8955 matches found
CVE-2024-11923 Sensitive Information Disclosure in Fortra Application Hub Prior to version 1.3
Under certain log settings the IAM or CORE service will log credentials in the iam logfile in Fortra Application Hub Formerly named Helpsystems One prior to version 1.3...
CVE-2024-11923
CVE-2024-11923 describes a data disclosure in Fortra Application Hub (formerly Helpsystems One) where, under certain log settings, the IAM or CORE service logs credentials in the iam logfile prior to version 1.3. Affected component: Fortra Application Hub IAM/CORE logging workflow; issue arises f...
CVE-2025-21399
creationtimestamp| type| source ---|---|--- 2025-01-17 19:23:19+00:00| seen| https://infosec.exchange/users/cve/statuses/113845324949555117 2025-01-17 19:32:11+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113845359780799137 2025-01-17 19:56:48+00:00| seen|...
PT-2025-1715 · Fortra · Fortra Application Hub
Name of the Vulnerable Software and Affected Versions: Fortra Application Hub versions prior to 1.3 Description: The issue concerns the logging of credentials in the iam logfile under certain log settings. This occurs in the IAM or CORE service of Fortra Application Hub. Recommendations: For...
CVE-2025-23510
Cross-Site Request Forgery CSRF vulnerability in Jan Štětina WordPress Logging Service wordpress-logging-service allows Stored XSS.This issue affects WordPress Logging Service: from n/a through = 1.5.4...
CVE-2025-23510 WordPress WordPress Logging Service plugin <= 1.5.4 - CSRF to Stored Cross Site Scripting (XSS) vulnerability
Cross-Site Request Forgery CSRF vulnerability in Jan Štětina WordPress Logging Service wordpress-logging-service allows Stored XSS.This issue affects WordPress Logging Service: from n/a through = 1.5.4...
CVE-2025-23510 WordPress WordPress Logging Service plugin <= 1.5.4 - CSRF to Stored Cross Site Scripting (XSS) vulnerability
Cross-Site Request Forgery CSRF vulnerability in Zaantar WordPress Logging Service allows Stored XSS.This issue affects WordPress Logging Service: from n/a through 1.5.4...
CVE-2025-23510
CVE-2025-23510 describes a Cross-Site Request Forgery (CSRF) in the Zaantar WordPress Logging Service plugin that enables Stored XSS. The vulnerability affects WordPress Logging Service from n/a through 1.5.4. Public data lists a CVSS v3.1 base score of 7.1 (HIGH) with Network attack vector, Low ...
WordPress WordPress Logging Service plugin <= 1.5.4 - CSRF to Stored Cross Site Scripting (XSS) vulnerability
CSRF to Stored Cross Site Scripting XSS vulnerability discovered by SOPROBRO in WordPress Plugin WordPress Logging Service versions = 1.5.4...
tuned: improper sanitization of `instance_name` parameter of the `instance_create()` method
A log spoofing flaw was found in the Tuned package due to improper sanitization of some API arguments. This flaw allows an attacker to pass a controlled sequence of characters; newlines can be inserted into the log. Instead of the 'evil' the attacker could mimic a valid TuneD log line and trick t...
WordPress plugin WordPress Logging Service 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...
PT-2025-4915 · WordPress · Wordpress Logging Service
Name of the Vulnerable Software and Affected Versions: WordPress Logging Service versions 1.5.4 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a...
Important: Red Hat Security Advisory: Logging for Red Hat OpenShift - 5.6.27
Logging for Red Hat OpenShift - 5.6.27 Logging for Red Hat OpenShift - 5.6.27 dompurify: nesting-based mutation XSS vulnerability CVE-2024-47875...
CVE-2024-57014
creationtimestamp| type| source ---|---|--- 2025-01-15 17:15:56+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfsbedcd6n2j 2025-01-15 18:24:35+00:00| seen| https://infosec.exchange/users/cR0w/statuses/113833769317315493 2025-01-15 19:18:50+00:00| seen|...
Moderate: Red Hat Security Advisory: Logging for Red Hat OpenShift - 5.9.10
Logging for Red Hat OpenShift - 5.9.10 Logging for Red Hat OpenShift - 5.9.10...
Important: Red Hat Security Advisory: Logging for Red Hat OpenShift - 5.8.16
Logging for Red Hat OpenShift - 5.8.16 Logging for Red Hat OpenShift - 5.8.16 dompurify: nesting-based mutation XSS vulnerability CVE-2024-47875...
CVE-2025-23061
creationtimestamp| type| source ---|---|--- 2025-01-15 04:32:10+00:00| seen| https://infosec.exchange/users/cve/statuses/113830496154420562 2025-01-15 05:11:26+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1700 2025-01-15 05:48:38+00:00| seen|...
CVE-2024-55891
Summary: CVE-2024-55891 affects TYPO3 where the install tool password may be logged in plaintext if the password hashing mechanism is incorrect. Impact: information disclosure of the install password. Affected versions: TYPO3 prior to 13.4.3 ELTS. Mitigation: update to TYPO3 version 13.4.3 ELTS (...
TYPO3 Information Disclosure via Exception Handling/Logger
Problem It has been discovered that the install tool password has been logged as plaintext in case the password hashing mechanism used for the password was incorrect. Solution Update to TYPO3 versions 13.4.3 LTS that fixes the problem described. Credits Thanks to TYPO3 core & security team member...
