Lucene search
+L

8957 matches found

ATTACKERKB
ATTACKERKB
added 2022/04/28 1:15 a.m.4 views

CVE-2022-29869

cifs-utils through 6.14, with verbose logging, can cause an information leak when a file contains = equal sign characters but is not a valid credentials file...

5.3CVSS6.8AI score0.01881EPSS
SaveExploits0References12
Prion
Prion
added 2022/04/28 1:15 a.m.22 views

Design/Logic Flaw

cifs-utils through 6.14, with verbose logging, can cause an information leak when a file contains = equal sign characters but is not a valid credentials file...

4.3CVSS5.8AI score0.01881EPSS
SaveExploits0References8Affected Software3
UbuntuCve
UbuntuCve
added 2022/04/28 1:15 a.m.48 views

CVE-2022-29869

cifs-utils through 6.14, with verbose logging, can cause an information leak when a file contains = equal sign characters but is not a valid credentials file...

5.3CVSS6.8AI score0.01881EPSS
SaveExploits0References3
OSV
OSV
added 2022/04/28 1:15 a.m.10 views

UBUNTU-CVE-2022-29869

cifs-utils through 6.14, with verbose logging, can cause an information leak when a file contains = equal sign characters but is not a valid credentials file...

5.3CVSS6.8AI score0.01881EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2022/04/28 12:00 a.m.24 views

CVE-2022-29869

cifs-utils through 6.14, with verbose logging, can cause an information leak when a file contains = equal sign characters but is not a valid credentials file...

6.5AI score0.01881EPSS
SaveExploits0References8
CVE
CVE
added 2022/04/28 12:00 a.m.141 views

CVE-2022-29869

CVE-2022-29869 affects the cifs-utils package. The issue is an information leak that occurs when verbose logging dumps lines containing = signs from a credentials file that is not a valid credentials file, potentially exposing sensitive data. Affected versions include cifs-utils up to 6.14; sever...

5.3CVSS6AI score0.01881EPSS
SaveExploits0References8Affected Software1
AlpineLinux
AlpineLinux
added 2022/04/28 12:00 a.m.50 views

CVE-2022-29869

cifs-utils through 6.14, with verbose logging, can cause an information leak when a file contains = equal sign characters but is not a valid credentials file...

5.3CVSS6.4AI score0.01881EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2022/04/27 12:00 a.m.4 views

PT-2022-3538 · Unknown +5 · Cifs-Utils +5

Name of the Vulnerable Software and Affected Versions: cifs-utils versions through 6.14 Description: The issue is related to an information leak when a file contains = equal sign characters but is not a valid credentials file, particularly with verbose logging enabled. This can potentially allow ...

7.8CVSS6.2AI score0.01881EPSS
SaveExploits1References77
OSV
OSV
added 2022/04/26 11:15 p.m.8 views

CVE-2022-27888

Foundry Issues service versions 2.244.0 to 2.249.0 was found to be logging in a manner that captured sensitive information session tokens. This issue was fixed in 2.249.1...

5.5CVSS6AI score0.00224EPSS
SaveExploits0References1
NVD
NVD
added 2022/04/26 11:15 p.m.19 views

CVE-2022-27888

Foundry Issues service versions 2.244.0 to 2.249.0 was found to be logging in a manner that captured sensitive information session tokens. This issue was fixed in 2.249.1...

5.5CVSS0.00224EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2022/04/26 10:35 p.m.25 views

CVE-2022-27888 The Foundry Issues service was found to be logging in a manner that captured session tokens.

Foundry Issues service versions 2.244.0 to 2.249.0 was found to be logging in a manner that captured sensitive information session tokens. This issue was fixed in 2.249.1...

5.5CVSS5.5AI score0.00224EPSS
SaveExploits0References1
CVE
CVE
added 2022/04/26 10:35 p.m.85 views

CVE-2022-27888

Summary: CVE-2022-27888 affects Palantir Foundry Issues service versions 2.244.0–2.249.0, where logging could capture sensitive information (session tokens). It was fixed in 2.249.1. Impact: Exposure of session tokens through insecure logging (per the CVE description and citations). Affected prod...

5.5CVSS5.2AI score0.00224EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2022/04/21 6:15 p.m.16 views

CVE-2022-24875

The CVEProject/cve-services is an open source project used to operate the CVE services api. In versions up to and including 1.1.1 the org.conroller.js code would erroneously log user secrets. This has been resolved in commit 46d98f2b and should be available in subsequent versions of the software...

7.5CVSS0.00964EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2022/04/21 5:20 p.m.7 views

CVE-2022-24875 Potential Secrets being logged to disk in CVEProject/cve-services

The CVEProject/cve-services is an open source project used to operate the CVE services api. In versions up to and including 1.1.1 the org.conroller.js code would erroneously log user secrets. This has been resolved in commit 46d98f2b and should be available in subsequent versions of the software...

5.3CVSS7.6AI score0.00964EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2022/04/21 5:20 p.m.25 views

CVE-2022-24875 Potential Secrets being logged to disk in CVEProject/cve-services

The CVEProject/cve-services is an open source project used to operate the CVE services api. In versions up to and including 1.1.1 the org.conroller.js code would erroneously log user secrets. This has been resolved in commit 46d98f2b and should be available in subsequent versions of the software...

5.3CVSS7.7AI score0.00964EPSS
SaveExploits0References2
HackRead
HackRead
added 2022/04/21 2:18 a.m.20 views

What is a VPN and what does data logging by a VPN means?

By Deeba Ahmed A virtual private network or simply VPN is a service that protects your privacy online. This article explains… This is a post from HackRead.com Read the original post: What is a VPN and what does data logging by a VPN means?...

1.9AI score
SaveExploits0
Citrix
Citrix
added 2022/04/21 12:00 a.m.26 views

How to Enable StoreFront Verbose Logging

This article explainshow to use PowerShell to enable the native verbose logging and how to use Microsoft’s DebugView tool to collect traces. Requirements Basic knowledge of PowerShell...

7AI score
SaveExploits0
CNNVD
CNNVD
added 2022/04/20 12:00 a.m.5 views

libinput 格式化字符串错误漏洞

libinput is a library that provides a complete input stack for display servers and other applications that need to handle kernel-provided input devices. A format string error vulnerability exists in libinput that stems from an error during a logging operation. An attacker can exploit this...

7.8CVSS7.2AI score0.00371EPSS
SaveExploits0References15
NVD
NVD
added 2022/04/19 9:15 p.m.30 views

CVE-2022-21460

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Logging. Supported versions that are affected are 5.7.37 and prior and 8.0.28 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL...

4.4CVSS0.01359EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/04/19 9:15 p.m.7 views

CVE-2022-21460

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Logging. Supported versions that are affected are 5.7.37 and prior and 8.0.28 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL...

4.4CVSS6.6AI score0.01359EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder