8849 matches found
CVE-2022-30532
In affected versions of Octopus Deploy, there is no logging of changes to artifacts within Octopus Deploy...
CVE-2022-30532
In affected versions of Octopus Deploy, there is no logging of changes to artifacts within Octopus Deploy...
Design/Logic Flaw
In affected versions of Octopus Deploy, there is no logging of changes to artifacts within Octopus Deploy...
CVE-2022-30532
In affected versions of Octopus Deploy, there is no logging of changes to artifacts within Octopus Deploy...
CVE-2022-30532
CVE-2022-30532 affects Octopus Deploy with a root cause described as lack of logging for changes to artifacts. Connected sources (e.g., CNNVD-202207-1611) enumerate broad affected version ranges across multiple Octopus Deploy releases, indicating a systemic logging gap rather than a targeted comp...
PT-2022-20161 · Unknown · Octopus Deploy
Name of the Vulnerable Software and Affected Versions: Octopus Deploy affected versions not specified Description: The issue concerns the lack of logging for changes made to artifacts within the system. There is no information provided about the estimated number of potentially affected devices...
Puppet 日志信息泄露漏洞
Puppet is a set of configuration management tools based on client/server C/S architecture from Puppet Labs in the United States, which can be used to manage profiles, users, cron tasks, packages, system services, and more. A log information disclosure vulnerability exists in Puppet Bolt versions...
July 19, 2022—KB5015879 (OS Build 20348.859) Preview
None None...
Octopus Deploy 安全漏洞
Octopus Deploy is an automation tool for .NET, Java and other application development and deployment from Octopus Deploy Australia. A security vulnerability exists in Octopus Deploy that stems from the lack of logging of artifact changes in Octopus Deploy. The following versions are affected: all...
PT-2022-16353 · Puppet · Puppet Bolt
Name of the Vulnerable Software and Affected Versions: Puppet Bolt versions prior to 3.24.0 Description: The issue allows sensitive parameters to be printed when planning a run, potentially resulting in them being logged when executed programmatically, such as through Puppet Enterprise...
Moderate: Red Hat Security Advisory: Logging Subsystem 5.4.3 - Red Hat OpenShift security update
Logging Subsystem 5.4.3 - Red Hat OpenShift Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the Referenc...
PT-2022-4077 · Samba +10 · Samba +10
Name of the Vulnerable Software and Affected Versions: Samba affected versions not specified Description: The issue is related to a use-after-free problem in the Samba AD LDAP server, specifically in the AD DC database audit logging module. This module can access LDAP message values that have bee...
Zenbuster - Multi-threaded URL Enumeration/Brute-Forcing Tool
ZenBuster is a multi-threaded, multi-platform URL enumeration tool written in Python by Zach Griffin @0xTas. I wrote this tool as a way to deepen my familiarity with Python, and to help increase my understanding of Cybersecurity tooling in general. ZenBuster may not be the fastest or most...
[SECURITY] Fedora 35 Update: golang-github-hashicorp-hclog-0.15.0-5.fc35
Go-hclog is a package for Go that provides a simple key/value logging interfa ce for use in development and production environments...
CVE-2022-2394
Puppet Bolt prior to version 3.24.0 will print sensitive parameters when planning a run resulting in them potentially being logged when run programmatically, such as via Puppet Enterprise...
Mattermost Default Configuration Error Vulnerability
Mattermost is an open source collaboration platform from Mattermost, Inc. Mattermost is vulnerable to a default configuration error that could be exploited by an attacker to bypass some existing rate limits or to use a manipulated IP for audit logging by manipulating the request header...
acido (>=0.16.0 <=0.53.0), adx-logging-handler (>=1.0.0 <=1.0.3) +107 more potentially affected by CVE-2022-30187 via azure-storage-queue (>=0.37.0 <=12.3.0)
azure-storage-queue PYPI version =0.37.0, =0.16.0, =1.0.0, =2.13.1.post2, =0.2.0, =2.3.1, =0.1.0, =1.2.0, =0.1.0, =1.0.0, =0.1.5, =0.1.0, =0.5.10, =0.0.1, =0.0.1, =0.0.1, =0.0.2 and more Source cves: CVE-2022-30187 Source advisory: OSV:GHSA-64X4-9HC6-R2H6...
CVE-2022-2366
Incorrect default configuration for trusted IP header in Mattermost version 6.7.0 and earlier allows attacker to bypass some of the rate limitations in place or use manipulated IPs for audit logging via manipulating the request headers...
CVE-2022-2366
Incorrect default configuration for trusted IP header in Mattermost version 6.7.0 and earlier allows attacker to bypass some of the rate limitations in place or use manipulated IPs for audit logging via manipulating the request headers...