10766 matches found
PT-2024-24600
Name of the Vulnerable Software and Affected Versions Sentry versions prior to 24.4.1 Description Sentry is an error tracking and performance monitoring platform. When authenticating as a superuser to Sentry with a username and password, the password is leaked as cleartext in logs under the event...
CVE-2024-32474: Cleartext Storage of Sensitive Information
Sentry is an error tracking and performance monitoring platform. Prior to 24.4.1, when authenticating as a superuser to Sentry with a username and password, the password is leaked as cleartext in logs under the event: auth-index.validatesuperuser. An attacker with access to the log data could use...
CVE-2024-0868
The coreActivity: Activity Logging plugin for WordPress plugin before 2.1 retrieved IP addresses of requests via headers such X-FORWARDED to log them, allowing users to spoof them by providing an arbitrary value...
CVE-2024-0868
The coreActivity: Activity Logging plugin for WordPress (versions prior to 2.1 ) is vulnerable to an unauthenticated IP spoofing flaw. The plugin incorrectly retrieves and logs request IP addresses from headers such as X-FORWARDED , allowing an attacker to provide an arbitrary value to spoof thei...
CVE-2024-0868: Undefined Security Weakness
The coreActivity: Activity Logging plugin for WordPress plugin before 2.1 retrieved IP addresses of requests via headers such X-FORWARDED to log them, allowing users to spoof them by providing an arbitrary value...
Resource Consumption And Excessive Logging
Suricata is vulnerable to Resource Consumption and Excessive Logging. The vulnerability is due to insufficient input validation, causing Suricata to consume excessive CPU resources and generate excessive logging volume in alert records when processing SSH banners that exceed a certain length...
shim: Out-of-bounds read printing error messages
A flaw was found in Shim when an error happened while creating a new ESL variable. If Shim fails to create the new variable, it tries to print an error message to the user; however, the number of parameters used by the logging function doesn't match the format string used by it, leading to a cras...
shim: Out-of-bounds read printing error messages
A flaw was found in Shim when an error happened while creating a new ESL variable. If Shim fails to create the new variable, it tries to print an error message to the user; however, the number of parameters used by the logging function doesn't match the format string used by it, leading to a cras...
AppPresser < 4.3.1 - Cross-Site Request Forgery via force_logging_off()
Description The AppPresser plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.3.0. This is due to missing or incorrect nonce validation on the forceloggingoff function. This makes it possible for unauthenticated attackers to turn logging off via a...
WordPress Plugin Mail logging 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...
IO-1020 Micro ELD 安全漏洞
The IOSiX IO-1020 Micro ELD is an electronic logging device from IOSiX USA. A security vulnerability exists in versions prior to the IO-1020 Micro ELD 360 that originates from the ability to download source code or executable files from an adjacent location without sufficiently verifying the orig...
IO-1020 Micro ELD 安全漏洞
The IOSiX IO-1020 Micro ELD is an electronic logging device from IOSiX USA. A security vulnerability exists in previous versions of the IO-1020 Micro ELD 360 that stems from the use of a default WIFI password that could allow a neighboring attacker to connect to the device...
CVE-2024-25572
A Cross-site request forgery (CSRF) vulnerability exists in the Ninja Forms WordPress plugin in versions prior to 3.4.31 . This flaw allows an attacker to perform unintended operations if a website administrator views a malicious page while logged in. To remediate this issue, users should update ...
Huawei EMUI/HarmonyOS Input Validation Vulnerability
Huawei EMUI and Huawei HarmonyOS are both products of Huawei, a mobile operating system based on Android, and Huawei HarmonyOS, a distributed operating system developed by Huawei for the whole scenario, aiming at realizing intelligent interconnection and resource sharing among people, devices, an...
UBUNTU-CVE-2021-47204
In the Linux kernel, the following vulnerability has been resolved: net: dpaa2-eth: fix use-after-free in dpaa2ethremove Access to netdev after freenetdev will cause use-after-free bug. Move debug log before freenetdev call to avoid it...
PT-2024-5072 · Nozomi · Nozomi Central Management Console +1
Name of the Vulnerable Software and Affected Versions: Nozomi Guardian and Nozomi Central Management Console CMC affected versions not specified OpenAPI affected versions not specified Description: The issue is related to insufficient protection of audit records for OpenAPI requests, which may...
PT-2024-23997 · Tribulant · Tribulant Slideshow Gallery
Name of the Vulnerable Software and Affected Versions: Tribulant Slideshow Gallery versions 1.7.8 and earlier Description: The issue is related to the insertion of sensitive information into log files. This could potentially expose sensitive data. Recommendations: For versions 1.7.8 and earlier,...
CVE-2024-30716
CVE-2024-30716 entry is rejected and not used; does not represent an active vulnerability.