CLEANSTART-2026-ZA11117 unauthenticated attacker can inject arbitrary fake log lines into Apache ZooKeeper's operational log by sending a crafted add_auth("ensemble",

CVE-2026-84501 affects multiple packages. An unauthenticated attacker can inject arbitrary fake log lines into Apache ZooKeeper's operational log by sending a crafted addauth"ensemble",. See references for individual vulnerability details...

EUVD-2012-2517

Malware in sbrugna...

ansible: become password logged in plaintext when used with PowerShell on Windows

Execution of Ansible content on Microsoft's Windows platform with Powershell 5 or higher may disclose sensitive execution details including 'become' passwords, Ansible module arguments, and return values via Powershell's 'suspicious scriptblock logging' feature, which is enabled by default. The...

Cross site scripting

Microsoft Internet Information Services IIS 7.5 uses weak permissions for the Operational log, which allows local users to discover credentials by reading this file, aka "Password Disclosure Vulnerability."...

PT-2012-4087

Name of the Vulnerable Software and Affected Versions Microsoft Internet Information Services IIS version 7.5 Description The issue concerns weak permissions for the Operational log, allowing local users to discover credentials by reading this file. Recommendations For Microsoft Internet...

CVE-2012-2531: Exposure of Sensitive Information to an Unauthorized Actor

Microsoft Internet Information Services IIS 7.5 uses weak permissions for the Operational log, which allows local users to discover credentials by reading this file, aka "Password Disclosure Vulnerability."...