GHSA-X5Q5-6WVF-2FPQ Magento 2 Community Edition Insufficient Logging

An insufficient logging and monitoring vulnerability exists in Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3. Failure to track admin actions related to design configuration could lead to repudiation attacks...

GHSA-PM48-CVV2-29Q5 Ansible Uses Plugins That Disclose Credentials

Ansible, all ansibleengine-2.x versions and ansibleengine-3.x up to ansibleengine-3.5, was logging at the DEBUG level which lead to a disclosure of credentials if a plugin used a library that logged credentials at the DEBUG level. This flaw does not affect Ansible modules, as those are executed i...

Ansible Uses Plugins That Disclose Credentials

Ansible, all ansibleengine-2.x versions and ansibleengine-3.x up to ansibleengine-3.5, was logging at the DEBUG level which lead to a disclosure of credentials if a plugin used a library that logged credentials at the DEBUG level. This flaw does not affect Ansible modules, as those are executed i...

Plaintext Storage of a Password in Jenkins Configuration as Code Plugin

Jenkins Configuration as Code Plugin prior to version 1.25 did not treat the proxy password as a secret to be masked when logging or encrypted for export...

CVE-2016-7103

creationtimestamp| type| source ---|---|--- 2022-05-23 12:12:20+00:00| seen| MISP/e4a31d0c-457f-42ae-9030-0af010bf2c63 2024-01-09 16:11:28+00:00| seen| https://t.me/ctinow/165088...

CVE-2021-39246

Tor Browser through 10.5.6 and 11.x through 11.0a4 allows a correlation attack that can compromise the privacy of visits to v2 onion addresses. Exact timestamps of these onion-service visits are logged locally, and an attacker might be able to compare them to timestamp data collected by the...

Design/Logic Flaw

Go Ethereum is the official Golang implementation of the Ethereum protocol. Prior to version 1.10.17, a vulnerable node, if configured to use high verbosity logging, can be made to crash when handling specially crafted p2p messages sent from an attacker node. Version 1.10.17 contains a patch that...

CVE-2022-29177 DoS via malicious p2p message in Go-Ethereum

Go Ethereum is the official Golang implementation of the Ethereum protocol. Prior to version 1.10.17, a vulnerable node, if configured to use high verbosity logging, can be made to crash when handling specially crafted p2p messages sent from an attacker node. Version 1.10.17 contains a patch that...

CVE-2022-29177 DoS via malicious p2p message in Go-Ethereum

Go Ethereum is the official Golang implementation of the Ethereum protocol. Prior to version 1.10.17, a vulnerable node, if configured to use high verbosity logging, can be made to crash when handling specially crafted p2p messages sent from an attacker node. Version 1.10.17 contains a patch that...

CVE-2022-29177 DoS via malicious p2p message in Go-Ethereum

Go Ethereum is the official Golang implementation of the Ethereum protocol. Prior to version 1.10.17, a vulnerable node, if configured to use high verbosity logging, can be made to crash when handling specially crafted p2p messages sent from an attacker node. Version 1.10.17 contains a patch that...

PT-2022-19431 · Unknown · Go-Ethereum

Name of the Vulnerable Software and Affected Versions: Go Ethereum versions prior to 1.10.17 Description: A vulnerable node, if configured to use high verbosity logging, can be made to crash when handling specially crafted p2p messages sent from an attacker node. Recommendations: For versions pri...

tlog bug fix and enhancement update

An update is available for tlog. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Tlog is a terminal I/O recording program similar to "script", but used in place ...

new packages: jboss-logging-tools

An update is available for jboss-logging-tools. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rock...

new packages: jboss-logging

An update is available for jboss-logging. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

new packages: apache-commons-logging

An update is available for apache-commons-logging. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the...

django-admin-caching (>=0.1.0 <=0.1.2), django-automated-logging (=0.0.1a0) +6 more potentially affected by CVE-2016-9014 via django (>=1.10.0 <=1.10.2)

django PYPI version =1.10.0, =0.1.0, =2.0.0, =0.1.0, =0.3.1, =0.4.0 - silent-auction =0.1.3 - teamvault =0.6.1 Source cves: CVE-2016-9014 Source advisory: OSV:GHSA-3F2C-JM6V-CR35...

PT-2022-10452 · Solarwinds · Serv-U

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: This issue pertains to a broken access control vulnerability where a domain admin can access configuration and user data of other domains without authorization. The access is...

The vulnerability of the Log4j Java logging library, related to insecure privilege management, allows an attacker to execute arbitrary code.

The vulnerability of the Log4j Java logging library lies in the insecure management of privileges. Exploiting this vulnerability allows an attacker to execute arbitrary code...

[SECURITY] [DLA 3009-1] cifs-utils security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-3009-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta May 16, 2022 https://wiki.debian.org/LTS - -----------------------------------------------------------------------...

Debian DLA-3009-1 : cifs-utils - LTS security update

The remote Debian 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-3009 advisory. A couple of vulnerabilities were found in src:cifs-utils, a Common Internet File System utilities, and are as follows: CVE-2022-27239 In cifs-utils, a stack-based...