Lucene search
+L

10556 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/09 12:00 a.m.•6 views

CVE-2026-22198: Improper Neutralization of Input During Web Page Generation

GestSup versions prior to 3.2.60 contain a pre-authentication stored cross-site scripting XSS vulnerability in the API error logging functionality. By sending an API request with a crafted X-API-KEY header value for example, to /api/v1/ticket.php, an unauthenticated attacker can cause...

6.1CVSS5.8AI score0.00294EPSS
SaveExploits0References1
NVD
NVD
•added 2026/01/08 3:15 p.m.•16 views

CVE-2026-22041

Logging Redactor is a Python library designed to redact sensitive data in logs based on regex patterns and / or dictionary keys. Prior to version 0.0.6, non-string types are converted into string types, leading to type errors in %d conversions. The problem has been patched in version 0.0.6. No...

5.3CVSS0.00271EPSS
SaveExploits1References3
CVE
CVE
•added 2026/01/08 2:52 p.m.•40 views

CVE-2026-22041

CVE-2026-22041 affects the Python library Logging Redactor. Prior to version 0.0.6, non-string data are coerced to strings, causing type errors in %d formatting. The issue is fixed in 0.0.6; multiple sources corroborate this patch. No exploit details are provided in the documents. Remediation: up...

5.3CVSS5.8AI score0.00271EPSS
SaveExploits1References3Affected Software1
EUVD
EUVD
•added 2026/01/08 2:52 p.m.•15 views

EUVD-2026-1160

Logging Redactor is a Python library designed to redact sensitive data in logs based on regex patterns and / or dictionary keys. Prior to version 0.0.6, non-string types are converted into string types, leading to type errors in %d conversions. The problem has been patched in version 0.0.6. No...

5.1CVSS6.3AI score0.00271EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2026/01/08 2:52 p.m.•4 views

CVE-2026-22041 loggingredactor converts non-string types to string types in logs

Logging Redactor is a Python library designed to redact sensitive data in logs based on regex patterns and / or dictionary keys. Prior to version 0.0.6, non-string types are converted into string types, leading to type errors in %d conversions. The problem has been patched in version 0.0.6. No...

5.1CVSS5.8AI score0.00271EPSS
SaveExploits1References3
OSV
OSV
•added 2026/01/08 2:52 p.m.•15 views

CVE-2026-22041 loggingredactor converts non-string types to string types in logs

Logging Redactor is a Python library designed to redact sensitive data in logs based on regex patterns and / or dictionary keys. Prior to version 0.0.6, non-string types are converted into string types, leading to type errors in %d conversions. The problem has been patched in version 0.0.6. No...

5.1CVSS6.5AI score
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2026/01/08 3:14 a.m.•16 views

CVE-2025-47346

Memory corruption while processing a secure logging command in the trusted application...

7.8CVSS7.2AI score0.00081EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/01/08 12:00 a.m.•15 views

Logging Redactor 安全漏洞

Logging Redactor is a Python library by Arman Jasuja Individual Developer for editing sensitive data in logs. A security vulnerability exists in Logging Redactor versions prior to 0.0.6, which stems from the conversion of a non-string type to a string type, which may result in a type error...

5.3CVSS6.4AI score0.00271EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/08 12:00 a.m.•4 views

CVE-2026-22041: Incorrect Type Conversion or Cast

Logging Redactor is a Python library designed to redact sensitive data in logs based on regex patterns and / or dictionary keys. Prior to version 0.0.6, non-string types are converted into string types, leading to type errors in %d conversions. The problem has been patched in version 0.0.6. No...

5.3CVSS5.7AI score0.00271EPSS
SaveExploits1References1
NVD
NVD
•added 2026/01/07 12:17 p.m.•20 views

CVE-2025-47346

Memory corruption while processing a secure logging command in the trusted application...

7.8CVSS0.00081EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/07 9:42 a.m.•21 views

CVE-1999-0575

A Windows NT system's user audit policy does not log an event success or failure, e.g. for Logon and Logoff, File and Object Access, Use of User Rights, User and Group Management, Security Policy Changes, Restart, Shutdown, and System, and Process Tracking...

7.5CVSS7.1AI score0.05243EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/07 9:41 a.m.•16 views

CVE-1999-0795

The NIS+ rpc.nisd server allows remote attackers to execute certain RPC calls without authentication to obtain system information, disable logging, or modify caches...

7.5CVSS7.6AI score0.02118EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/07 9:41 a.m.•18 views

CVE-1999-0579

A Windows NT system's registry audit policy does not log an event success or failure for non-critical registry keys...

10CVSS7AI score0.06249EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/07 9:40 a.m.•22 views

CVE-1999-0576

A Windows NT system's file audit policy does not log an event success or failure for security-critical files or directories...

7.5CVSS7AI score0.04916EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/07 9:37 a.m.•20 views

CVE-2019-7613

Winlogbeat versions before 5.6.16 and 6.6.2 had an insufficient logging flaw. An attacker able to inject certain characters into a log entry could prevent Winlogbeat from recording the event...

7.5CVSS7.2AI score0.01324EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/07 9:33 a.m.•21 views

CVE-2019-7612

A sensitive data disclosure flaw was found in the way Logstash versions before 5.6.15 and 6.6.1 logs malformed URLs. If a malformed URL is specified as part of the Logstash configuration, the credentials for the URL could be inadvertently logged as part of the error message...

9.8CVSS7.8AI score0.02407EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/07 9:26 a.m.•19 views

CVE-2019-12391

The Anviz Management System for access control has insufficient logging for device events such as door open requests...

7.5CVSS7.2AI score0.01127EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/07 9:26 a.m.•23 views

CVE-2006-3413

The privoxy configuration file in Tor before 0.1.1.20, when run on Apple OS X, logs all data via the "logfile", which allows attackers to obtain potentially sensitive information...

5CVSS6.1AI score0.01642EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/07 9:13 a.m.•21 views

CVE-2024-2291

In Progress MOVEit Transfer versions released before 2022.0.11 14.0.11, 2022.1.12 14.1.12, 2023.0.9 15.0.9, 2023.1.4 15.1.4, a logging bypass vulnerability has been discovered. An authenticated user could manipulate a request to bypass the logging mechanism within the web application which result...

4.3CVSS6.7AI score0.00385EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/07 9:12 a.m.•32 views

CVE-2025-1036

Command injection vulnerability exists in the “Logging” page of the web-based configuration utility. An authenticated user with low privileged network access for the configuration utility can execute arbitrary commands on the underlying OS to obtain root SSH access to the TropOS 4th Gen device...

8.7CVSS7.8AI score0.01048EPSS
SaveExploits0References1
Rows per page
Query Builder