Lucene search
+L

112 matches found

Positive Technologies
Positive Technologies
•added 2026/01/23 12:00 a.m.•3 views

PT-2026-34587

Уязвимость подсистемы журналирования системы управления базами данных «Ред База Данных» связана с недостаточной защитой регистрационных данных. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, получить несанкционированный доступ к конфиденциальной информации...

4.3CVSS5.8AI score
SaveExploits0References2
osv_cve
osv_cve
•added 2026/01/17 2:15 a.m.•25 views

CVE-2026-0519

In Secure Access 12.70 and prior to 14.20, the logging subsystem may write an unredacted authentication token to logs under certain configurations. Any party with access to those logs could read the token and reuse it to access an integrated system...

3.4CVSS5.9AI score0.00135EPSS
SaveExploits0References1
NVD
NVD
•added 2026/01/17 2:15 a.m.•30 views

CVE-2026-0519

In Secure Access 12.70 and prior to 14.20, the logging subsystem may write an unredacted authentication token to logs under certain configurations. Any party with access to those logs could read the token and reuse it to access an integrated system...

4.6CVSS0.00135EPSS
SaveExploits0References1
CVE
CVE
•added 2026/01/17 1:13 a.m.•65 views

CVE-2026-0519

CVE-2026-0519 : In Secure Access 12.70 and earlier than 14.20, the logging subsystem may write an unredacted authentication token to logs under certain configurations. This could allow any party with access to those logs to read the token and reuse it to access an integrated system. The provided ...

4.6CVSS5.9AI score0.00135EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/17 12:00 a.m.•7 views

CVE-2026-0519: Insertion of Sensitive Information into Log File

In Secure Access 12.70 and prior to 14.20, the logging subsystem may write an unredacted authentication token to logs under certain configurations. Any party with access to those logs could read the token and reuse it to access an integrated system...

4.6CVSS5.9AI score0.00135EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•21 views

EUVD-2021-0154

Malware in sbrugna...

6.5CVSS6.6AI score0.01503EPSS
SaveExploits1References7
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•25 views

EUVD-2017-9154

Malware in sbrugna...

6.1CVSS6.3AI score0.02307EPSS
SaveExploits2References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•24 views

EUVD-2017-12939

Malware in sbrugna...

5.3CVSS5.8AI score0.01491EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2017-15760

Malware in sbrugna...

5.1CVSS5.8AI score0.00384EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•18 views

EUVD-2021-6750

Malicious code in bioql PyPI...

5.5CVSS5.9AI score0.00287EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•16 views

EUVD-2024-18222

Malicious code in bioql PyPI...

6.5CVSS5.4AI score0.00385EPSS
SaveExploits0References1
Amazon
Amazon
•added 2025/06/12 12:00 a.m.•18 views

Medium: python3-tornado

Issue Overview: Tornado is a Python web framework and asynchronous networking library. When Tornado's multipart/form-data parser encounters certain errors, it logs a warning but continues trying to parse the remainder of the data. This allows remote attackers to generate an extremely high volume ...

7.5CVSS7.2AI score0.00745EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2025/06/12 12:00 a.m.•23 views

Amazon Linux 2023 : python3-tornado (ALAS2023-2025-1002)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-1002 advisory. Tornado is a Python web framework and asynchronous networking library. When Tornado's multipart/form- data parser encounters certain errors, it logs a warning but continues trying to parse the remainde...

7.5CVSS6.9AI score0.00745EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2025/06/12 12:00 a.m.•22 views

Amazon Linux 2 : python3-tornado (ALAS-2025-2889)

The version of python3-tornado installed on the remote host is prior to 5.0.2-4. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-2889 advisory. Tornado is a Python web framework and asynchronous networking library. When Tornado's multipart/form- data parser encounter...

7.5CVSS6.9AI score0.00745EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2025/06/12 12:00 a.m.•23 views

Amazon Linux 2 : python-tornado (ALAS-2025-2888)

The version of python-tornado installed on the remote host is prior to 4.2.1-3. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-2888 advisory. Tornado is a Python web framework and asynchronous networking library. When Tornado's multipart/form- data parser encounters...

7.5CVSS6.9AI score0.00745EPSS
SaveExploits0References4
Amazon
Amazon
•added 2025/06/10 12:00 a.m.•15 views

Medium: python-tornado

Issue Overview: Tornado is a Python web framework and asynchronous networking library. When Tornado's multipart/form-data parser encounters certain errors, it logs a warning but continues trying to parse the remainder of the data. This allows remote attackers to generate an extremely high volume ...

7.5CVSS7.3AI score0.00745EPSS
SaveExploits0
osv_oesa
osv_oesa
•added 2025/06/06 11:08 a.m.•22 views

OESA-2025-1614 python-tornado security update

Tornado is an open source version of the scalable, non-blocking web server and tools. Security Fixes: Tornado is a Python web framework and asynchronous networking library. When Tornado's multipart/form-data parser encounters certain errors, it logs a warning but continues trying to parse the...

7.5CVSS6.8AI score0.00745EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/05/23 12:00 a.m.•35 views

Python Library Tornado 6.5.0 DoS

The detected version of the Tornado Python package, Tornado, is prior to 6.4.2. It is therefore affected by a DoS vulnerability that happens When Tornado's multipart/form-data parser encounters certain errors, it logs a warning but continues trying to parse the remainder of the data. This allows...

7.5CVSS6.9AI score0.00745EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2025/05/15 9:17 p.m.•22 views

CVE-2025-47287

Tornado is a Python web framework and asynchronous networking library. When Tornado's multipart/form-data parser encounters certain errors, it logs a warning but continues trying to parse the remainder of the data. This allows remote attackers to generate an extremely high volume of logs,...

7.5CVSS7.4AI score0.00745EPSS
SaveExploits0
osv_cve
osv_cve
•added 2024/11/06 5:15 p.m.•23 views

CVE-2024-20507

A vulnerability in the logging subsystem of Cisco Meeting Management could allow an authenticated, remote attacker to view sensitive information in clear text on an affected system. This vulnerability is due to improper storage of sensitive information within the web-based management interface of...

6.5CVSS5.8AI score0.00385EPSS
SaveExploits0References1
Rows per page
Query Builder