PT-2021-19940 · Nextcloud +2 · Nextcloud Server +2

Name of the Vulnerable Software and Affected Versions: Nextcloud Server versions prior to 20.0.12 Nextcloud Server versions prior to 21.0.4 Nextcloud Server versions prior to 22.1.0 Description: The Nextcloud server, an open-source, self-hosted personal cloud, has a issue where logging of...

Exceptions may have logged Encryption-at-Rest key content

None...

$120 charging cable O.MG remotely steals data from Apple devices

By Deeba Ahmed O.MG cable can log keystrokes from anything it is connected to, including Mac keyboards, iPhones, or iPads, and send the data to attackers. This is a post from HackRead.com Read the original post: $120 charging cable O.MG remotely steals data from Apple devices...

Traefik has an Improper Certificate Handling issue

configurationwatcher.go in Traefik 2.x before 2.1.4 and TraefikEE 2.0.0 mishandles the purging of certificate contents from providers before logging...

PT-2021-6571

Name of the Vulnerable Software and Affected Versions Kubernetes affected versions not specified Description A security issue was discovered in Kubernetes where actors that control the responses of MutatingWebhookConfiguration or ValidatingWebhookConfiguration requests are able to redirect...

OPENSUSE-SU-2021:2892-1 Security update for dovecot23

This update for dovecot23 fixes the following issues: Update dovecot to version 2.3.15 jscSLE-19970: Security issues fixed: - CVE-2021-29157: Dovecot does not correctly escape kid and azp fields in JWT tokens. This may be used to supply attacker controlled keys to validate tokens, if attacker has...

SUSE-SU-2021:2892-1 Security update for dovecot23

This update for dovecot23 fixes the following issues: Update dovecot to version 2.3.15 jscSLE-19970: Security issues fixed: - CVE-2021-29157: Dovecot does not correctly escape kid and azp fields in JWT tokens. This may be used to supply attacker controlled keys to validate tokens, if attacker has...

SUSE-SU-2021:2891-1 Security update for dovecot23

This update for dovecot23 fixes the following issues: Update dovecot to version 2.3.15 jscSLE-19970: Security issues fixed: - CVE-2021-29157: Dovecot does not correctly escape kid and azp fields in JWT tokens. This may be used to supply attacker controlled keys to validate tokens, if attacker has...

CVE-2021-27019

PuppetDB logging included potentially sensitive system information...

UBUNTU-CVE-2021-27019

PuppetDB logging included potentially sensitive system information...

CVE-2021-27019

PuppetDB logging included potentially sensitive system information...

Information disclosure

PuppetDB logging included potentially sensitive system information...

CVE-2021-27019

PuppetDB logging included potentially sensitive system information...

CVE-2021-27019

PuppetDB logging included potentially sensitive system information...

CVE-2021-27019

Technical details about CVE-2021-27019 are not publicly available in the provided connected documents; descriptions reiterate information disclosure through PuppetDB logging. Monitor for updates.

CVE-2021-27019

PuppetDB logging included potentially sensitive system information...

Missing Authorization in Apache Airflow

If remote logging is not used, the worker in the case of CeleryExecutor or the scheduler in the case of LocalExecutor runs a Flask logging server and is listening on a specific port and also binds on 0.0.0.0 by default. This logging server had no authentication and allows reading log files of DAG...

GHSA-M6H2-JX9V-58W6 Missing Authorization in Apache Airflow

If remote logging is not used, the worker in the case of CeleryExecutor or the scheduler in the case of LocalExecutor runs a Flask logging server and is listening on a specific port and also binds on 0.0.0.0 by default. This logging server had no authentication and allows reading log files of DAG...

CVE-2017-17888

creationtimestamp| type| source ---|---|--- 2021-08-26 07:07:09+00:00| seen| MISP/abbf5767-dae4-4313-af05-b12573b4258b 2024-11-14 06:09:47+00:00| seen| MISP/00b8bda7-2b7e-4df7-bd5d-c89d45e2dfdc...

F5 Access Guided Configuration logging information disclosure vulnerability

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, remote access policy management, etc. The F5 Access Guided Configuration logging information disclosure vulnerability can be exploited by attackers to obtain...