8960 matches found
CVE-2023-41253 BIG-IP DNS TSIG Key vulnerability
When on BIG-IP DNS or BIG-IP LTM enabled with DNS Services License, and a TSIG key is created, it is logged in plaintext in the audit log. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...
CVE-2023-40537
CVE-2023-40537 affects BIG-IP on multi-blade VIPRION: an authenticated user’s session cookie may remain valid briefly after logout, enabling potential reuse to access management interfaces and execute commands. The vulnerability is limited to VIPRION multi-blade configurations and does not affect...
K98334513: BIG-IP DNS TSIG key vulnerability CVE-2023-41253
Security Advisory Description When a BIG-IP DNS or BIG-IP LTM system is enabled with the DNS Services license, and a TSIG key is created, the key is logged in plaintext in the audit log. CVE-2023-41253 Impact An authenticated attacker with at least auditor role privileges can view the TSIG key in...
PT-2023-28841 · F5 · Big-Iq +1
Name of the Vulnerable Software and Affected Versions: BIG-IP or BIG-IQ system affected versions not specified Description: The issue occurs when TACACS+ audit forwarding is configured on the system, resulting in the sharedsecret being logged in plaintext in the audit log. Recommendations: At the...
The vulnerability of the software for centralized logging, analysis, and storage of logs by Graylog, related to incorrect session duration settings, allows a hacker to intercept a user’s session.
The vulnerability of the Graylog log collection, analysis, and storage software lies in the incorrect duration of the session. Exploiting this vulnerability allows a remote attacker to intercept the user’s session...
CVE-2023-4911
creationtimestamp| type| source ---|---|--- 2023-10-03 19:26:43+00:00| seen| https://t.me/ctinow/140936 2023-10-03 22:25:32+00:00| seen| https://t.me/cibsecurity/71521 2023-10-04 09:54:27+00:00| published-proof-of-concept| Telegram/DC49U-yyOf0wvALqOLP1PpSKVxWrQUjwJZr2ekYXZeihgw 2023-10-04...
Information disclosure
Information exposure vulnerability in IBERMATICA RPS 2019, which exploitation could allow an unauthenticated user to retrieve sensitive information, such as usernames, IP addresses or SQL queries sent to the application. By accessing the URL /RPS2019Service/status.html, the application enables th...
CVE-2023-3349 Information exposure on IBERMATICA RPS
Information exposure vulnerability in IBERMATICA RPS 2019, which exploitation could allow an unauthenticated user to retrieve sensitive information, such as usernames, IP addresses or SQL queries sent to the application. By accessing the URL /RPS2019Service/status.html, the application enables th...
CVE-2023-3335
Insertion of Sensitive Information into Log File vulnerability in Hitachi Ops Center Administrator on Linux allows local users to gain sensitive information.This issue affects Hitachi Ops Center Administrator: before 10.9.3-00...
CVE-2023-35071
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in MRV Tech Logging Administration Panel allows SQL Injection. This issue affects Logging Administration Panel: before 20230915...
CVE-2023-35071
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in MRV Tech Logging Administration Panel allows SQL Injection.This issue affects Logging Administration Panel: before 20230915...
CVE-2023-35071
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in MRV Tech Logging Administration Panel allows SQL Injection. This issue affects Logging Administration Panel: before 20230915...
Sql injection
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in MRV Tech Logging Administration Panel allows SQL Injection.This issue affects Logging Administration Panel: before 20230915...
CVE-2023-35071
CVE-2023-35071 is an SQL injection vulnerability in MRV Tech’s Logging Administration Panel, arising from improper neutralization of special elements in SQL commands. Affected: Logging Administration Panel prior to 20230915. Root cause reported as SQL injection flaw; exploitation details are not ...
CVE-2023-35071 SQLi in MRV Tech's Logging Administration Panel
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in MRV Tech Logging Administration Panel allows SQL Injection. This issue affects Logging Administration Panel: before 20230915...
CVE-2023-35071 SQLi in MRV Tech's Logging Administration Panel
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in MRV Tech Logging Administration Panel allows SQL Injection. This issue affects Logging Administration Panel: before 20230915...
MRV Tech Logging Administration Panel SQL Injection Vulnerability
MRV Tech Logging Administration Panel is a logging administration panel from MRV Tech USA. An SQL injection vulnerability exists in versions prior to MRV Tech Logging Administration Panel 20230915, which stems from the presence of a SQL injection vulnerability...
Moderate: Red Hat Security Advisory: Logging Subsystem 5.6.11 - Red Hat OpenShift security update
Logging Subsystem 5.6.11 - Red Hat OpenShift Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the...
Moderate: Red Hat Security Advisory: Logging Subsystem 5.5.16 - Red Hat OpenShift security update
Logging Subsystem 5.5.16 - Red Hat OpenShift Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the...
