CVE-2022-20278

CVE-2022-20278 affects Android 13, in Accounts, due to insufficient log filtering that could write sensitive data to the system log. This enables local information disclosure with system privileges, no user interaction required. The issue is addressed in Android 13 security fixes; devices with pa...

CLSA-2022-1654710004 Fixed CVE-2022-24903 in rsyslog

CVE-2022-24903: fix heap-based overflow in TCP syslog server...

GHSA-PH84-VG7Q-FQQ8 Bolt Cross-site Scripting (XSS) via a title that is mishandled in the system log

Bolt before 3.6.10 has XSS via a title that is mishandled in the system log...

Bolt Cross-site Scripting (XSS) via a title that is mishandled in the system log

Bolt before 3.6.10 has XSS via a title that is mishandled in the system log...

Jenkins Amazon EC2 Plugin leaked beginning of private key in system log

Jenkins Amazon EC2 Plugin printed a log message that contained the beginning of the private key to the Jenkins system log. The log message no longer includes the beginning of the private key...

GHSA-W7FV-7J46-WWRV Jenkins Amazon EC2 Plugin leaked beginning of private key in system log

Jenkins Amazon EC2 Plugin printed a log message that contained the beginning of the private key to the Jenkins system log. The log message no longer includes the beginning of the private key...

WordPress Wbcom Designs – WordPress System Log plugin <= 1.0.5 - Arbitrary Plugin Installation, Activation and Deactivation vulnerability

Arbitrary Plugin Installation, Activation and Deactivation vulnerability discovered by Mary JJ Jay in WordPress Wbcom Designs – WordPress System Log plugin versions = 1.0.5. Solution Deactivate and delete. This plugin has been closed as of March 9, 2022 and is not available for download. This...

Information disclosure

A flaw was found in keepass. The vulnerability occurs due to logging the plain text passwords in system log and leads to an Information Exposure vulnerability. This flaw allows an attacker to interact and read sensitive passwords and logs...

CVE-2022-0725

A flaw was found in keepass. The vulnerability occurs due to logging the plain text passwords in system log and leads to an Information Exposure vulnerability. This flaw allows an attacker to interact and read sensitive passwords and logs...

WordPress WP System Log plugin <= 1.0.22 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress WP System Log plugin versions = 1.0.22. Solution Update the WordPress WP System Log plugin to the latest available version at least 1.0.23...

WordPress WP System Log plugin <= 1.0.22 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress WP System Log plugin versions = 1.0.22. Solution Update the WordPress WP System Log plugin to the latest available version at least 1.0.23...

GHSA-PJ4J-287J-F742 Cross-site Scripting in Contao

Contao before 4.5.7 has XSS in the system log...

Cross-site Scripting in Contao

Contao before 4.5.7 has XSS in the system log...

CVE-2021-20159

Trendnet AC2600 TEW-827DRU version 2.08B01 is vulnerable to command injection. The system log functionality of the firmware allows for command injection as root by supplying a malformed parameter...

CVE-2021-20159

Trendnet AC2600 TEW-827DRU version 2.08B01 is vulnerable to command injection. The system log functionality of the firmware allows for command injection as root by supplying a malformed parameter...

CVE-2021-20159

Trendnet AC2600 TEW-827DRU version 2.08B01 is vulnerable to command injection. The system log functionality of the firmware allows for command injection as root by supplying a malformed parameter...

CVE-2021-24756

The WP System Log WordPress plugin before 1.0.21 does not sanitise, validate and escape the IP address retrieved from login requests before outputting them in the admin dashboard, which could allow unauthenticated attacker to perform Cross-Site Scripting attacks against admins viewing the logs...

CVE-2021-24756

The WP System Log WordPress plugin before 1.0.21 does not sanitise, validate and escape the IP address retrieved from login requests before outputting them in the admin dashboard, which could allow unauthenticated attacker to perform Cross-Site Scripting attacks against admins viewing the logs...

CVE-2021-24756

The WP System Log plugin (WordPress) before version 1.0.21 does not sanitize, validate, or escape the IP address parsed from login requests, allowing an unauthenticated attacker to trigger Cross‑Site Scripting in admins viewing the Activity/Log dashboard. A fix is to upgrade to 1.0.21 or newer (r...

WordPress 插件跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. The platform supports the erection of personal blog sites on PHP and MySQL servers. WP System Log plugin is a WordPress open source application plugin. WordPress WP System Log plugin in versions pri...