10759 matches found
CVE-2025-32382 Snowflake credentials logged by the Metabase backend
Metabase is an open source Business Intelligence and Embedded Analytics tool. When admins change Snowflake connection details in Metabase either updating a password or changing password to private key or vice versa, Metabase would not always purge older Snowflake connection details from the...
PT-2025-15995
Name of the Vulnerable Software and Affected Versions: Metabase versions prior to 52.17.1 Metabase versions prior to 53.9.5 Metabase versions prior to 54.1.5 Description: The issue arises when administrators change Snowflake connection details in Metabase, such as updating a password or switching...
CVE-2025-32698: Exposure of Sensitive Information to an Unauthorized Actor
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/logging/LogPager.Php. This issue affects MediaWiki: before 1.39.12, 1.42.6, 1.43.1...
IntelliJ IDEA < 2024.2.4 / 2024.3 (macOS)
The version of IntelliJ IDEA installed on the remote host is prior to 2024.2.4, 2024.3. It is, therefore, affected by a vulnerability as referenced in the advisory. - In JetBrains IntelliJ IDEA before 2024.3, 2024.2.4 source code could be logged in the idea.log file CVE-2025-32054 Note that Nessu...
Microsoft Identity Web Exposes Client Secrets and Certificate Information in Service Logs
Impact What kind of vulnerability is it? Who is impacted? Description: This vulnerability affects confidential client applications, including daemons, web apps, and web APIs. Under specific circumstances, sensitive information such as client secrets or certificate details may be exposed in the...
Insertion of Sensitive Information into Log File
Overview org.apache.activemq:artemis-server is a server package for the ActiveMQ-Artemis project. Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File when the ConfigurationImpl logger is being set to debug level. An attacker can access sensitive...
Insertion of Sensitive Information into Log File
Overview org.apache.activemq:artemis-core-client is a High-performance, non-blocking architecture for the next generation of event-driven messaging applications. Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File when the ConfigurationImpl logger ...
CVE-2025-30677 Apache Pulsar IO Kafka Connector, Apache Pulsar IO Kafka Connect Adaptor: Sensitive information logged in Pulsar's Apache Kafka Connectors
Apache Pulsar contains multiple connectors for integrating with Apache Kafka. The Pulsar IO Apache Kafka Source Connector, Sink Connector, and Kafka Connect Adaptor Sink Connector log sensitive configuration properties in plain text in application logs. This vulnerability can lead to unintended...
Malware in some-error-logging-package
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious code in some-error-logging-package (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 12ec550029e2d4afb8e030a4f5d0f35eed74507e8c10420197915d518200ef38 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-3201 Malicious code in some-error-logging-package (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 12ec550029e2d4afb8e030a4f5d0f35eed74507e8c10420197915d518200ef38 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Apache Pulsar 安全漏洞
Apache Pulsar is an American Apache Apache Foundation distributed message flow platform for use in cloud environments that integrates messaging, storage, and lightweight functional computing. The software supports multi-tenancy, persistent storage, multi-room cross-region data replication with hi...
Apache ActiveMQ Artemis 安全漏洞
Apache ActiveMQ Artemis is a high-performance open source messaging agent from the Apache USA Foundation. A security vulnerability exists in Apache ActiveMQ Artemis version 1.5.1 through versions prior to 2.40.0, which stems from sensitive information being written to log files...
CVE-2025-3436 coreActivity: Activity Logging for WordPress <= 2.7 - Authenticated (Subscriber+) SQL Injection
The coreActivity: Activity Logging for WordPress plugin for WordPress is vulnerable to SQL Injection via the 'order' and 'orderby' parameters in all versions up to, and including, 2.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQ...
Description of the security update for SharePoint Enterprise Server 2016 Language Pack: April 8, 2025 (KB5002682)
None None...
WordPress plugin coreActivity: Activity Logging SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A SQL injection vulnerability exists in...
CVE-2025-3436: Improper Neutralization of Special Elements used in an SQL Command
The coreActivity: Activity Logging for WordPress plugin for WordPress is vulnerable to SQL Injection via the 'order' and 'orderby' parameters in all versions up to, and including, 2.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQ...
CVE-2024-58133
In chainmaker-go aka ChainMaker before 2.4.0, when making frequent updates to a node's configuration file and restarting this node, concurrent writes by logger.go to a map are mishandled. Creating other logs simultaneously can lead to a read-write conflict and panic...
CVE-2024-58133
In chainmaker-go aka ChainMaker before 2.4.0, when making frequent updates to a node's configuration file and restarting this node, concurrent writes by logger.go to a map are mishandled. Creating other logs simultaneously can lead to a read-write conflict and panic...
