10762 matches found
CVE-2024-42327
creationtimestamp| type| source ---|---|--- 2024-11-27 12:15:05+00:00| seen| https://infosec.exchange/users/cve/statuses/113554863211557834 2024-11-27 12:18:43+00:00| seen| https://infosec.exchange/users/cve/statuses/113554877465801853 2024-11-30 06:16:53+00:00| seen| https://t.me/icscert/969...
Malicious code in refocus-logging (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25782f8156daaa99c83887bef8d34ff68e86c7c3c2c64313bd4ebdef950356f1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in refocus-logging
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
MAL-2024-11000 Malicious code in refocus-logging (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25782f8156daaa99c83887bef8d34ff68e86c7c3c2c64313bd4ebdef950356f1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2024-53267
sigstore-java is a sigstore java client for interacting with sigstore infrastructure. sigstore-java has insufficient verification for a situation where a validly-signed but "mismatched" bundle is presented as proof of inclusion into a transparency log. This bug impacts clients using any variation...
CVE-2024-52337
A log spoofing flaw was found in the Tuned package due to improper sanitization of some API arguments. This flaw allows an attacker to pass a controlled sequence of characters; newlines can be inserted into the log. Instead of the 'evil' the attacker could mimic a valid TuneD log line and trick t...
tuned: improper sanitization of `instance_name` parameter of the `instance_create()` method
A log spoofing flaw was found in the Tuned package due to improper sanitization of some API arguments. This flaw allows an attacker to pass a controlled sequence of characters; newlines can be inserted into the log. Instead of the 'evil' the attacker could mimic a valid TuneD log line and trick t...
CVE-2024-52337 Tuned: improper sanitization of `instance_name` parameter of the `instance_create()` method
A log spoofing flaw was found in the Tuned package due to improper sanitization of some API arguments. This flaw allows an attacker to pass a controlled sequence of characters; newlines can be inserted into the log. Instead of the 'evil' the attacker could mimic a valid TuneD log line and trick t...
CVE-2024-52337
A log spoofing flaw was found in the Tuned package due to improper sanitization of some API arguments. This flaw allows an attacker to pass a controlled sequence of characters; newlines can be inserted into the log. Instead of the 'evil' the attacker could mimic a valid TuneD log line and trick t...
Exploit for CVE-2023-32428
CVE-2023...
log4j1-socketappender: DoS via hashmap logging
A flaw was found in Chainsaw and SocketAppender components with Log4j 1.x on JRE, less than 1.7. This issue may allow an attacker to use a logging entry with a specially-crafted hashmap or hashtable, depending on which logging component is in use, to process and exhaust the available memory in th...
Bootiful Spring Boot 3.4: Spring Boot
And now we’re back where we started: Spring Boot 3.4! This release is what pulls everything together. When you look at Spring Boot, remember that it normalizes the integration of all the projects it assembles and tries, wherever possible, to smooth out whatever integration issues might arise from...
CVE-2024-11228
creationtimestamp| type| source ---|---|--- 2024-11-23 11:42:56+00:00| seen| https://infosec.exchange/users/cve/statuses/113532087549961088...
CVE-2023-51645
creationtimestamp| type| source ---|---|--- 2024-11-22 20:42:53+00:00| seen| https://infosec.exchange/users/cve/statuses/113528548421020770...
CVE-2024-10863
: Insufficient Logging vulnerability in OpenText Secure Content Manager on Windows allows Audit Log Manipulation.This issue affects Secure Content Manager: from 10.1 before 24.4. End-users can potentially exploit the vulnerability to exclude audit trails from being recorded on the client side...
CVE-2024-10863 Client-side audit exclusion vulnerability
: Insufficient Logging vulnerability in OpenText Secure Content Manager on Windows allows Audit Log Manipulation.This issue affects Secure Content Manager: from 10.1 before 24.4. End-users can potentially exploit the vulnerability to exclude audit trails from being recorded on the client side...
PT-2024-16600 · Opentext · Opentext Secure Content Manager
Name of the Vulnerable Software and Affected Versions: OpenText Secure Content Manager versions 10.1 through 24.3 Description: The issue is related to insufficient logging in OpenText Secure Content Manager on Windows, allowing audit log manipulation. This could potentially lead to undetected...
CVE-2024-10863: Insufficient Logging
: Insufficient Logging vulnerability in OpenText Secure Content Manager on Windows allows Audit Log Manipulation.This issue affects Secure Content Manager: from 10.1 before 24.4. End-users can potentially exploit the vulnerability to exclude audit trails from being recorded on the client side...
CVE-2024-52067
Apache NiFi 1.16.0 through 1.28.0 and 2.0.0-M1 through 2.0.0-M4 include optional debug logging of Parameter Context values during the flow synchronization process. An authorized administrator with access to change logging levels could enable debug logging for framework flow synchronization, causi...
CVE-2024-52067 Apache NiFi: Potential Insertion of Sensitive Parameter Values in Debug Log
Apache NiFi 1.16.0 through 1.28.0 and 2.0.0-M1 through 2.0.0-M4 include optional debug logging of Parameter Context values during the flow synchronization process. An authorized administrator with access to change logging levels could enable debug logging for framework flow synchronization, causi...