14 matches found
EUVD-2023-58400
Malicious code in bioql PyPI...
CVE-2025-48732
creationtimestamp| type| source ---|---|--- 2025-07-24 15:30:39+00:00| seen| https://infosec.place/objects/1c2ba354-6485-41ba-87a8-27b23891ead6...
CVE-2025-5244
creationtimestamp| type| source ---|---|--- 2025-05-27 13:48:24+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17633 2025-05-27 14:50:03+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq5wlfnjiz22...
CVE-2022-41329
An exposure of sensitive information to an unauthorized actor vulnerability CWE-200 in Fortinet FortiProxy version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.7, FortiOS version 7.2.0 through 7.2.3 and 7.0.0 through 7.0.9 allows an unauthenticated attackers to obtain sensitive logging informations ...
CVE-2024-27397
creationtimestamp| type| source ---|---|--- 2025-01-14 04:20:53+00:00| seen| https://bsky.app/profile/dinosn.bsky.social/post/3lfofldj2b22d 2025-01-14 06:20:12+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lfomaubh2k2x 2025-01-14 08:51:49+00:00| seen|...
Cross site scripting
A Qualys web application was found to have a stored XSS vulnerability resulting from the absence of HTML encoding in the presentation of logging information to users. This vulnerability allowed a user with login access to the application to introduce XSS payload via browser details...
CVE-2023-6146 Stored XSS Vulnerability in QualysGuard VM/PC
A Qualys web application was found to have a stored XSS vulnerability resulting from the absence of HTML encoding in the presentation of logging information to users. This vulnerability allowed a user with login access to the application to introduce XSS payload via browser details...
CVE-2023-6146 Stored XSS Vulnerability in QualysGuard VM/PC
A Qualys web application was found to have a stored XSS vulnerability resulting from the absence of HTML encoding in the presentation of logging information to users. This vulnerability allowed a user with login access to the application to introduce XSS payload via browser details...
Fortinet FortiOS - Information Disclosure (FG-IR-22-364)
The version of FortiOS installed on the remote host is therefore, affected by a information disclosure vulnerability. An exposure of sensitive information to an unauthorized actor vulnerability in FortiOS and FortiProxy may allow an unauthenticated attacker to obtain sensitive logging information...
Protect
An exposure of sensitive information to an unauthorized actor vulnerability CWE-200 in FortiOS and FortiProxy administrative interface may allow an unauthenticated attacker to obtain sensitive logging information on the device via crafted HTTP or HTTPs GET requests...
CVE-2022-27895 A component in Foundry logging was found to be capturing sensitive information in logs.
Information Exposure Through Log Files vulnerability discovered in Foundry when logs were captured using an underlying library known as Build2. This issue was present in versions earlier than 1.785.0. Upgrade to Build2 version 1.785.0 or greater...
CVE-2022-29869
cifs-utils through 6.14, with verbose logging, can cause an information leak when a file contains = equal sign characters but is not a valid credentials file...
openSUSE Security Update : java-1_6_0-openjdk (java-1_6_0-openjdk-1613)
New icedtea update to fix : - ICCProfile file existence detection information leak; CVE-2009-3728: CVSS v2 Base Score: 5.0 - BMP parsing DoS with UNC ICC links; CVE-2009-3885: CVSS v2 Base Score: 5.0 - resurrected classloaders can still have children; CVE-2009-3881: CVSS v2 Base Score: 7.5 -...
CVE-2000-0818
The default installation for the Oracle listener program 7.3.4, 8.0.6, and 8.1.6 allows an attacker to cause logging information to be appended to arbitrary files and execute commands via the SET TRCFILE or SET LOGFILE commands...