4
NVD
NVD
•added 2021/05/18 11:15 a.m.•46 views

CVE-2020-15279

An Improper Access Control vulnerability in the logging component of Bitdefender Endpoint Security Tools for Windows versions prior to 6.6.23.320 allows a regular user to learn the scanning exclusion paths. This issue was discovered during external security research...

4CVSS0.00474EPSS
SaveExploits0References1
Prion
Prion
•added 2021/05/18 11:15 a.m.•26 views

Improper access control

An Improper Access Control vulnerability in the logging component of Bitdefender Endpoint Security Tools for Windows versions prior to 6.6.23.320 allows a regular user to learn the scanning exclusion paths. This issue was discovered during external security research...

2.1CVSS4.1AI score0.00474EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2021/05/18 12:00 a.m.•25 views

PT-2021-9743 · Bitdefender · Bitdefender Endpoint Security Tools For Windows

Name of the Vulnerable Software and Affected Versions: Bitdefender Endpoint Security Tools for Windows versions prior to 6.6.23.320 Description: An Improper Access Control issue in the logging component allows a regular user to learn the scanning exclusion paths. This issue was discovered during...

4CVSS4.1AI score0.00474EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/05/18 12:00 a.m.•9 views

CVE-2020-15279: Improper Access Control

An Improper Access Control vulnerability in the logging component of Bitdefender Endpoint Security Tools for Windows versions prior to 6.6.23.320 allows a regular user to learn the scanning exclusion paths. This issue was discovered during external security research...

4CVSS5.8AI score0.00474EPSS
SaveExploits0References2
Cisco
Cisco
•added 2021/01/13 4:00 p.m.•77 views

Cisco Unified Communications Products Information Disclosure Vulnerability

A vulnerability in the audit logging component of Cisco Unified Communications Manager, Cisco Unified Communications Manager Session Management Edition, Cisco Unified Communications Manager IM & Presence Service, Cisco Unity Connection, Cisco Emergency Responder, and Cisco Prime License Manager...

4.3CVSS5.3AI score0.00919EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2020/11/10 12:00 a.m.•17 views

Oracle Hospitality OPERA Logging Component Full Control

The vulnerability of the Logging component in the Oracle Hospitality OPERA 5 Property Services software solution relates to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to gain full control over the application through the HTTP network protocol...

9CVSS6.9AI score0.01381EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2020/11/10 12:00 a.m.•16 views

Oracle Hospitality OPERA Logging Component Unauthorized Access Data Modification

The vulnerability of the Logging component in the Oracle Hospitality OPERA 5 Property Services software solution relates to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information or to modify, add, or delet...

8.5CVSS6.9AI score0.01469EPSS
SaveExploits0References3Affected Software1
CNVD
CNVD
•added 2020/10/26 12:00 a.m.•14 views

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2020-59059)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. An unspecified vulnerability exists in the Server: Logging component of Oracle MySQL Server 8.0.21 and earlier. An attacker could exploit this...

6.8CVSS7.8AI score0.02233EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2020/10/21 3:15 p.m.•22 views

CVE-2020-14877

Vulnerability in the Oracle Hospitality OPERA 5 Property Services product of Oracle Hospitality Applications component: Logging. Supported versions that are affected are 5.5 and 5.6. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle...

6.5CVSS5.8AI score0.01469EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2020/07/27 12:15 p.m.•33 views

CVE-2020-7694

This affects all versions of package uvicorn. The request logger provided by the package is vulnerable to ASNI escape sequence injection. Whenever any HTTP request is received, the default behaviour of uvicorn is to log its details to either the console or a log file. When attackers request craft...

7.5CVSS7AI score0.01357EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2020/07/14 12:00 a.m.•4 views

PT-2020-3436

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.2.5 through 12.2.9 Description The issue is related to the Logging component of the Oracle Application Object Library product. It allows an unauthenticated attacker with network access via HTTP to compromise...

5.3CVSS0.01205EPSS
SaveExploits0References4
CNVD
CNVD
•added 2020/04/16 12:00 a.m.•6 views

Oracle MySQL Server Denial of Service Vulnerability (CNVD-2020-23470)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A security vulnerability exists in the Server: Logging component of MySQL Server 8.0.18 and earlier versions of Oracle MySQL. An attacker could explo...

4.9CVSS7.8AI score0.02031EPSS
SaveExploits0References1
NVD
NVD
•added 2020/04/08 7:15 p.m.•35 views

CVE-2020-1987

An information exposure vulnerability in the logging component of Palo Alto Networks Global Protect Agent allows a local authenticated user to read VPN cookie information when the troubleshooting logging level is set to "Dump". This issue affects Palo Alto Networks Global Protect Agent 5.0 versio...

3.9CVSS3.7AI score0.00301EPSS
SaveExploits0References1
Prion
Prion
•added 2020/04/08 7:15 p.m.•30 views

Information disclosure

An information exposure vulnerability in the logging component of Palo Alto Networks Global Protect Agent allows a local authenticated user to read VPN cookie information when the troubleshooting logging level is set to "Dump". This issue affects Palo Alto Networks Global Protect Agent 5.0 versio...

2.1CVSS3.5AI score0.00301EPSS
SaveExploits0References1Affected Software1
Palo Alto Networks
Palo Alto Networks
•added 2020/04/08 4:00 p.m.•60 views

GlobalProtect App: VPN cookie local information disclosure

An information exposure vulnerability in the logging component of Palo Alto Networks GlobalProtect App allows a local authenticated user to read VPN cookie information when the troubleshooting logging level is set to "Dump". This issue affects Palo Alto Networks GlobalProtect App 5.0 versions pri...

3.9CVSS2.1AI score0.00301EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/04/08 12:00 a.m.•9 views

CVE-2020-1987: Exposure of Sensitive Information to an Unauthorized Actor

An information exposure vulnerability in the logging component of Palo Alto Networks Global Protect Agent allows a local authenticated user to read VPN cookie information when the troubleshooting logging level is set to "Dump". This issue affects Palo Alto Networks Global Protect Agent 5.0 versio...

3.9CVSS5.4AI score0.00301EPSS
SaveExploits0References3
Rows per page
Query Builder