CVE-2020-15372

Summary: CVE-2020-15372 affects the Brocade Fabric OS command-line interface. An authenticated local attacker could modify shell variables, potentially causing privilege escalation or logging bypass. Affected products/versions (as detailed in connected sources): Brocade Fabric OS CLI on Fabric OS...

mysqld_safe in Oracle MySQL through 5.5.51 5.6.x through 5.6.32 and 5.7.x through 5.7.14; MariaDB; Percona Server before 5.5.51-38.2 5.6.x before 5.6.32-78-1 and 5.7.x before 5.7.14-8; and Percona XtraDB Cluster before 5.5.41-37.0 5.6.x before 5.6.32-25.17 and 5.7.x before 5.7.14-26.17 when using file-based logging allows local users with access to the mysql account to gain root privileges via a symlink attack on error logs and possibly other files.

...

CVE-2020-15372: Improper Control of Dynamically-Managed Code Resources

A vulnerability in the command-line interface in Brocade Fabric OS before Brocade Fabric OS v8.2.2a1, 8.2.2c, v7.4.2g, v8.2.0CBN3, v8.2.1e, v8.1.2k, v9.0.0, could allow a local authenticated attacker to modify shell variables, which may lead to an escalation of privileges or bypassing the logging...

PT-2020-14399

Name of the Vulnerable Software and Affected Versions Brocade Fabric OS versions prior to 7.4.2g Brocade Fabric OS versions prior to 8.1.2k Brocade Fabric OS versions prior to 8.2.0 CBN3 Brocade Fabric OS versions prior to 8.2.1e Brocade Fabric OS versions prior to 8.2.2a1 Brocade Fabric OS...

CVE-2020-12818

An insufficient logging vulnerability in FortiGate before 6.4.1 may allow the traffic from an unauthenticated attacker to Fortinet owned IP addresses to go unnoticed...

CVE-2020-12818

An insufficient logging vulnerability in FortiGate before 6.4.1 may allow the traffic from an unauthenticated attacker to Fortinet owned IP addresses to go unnoticed...

Design/Logic Flaw

An insufficient logging vulnerability in FortiGate before 6.4.1 may allow the traffic from an unauthenticated attacker to Fortinet owned IP addresses to go unnoticed...

CVE-2020-12818

An insufficient logging vulnerability in FortiGate before 6.4.1 may allow the traffic from an unauthenticated attacker to Fortinet owned IP addresses to go unnoticed...

CVE-2020-12818

An insufficient logging vulnerability in FortiGate before 6.4.1 may allow the traffic from an unauthenticated attacker to Fortinet owned IP addresses to go unnoticed...

CVE-2020-12818

CVE-2020-12818 affects FortiGate before version 6.4.1, where an insufficient logging vulnerability could allow unauthenticated traffic to Fortinet-owned IP addresses to go unnoticed. Connected sources specify affected FortiGate platforms and that the issue is triggered under specific configuratio...

PT-2020-6788

Name of the Vulnerable Software and Affected Versions FortiGate versions prior to 6.4.1 Description The issue is related to insufficient logging, which may allow traffic from an unauthenticated attacker to Fortinet owned IP addresses to go unnoticed. This is due to incorrect logging of traffic fo...

CVE-2020-12818: Undefined Security Weakness

An insufficient logging vulnerability in FortiGate before 6.4.1 may allow the traffic from an unauthenticated attacker to Fortinet owned IP addresses to go unnoticed...

Unsecured Microsoft Bing Server Exposed Users' Search Queries and Location

A back-end server associated with Microsoft Bing exposed sensitive data of the search engine's mobile application users, including search queries, device details, and GPS coordinates, among others. The logging database, however, doesn't include any personal details such as names or addresses. The...

DEBIAN-CVE-2020-15959

Insufficient policy enforcement in networking in Google Chrome prior to 85.0.4183.102 allowed an attacker who convinced the user to enable logging to obtain potentially sensitive information from process memory via social engineering...

Hyland OnBase Logging Vulnerability

Hyland Software is an American company that develops OnBase, an enterprise content management and process management software suite. The company's suite is used in healthcare, financial institutions, insurance companies, government departments, higher education and manufacturing. Hyland OnBase...

mysql: Server: Logging unspecified vulnerability (CPU Apr 2020)

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Logging. Supported versions that are affected are 8.0.18 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attac...

mysql: Server: Logging unspecified vulnerability (CPU Apr 2020)

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Logging. Supported versions that are affected are 8.0.18 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attac...

USN-4495-1: Apache Log4j vulnerability

It was discovered that Apache Log4j does not properly deserialize untrusted data. An attacker could possibly use this issue to remotely execute arbitrary code. CVE-2019-17571...

Information Disclosure

renovate is vulnerable to information disclosure. The Azure DevOps token is disclosed on the server and in the pipeline logs due to the logging of the http.extraheader=AUTHORIZATION parameter without redaction...

Tailor MS 1.0 Cross Site Scripting

Exploit Title: Tailor MS 1.0 - Reflected Cross-Site Scripting Exploit Author: Bobby Cooke boku & Adeeb Shah @hyd3sec Date: 2020-09-14 CVE ID: CVE-2020-23835 Vendor Homepage: https://www.sourcecodester.com Software Link:...