9722 matches found
CVE-2023-41263
An issue was discovered in Plixer Scrutinizer before 19.3.1. It exposes debug logs to unauthenticated users at the /debug/ URL path. With knowledge of valid IP addresses and source types, an unauthenticated attacker can download debug logs containing application-related information...
CVE-2023-41263
CVE-2023-41263 concerns Plixer Scrutinizer prior to 19.3.1, where debug logs are exposed to unauthenticated users via the /debug/ URL path. The impact is information disclosure: an attacker with knowledge of valid IPs and source types could download application-related logs containing internal in...
CVE-2023-37536
creationtimestamp| type| source ---|---|--- 2023-10-11 12:17:18+00:00| seen| https://t.me/cibsecurity/72064 2024-02-07 08:41:44+00:00| seen| https://t.me/ctinow/180569 2024-02-07 08:41:45+00:00| seen| https://t.me/ctinow/180570 2024-02-07 08:41:46+00:00| seen| https://t.me/ctinow/180571 2024-02-0...
CVE-2023-25604
An insertion of sensitive information into log file vulnerability in Fortinet FortiGuest 1.0.0 allows a local attacker to access plaintext passwords in the RADIUS logs...
Design/Logic Flaw
An insertion of sensitive information into log file vulnerability in Fortinet FortiGuest 1.0.0 allows a local attacker to access plaintext passwords in the RADIUS logs...
CVE-2023-25604
An insertion of sensitive information into log file vulnerability in Fortinet FortiGuest 1.0.0 allows a local attacker to access plaintext passwords in the RADIUS logs...
CVE-2023-5499
Information exposure vulnerability in Shenzhen Reachfar v28, the exploitation of which could allow a remote attacker to retrieve all the week's logs stored in the 'log2' directory. An attacker could retrieve sensitive information such as remembered wifi networks, sent messages, SOS device locatio...
Fleet Server v8.10.3 Security Update
Fleet Server Insertion of Sensitive Information into Log File ESA-2023-20 An issue was discovered in Fleet Server = v8.10.0 and = v8.10.0 and v8.10.3 Solutions and Mitigations: If an affected version is being utilized then upgrade to Fleet Server v8.10.3 or above. If there are ephemeral container...
PT-2023-6022 · Fortinet · Fortiguest
Name of the Vulnerable Software and Affected Versions: Fortinet FortiGuest version 1.0.0 Description: The issue is related to an insertion of sensitive information into log files, which allows a local attacker to access plaintext passwords in the RADIUS logs. This is due to insufficient protectio...
Protect
A use of GET request method with sensitive query strings vulnerability CWE-598 in the FortiOS SSL VPN component may allow an attacker to view plaintext passwords of remote services such as RDP or VNC, if the attacker is able to read the GET requests to those services found in logs, referers,...
The vulnerability of the SCADA system SCADA Data Gateway (SDG) arises from improper processing of output data for registration logs, allowing a intruder to execute arbitrary code.
The vulnerability of the SCADA system SCADA Data Gateway SDG is related to the improper processing of output data for registration logs. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the root user...
PT-2023-28841 · F5 · Big-Iq +1
Name of the Vulnerable Software and Affected Versions: BIG-IP or BIG-IQ system affected versions not specified Description: The issue occurs when TACACS+ audit forwarding is configured on the system, resulting in the sharedsecret being logged in plaintext in the audit log. Recommendations: At the...
PT-2023-32138 · Unknown · Shenzhen Reachfar
Name of the Vulnerable Software and Affected Versions: Shenzhen Reachfar version v28 Description: The issue allows a remote attacker to retrieve all the week's logs stored in the 'log2' directory, potentially exposing sensitive information such as remembered wifi networks, sent messages, SOS devi...
The vulnerability of the Jenkins NodeJS plugin, related to errors in processing user credentials in the build log, allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Jenkins NodeJS plugin is related to errors in processing user credentials in the build log. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...
CVE-2023-5182
Sensitive data could be exposed in logs of subiquity version 23.09.1 and earlier. An attacker in the adm group could use this information to find hashed passwords and possibly escalate their privilege...
CVE-2023-5182
Sensitive data could be exposed in logs of subiquity version 23.09.1 and earlier. An attacker in the adm group could use this information to find hashed passwords and possibly escalate their privilege...
CVE-2023-43810
CVE-2023-43810 concerns OpenTelemetry instrumentation. Autoinstrumentation may expose an unbounded http_method label, enabling memory exhaustion under large numbers of crafted requests. Affected if the application is instrumented for HTTP handlers and does not filter non-standard methods at CDN/L...
PCI DSS 4.0 FIM Requirements Simplified with Qualys File Integrity Monitoring
File Integrity Monitoring FIM is one of the essential requirements under PCI DSS 4.0. It helps organizations detect and respond to unauthorized changes in critical system files, configuration files, or content files, which is crucial for maintaining the security of cardholder data. Organizations...
UBUNTU-CVE-2023-5182
Sensitive data could be exposed in logs of subiquity version 23.09.1 and earlier. An attacker in the adm group could use this information to find hashed passwords and possibly escalate their privilege...
