9635 matches found
CVE-2014-6123
The CVE-2014-6123 entry affects IBM Rational AppScan Source and related Security AppScan Source versions up to 9.0.1, where local users can read installation logs to obtain sensitive credential information. Affected products include Rational AppScan Source 8.0–8.0.2, 8.5–8.5.0.1, and Security App...
CVE-2014-6123
IBM Rational AppScan Source 8.0 through 8.0.0.2 and 8.5 through 8.5.0.1 and Security AppScan Source 8.6 through 8.6.0.2, 8.7 through 8.7.0.1, 8.8, 9.0 through 9.0.0.1, and 9.0.1 allow local users to obtain sensitive credential information by reading installation logs...
Cisco Adaptive Security Appliance Software Information Leak in Syslog Messages Vulnerability
A vulnerability in the syslog management subsystem of devices running Cisco Adaptive Security Appliance ASA Software may allow an unauthenticated, remote attacker to access sensitive information. The vulnerability is due to improper sanitization of syslog messages. An attacker could exploit this...
MercadoPago Android App Information Disclosure
Advisory ID Internal CORE-2014-0011 1. Advisory Information Title: MercadoPago Android App Information Disclosure Advisory ID: CORE-2014-0011 Date published: 2014-12-19 Date of last update: 2014-12-17 Vendors contacted: Mercadolibre Release mode: Coordinated release 2. Vulnerability Information...
EAP6: Plain text password logging during security audit
It was found that the security audit functionality logged request parameters in plain text. This may have caused passwords to be included in the audit log files when using BASIC or FORM-based authentication. A local attacker with access to audit log files could possibly use this flaw to obtain...
Cisco Unified Computing System Manager Information Disclosure Vulnerability
A vulnerability in the system logs of the Cisco Unified Computing System Manager could allow an unauthenticated, remote attacker to view sensitive system information. The vulnerability is due to the inclusion of sensitive information in certain log files. An attacker could exploit this...
CVE-2014-6075
IBM Security QRadar SIEM and QRadar Risk Manager 7.1 before MR2 Patch 9 and 7.2 before 7.2.4 Patch 1, and QRadar Vulnerability Manager 7.2 before 7.2.4 Patch 1, place credentials in URLs, which allows remote attackers to obtain sensitive information by reading 1 web-server access logs, 2 web-serv...
Veeam Agent for Microsoft Windows: Service suddenly stopped working.
Challenge While running Veeam Agent for Microsoft Windows VAW, the Control Panel displays the error: Services suddenly stopped working. Cause The Veeam Agent for Microsoft Windows Control Panel has lost contact with the Veeam Agent for Microsoft Windows service on the local machine. Possible caus...
JVN#89852154: iLogScanner vulnerable to cross-site scripting
iLogScanner provided by INFORMATION-TECHNOLOGY PROMOTION AGENCY, JAPAN IPA is a software that checks access logs to detect suspected attacks against a web server. iLogScanner contains a cross-site scripting vulnerability CWE-79 due to a flaw when processing analysis results and outputting the...
[SECURITY] Fedora 21 Update: freeipa-4.1.1-1.fc21
IPA is an integrated solution to provide centrally managed Identity machin e, user, virtual machines, groups, authentication credentials, Policy configuration settings, access control information and Audit events, logs, analysis thereof...
Cisco Unity Connection Information Disclosure Vulnerability
A vulnerability in the Unified Messaging Service UMS of Cisco Unity Connection, could allow an authenticated, remote attacker to access sensitive information. The vulnerability is due to the inclusion of sensitive information in the logs. An attacker could exploit this vulnerability by viewing th...
[SECURITY] Fedora 21 Update: sysklogd-1.5-18.fc21
The sysklogd package contains two system utilities syslogd and klogd which provide support for system logging. Syslogd and klogd run as daemons background processes and log system messages to different places, like sendmail logs, security logs, error logs, etc...
CVE-2014-8528
McAfee Network Data Loss Prevention NDLP before 9.3 logs session IDs, which allows local users to obtain sensitive information by reading the audit log...
Design/Logic Flaw
McAfee Network Data Loss Prevention NDLP before 9.2.2 allows local users to obtain sensitive information by reading the logs...
Facebook Releases osquery to Open Source
Facebook is in a giving mood today. The social networking giant announced today that it will release to open source a framework that detects and logs state changes in an operating system likely caused by an attack or performance meltdown. It also announced that it will hand out up to $300,000 nex...
CVE-2012-1111
lightdm before 1.0.9 does not properly close file descriptors before opening a child process, which allows local users to write to the lightdm log or have other unspecified impact...
[SECURITY] Fedora 20 Update: sysklogd-1.5-18.fc20
The sysklogd package contains two system utilities syslogd and klogd which provide support for system logging. Syslogd and klogd run as daemons background processes and log system messages to different places, like sendmail logs, security logs, error logs, etc...
Website Traffic Visualization: Logstalgia
Website Traffic Visualization Logstalgia is a website traffic visualization that replays or streams web-server access logs as a pong-like battle between the web server and an never ending torrent of requests. Requests appear as colored balls the same color as the host which travel across the scre...
Information disclosure
Red Hat Conga 0.12.2 allows remote attackers to obtain sensitive information via a crafted request to the 1 homebase, 2 cluster, 3 storage, 4 portalskins/custom, or 5 logs Luci extension...