9740 matches found
Linux kernel 安全漏洞
Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. A security vulnerability exists in the Linux kernel, which stems from a failure to write-protect the TDP MMU SPTE will result in writes performed by L2 not being reflected in dirty logs...
CVE-2024-2877
Summary: CVE-2024-2877 affects Vault Enterprise when configured with performance standby nodes and a configured audit device, causing inadvertent logging of HTTP request headers on the standby node in cleartext. Affected component: Vault Enterprise (standby/log audit path). Root cause / impact: S...
Vault Enterprise Leaks Sensitive HTTP Request Headers in Audit Log When Deployed With a Performance Standby Node
Summary Vault Enterprise, when configured with both performance standby nodes and an audit device, will inadvertently log request headers on the standby node. These logs may have included sensitive HTTP request header information in cleartext. This vulnerability, CVE-2024-2877, was fixed in Vault...
SUSE CVE-2023-52723
In KDE libksieve before 23.03.80, kmanagesieve/session.cpp places a cleartext password in server logs because a username variable is accidentally given a password value...
MAL-2024-1329 Malicious code in discords-logs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6c1b92f0e953b444061efac030e0d56d873e9e8bbe7e9b9557db0aeda361092e The OpenSSF Package Analysis project identified 'discords-logs' @ 1.2.6 npm as malicious. It is considered malicious because: - The package...
Malicious code in discords-logs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6c1b92f0e953b444061efac030e0d56d873e9e8bbe7e9b9557db0aeda361092e The OpenSSF Package Analysis project identified 'discords-logs' @ 1.2.6 npm as malicious. It is considered malicious because: - The package...
CVE-2023-52723
In KDE libksieve before 23.03.80, kmanagesieve/session.cpp places a cleartext password in server logs because a username variable is accidentally given a password value...
DEBIAN-CVE-2023-52723
In KDE libksieve before 23.03.80, kmanagesieve/session.cpp places a cleartext password in server logs because a username variable is accidentally given a password value...
CVE-2023-52723
In KDE libksieve before 23.03.80, kmanagesieve/session.cpp places a cleartext password in server logs because a username variable is accidentally given a password value...
UBUNTU-CVE-2023-52723
In KDE libksieve before 23.03.80, kmanagesieve/session.cpp places a cleartext password in server logs because a username variable is accidentally given a password value...
KDE libksieve 安全漏洞
libksieve is a library in the KDE GitHub Mirror open source. A security vulnerability exists in KDE libksieve versions prior to 23.03.80, which stems from placing plaintext passwords in server logs...
CVE-2023-52723
In KDE libksieve, vulnerable component is kmanagesieve/session.cpp where a username variable is accidentally assigned a password value, causing cleartext credentials to be written to server logs. Affected product/version: libksieve prior to 23.03.80. Reported impact: potential exposure of user pa...
CVE-2023-52723
In KDE libksieve before 23.03.80, kmanagesieve/session.cpp places a cleartext password in server logs because a username variable is accidentally given a password value...
CVE-2023-52723
In KDE libksieve before 23.03.80, kmanagesieve/session.cpp places a cleartext password in server logs because a username variable is accidentally given a password value...
CVE-2023-6484 Keycloak: log injection during webauthn authentication or registration
A log injection flaw was found in Keycloak. A text string may be injected through the authentication form when using the WebAuthn authentication mode. This issue may have a minor impact to the logs integrity...
Vyper 安全漏洞
Vyper is the Pythonic smart contract language for EVM. A security vulnerability exists in Vyper versions 0.3.10 and earlier, which stems from incorrect logging of topics in rawlog, and could lead to unexpected behavior in client applications that rely on these logs...
CVE-2024-20359
creationtimestamp| type| source ---|---|--- 2024-04-24 17:36:17+00:00| seen| MISP/da3eb576-b0a7-402d-aff2-d72dec3dce6a 2024-04-24 18:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-04-24 20:05:36+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus14/2024...
Exploit for Improper Input Validation in Paloaltonetworks Pan-Os
CVE-2024-3400-pot Simple honeypot for CVE-2024-3400 Palo Alto...
Multiple vulnerabilities in RoamWiFi R10
Overview RoamWiFi R10 provided by RoamWiFi Technology Co., Ltd. contains multiple vulnerabilities listed below. Active debug code CWE-489 - CVE-2024-31406 Insertion of sensitive information into log file CWE-532 - CVE-2024-32051 Mitsui Bussan Secure Directions, Inc. reported these vulnerabilities...
audited: race condition can lead to audit logs being incorrectly attributed to the wrong user
A race condition flaw was found in Audited. This issue may allow an authenticated user to attribute audit log entries to another user...