CVE-2019-16003 Cisco UCS Director Information Disclosure Vulnerability

A vulnerability in the web-based management interface of Cisco UCS Director could allow an unauthenticated, remote attacker to download system log files from an affected device. The vulnerability is due to an issue in the authentication logic of the web-based management interface. An attacker cou...

CVE-2019-16003

CVE-2019-16003 affects Cisco UCS Director Web-based management interface. A flaw in the authentication logic could allow an unauthenticated, remote attacker to download system log files generated by an administrator by sending a crafted request to the web interface. The vulnerability stems from h...

CVE-2019-16003 Cisco UCS Director Information Disclosure Vulnerability

A vulnerability in the web-based management interface of Cisco UCS Director could allow an unauthenticated, remote attacker to download system log files from an affected device. The vulnerability is due to an issue in the authentication logic of the web-based management interface. An attacker cou...

Linux: Separate partition for /var/log

The /var/log directory is used to store system log data. This script tests if a separate partition exists for /var/log. Copyright C 2020 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the...

CVE-2012-5535

gnome-system-log polkit policy allows arbitrary files on the system to be read...

CVE-2012-5535

gnome-system-log polkit policy allows arbitrary files on the system to be read...

CVE-2012-5535

CVE-2012-5535 concerns gnome-system-log polkit policy that allows reading arbitrary files on the system. The root cause is a polkit policy mistake that grants read access beyond intended scope. Impact: confidentiality is potentially HIGH (per CVSS-3.1), with non-trivial access possible without us...

Win32k Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data;...

CVE-2019-17512

There are some web interfaces without authentication requirements on D-Link DIR-412 A1-1.14WW routers. An attacker can clear the router's log file via act=clear&logtype=sysact to logclear.php, which could be used to erase attack traces...

Weak Password Vulnerability in the System-Log Audit System of Taihe Information Security Operation Center of Beijing Qixingchen Information Security Technology Co.

TAICHI Information Security Operation Center System - Log Audit System TSOC-SA, TSOC-SA is capable of real-time collection of logs, events, alarms and other information generated by security devices, network devices, hosts, operating systems, and various application systems from different vendors...

Cross-site Scripting (XSS)

Bolt is vulnerable to cross-site scripting XSS. The vulnerability exists due to lack of proper handling of Create file for system log in file manager, allowing a remote attacker to inject arbitrary Javascript into a victim's browser through the affected parameters...

CVE-2019-15483

Bolt before 3.6.10 has XSS via a title that is mishandled in the system log...

Design/Logic Flaw

Bolt before 3.6.10 has XSS via a title that is mishandled in the system log...

CVE-2019-15483

Bolt before 3.6.10 has XSS via a title that is mishandled in the system log...

CloudBees Jenkins Configuration as Code plugin log information leakage vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software release/testing projects and some timed tasks . Configuration as Code Plugin is used in which a Jenki...

CVE-2019-10364

Jenkins Amazon EC2 Plugin 1.43 and earlier wrote the beginning of private keys to the Jenkins system log...

CVE-2019-10364

Jenkins Amazon EC2 Plugin 1.43 and earlier wrote the beginning of private keys to the Jenkins system log...

CVE-2019-10364

CVE-2019-10364 affects the Jenkins Amazon EC2 Plugin up to and including version 1.43. The issue arises because the plugin writes the beginning of private keys to the Jenkins system log, which could expose sensitive information. The Red Hat and PT-Security entries corroborate this behavior and no...

CVE-2018-10691

An issue was discovered on Moxa AWK-3121 1.14 devices. It is intended that an administrator can download /systemlog.log the system log. However, the same functionality allows an attacker to download the file without any authentication or authorization...

CVE-2018-10691

The CVE-2018-10691 issue affects Moxa AWK-3121 devices (version 1.14) and is caused by Improper Access Control, allowing an unauthenticated user to download /systemlog.log (system log) via the device web interface. Public sources (NVD, CISA/ICS advisory, CNVD) confirm the vulnerability and its im...