PT-2020-14509

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with O8.x through Q10.0 Description An issue in the kernel logging feature allows attackers to discover virtual addresses via vectors involving shared memory. Recommendations For Samsung mobile devices with O8.x through...

CVE-2020-15581: Insertion of Sensitive Information into Log File

An issue was discovered on Samsung mobile devices with O8.x, P9.0, and Q10.0 software. The kernel logging feature allows attackers to discover virtual addresses via vectors involving shared memory. The Samsung ID is SVE-2020-17605 July 2020...

A New Ransomware Targeting Apple macOS Users Through Pirated Apps

Cybersecurity researchers this week discovered a new type of ransomware targeting macOS users that spreads via pirated apps. According to several independent reports from K7 Lab malware researcher Dinesh Devadoss, Patrick Wardle, and Malwarebytes, the ransomware variant — dubbed "EvilQuest" — is...

A New Ransomware Targeting Apple macOS Users Through Pirated Apps

Cybersecurity researchers this week discovered a new type of ransomware targeting macOS users that spreads via pirated apps. According to several independent reports from K7 Lab malware researcher Dinesh Devadoss, Patrick Wardle, and Malwarebytes, the ransomware variant — dubbed "EvilQuest " — is...

Atlassian JIRA Server and Data Center Cross-Site Request Forgery Vulnerability (CNVD-2021-17350)

Atlassian JIRA Server and Atlassian JIRA Data Center are both products of Atlassian Australia.Atlassian JIRA Server is the server version of a defect tracking management system. Atlassian JIRA Server is the server version of a defect tracking management system that is used to track and manage all...

CVE-2020-5603

Uncontrolled resource consumption vulnerability in Mitsubishi Electoric FA Engineering Software CPU Module Logging Configuration Tool Ver. 1.94Y and earlier, CW Configurator Ver. 1.010L and earlier, EM Software Development Kit EM Configurator Ver. 1.010L and earlier, GT Designer3 GOT2000 Ver...

CVE-2019-20415

Atlassian Jira Server and Data Center in affected versions allows remote attackers to modify logging and profiling settings via a cross-site request forgery CSRF vulnerability. The affected versions are before version 7.13.3, and from version 8.0.0 before 8.1.0...

PT-2020-10432

Name of the Vulnerable Software and Affected Versions Atlassian Jira Server and Data Center versions prior to 7.13.3 Atlassian Jira Server and Data Center versions 8.0.0 through 8.0.x before 8.1.0 Description The issue allows remote attackers to modify logging and profiling settings via a...

CVE-2020-5602: Improper Restriction of XML External Entity Reference

Mitsubishi Electoric FA Engineering Software CPU Module Logging Configuration Tool Ver. 1.94Y and earlier, CW Configurator Ver. 1.010L and earlier, EM Software Development Kit EM Configurator Ver. 1.010L and earlier, GT Designer3 GOT2000 Ver. 1.221F and earlier, GX LogViewer Ver. 1.96A and earlie...

CVE-2019-20415: Cross-Site Request Forgery (CSRF)

Atlassian Jira Server and Data Center in affected versions allows remote attackers to modify logging and profiling settings via a cross-site request forgery CSRF vulnerability. The affected versions are before version 7.13.3, and from version 8.0.0 before 8.1.0...

GHSA-PFXF-WH96-FVJC Log Forging in generator-jhipster-kotlin

Impact We log the mail for invalid password reset attempts. As the email is provided by a user and the api is public this can be used by an attacker to forge log entries. This is vulnerable to https://cwe.mitre.org/data/definitions/117.html This problem affects only application generated with jwt...

OPENSUSE-SU-2020:0865-1 Security update for uftpd

This update for uftpd fixes the following issues: uftpd was updated to version 2.12. Changes: Use common log message format and log level when user enters an invalid path. This unfortunately affects changes introduced in v2.11 to increase logging at default log level. Security fixes: -...

CVE-2020-3628

Improper access due to socket opened by the logging application without specifying localhost address in Snapdragon Consumer IOT, Snapdragon Mobile in APQ8053, Rennell, SDX20...

Improper access control

Improper access due to socket opened by the logging application without specifying localhost address in Snapdragon Consumer IOT, Snapdragon Mobile in APQ8053, Rennell, SDX20...

CVE-2020-3628

Improper access due to socket opened by the logging application without specifying localhost address in Snapdragon Consumer IOT, Snapdragon Mobile in APQ8053, Rennell, SDX20...

CVE-2020-3628

CVE-2020-3628 : The NVD/Red Hat/PRION entries describe an improper access issue in Qualcomm Snapdragon components where a logging application opens a socket without binding to localhost (affecting Snapdragon Consumer IOT and Snapdragon Mobile (APQ8053/Rennell/SDX20)). The root cause is an unsecur...

jaegertracing/jaeger information disclosure vulnerability

Jaeger is an open source distributed system monitoring service released by the Linux Foundation , it is mainly used to monitor the distributed system transactions and troubleshooting and so on. A log information disclosure vulnerability exists in versions of jaegertracing/jaeger before 1.18.1. An...

CVE-2020-4030

In FreeRDP before version 2.1.2, there is an out of bounds read in TrioParse. Logging might bypass string length checks due to an integer overflow. This is fixed in version 2.1.2...

Unspecified Vulnerability in Mattermost Server (CNVD-2020-52022)

Mattermost Server is the United States Mattermost company's set of open source messaging platform. A security vulnerability exists in Mattermost Server versions prior to 4.2.0, 4.1.1 and 4.0.5. An attacker can exploit the vulnerability by adding a DEBUG line to the log with the help of the loggin...

CVE-2020-4030: Out-of-bounds Read

In FreeRDP before version 2.1.2, there is an out of bounds read in TrioParse. Logging might bypass string length checks due to an integer overflow. This is fixed in version 2.1.2...