77 matches found
CVE-2023-0594
A flaw was found in the grafana package. This flaw allows a malicious user with the ability to introduce trace data to provide a JavaScript that changes the password for the user viewing the trace view this could be an admin to a known password, thus gaining access to the admin account. Mitigatio...
IBM MQ Internet Pass-Thru 日志日志信息泄露漏洞
IBM MQ Internet Pass-Thru is an International Business Machines IBM product for supporting the implementation of messaging between remote sites on the Internet. The product is an extended functionality component of IBM MQ that serves as a protocol channel or proxy for establishing protocols durin...
GSD-2022-1000499 arm64: errata: Add detection for TRBE trace data corruption
arm64: errata: Add detection for TRBE trace data corruption This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.10 by commit...
CVE-2021-41090
Grafana Agent prior to versions 0.20.1 and 0.21.2 exposed inline secrets in plaintext via endpoints ./-/config and /agent/api/v1/configs/:key, enabling potential information disclosure if the endpoint is reachable without HTTPS client auth. The issue affects metrics/secret configurations used for...
CVE-2021-38999
IBM MQ Appliance could allow a local attacker to obtain sensitive information by inclusion of sensitive data within trace...
CVE-2021-38999
IBM MQ Appliance could allow a local attacker to obtain sensitive information by inclusion of sensitive data within trace...
CVE-2019-4731
IBM MQ Appliance 9.1.4.CD could allow a local attacker to obtain highly sensitive information by inclusion of sensitive data within trace. IBM X-Force ID: 172616...
CVE-2019-4601
IBM Quality Manager RQM 6.02, 6.06, and 6.0.6.1 could allow an authenticated user to obtain sensitive information from a stack trace that could aid in further attacks against the system...
CVE-2019-4619
IBM MQ and IBM MQ Appliance 7.1, 7.5, 8.0, 9.0 LTS, 9.1 LTS, and 9.1 CD could allow a local attacker to obtain sensitive information by inclusion of sensitive data within trace. IBM X-Force ID: 168862...
CVE-2017-1509
IBM Jazz Foundation products could allow an authenticated user to obtain sensitive information from a stack trace that could be used to aid future attacks. IBM X-Force ID: 129719...
Introducing pywintrace: A Python Wrapper for ETW
Introduction Event tracing for Windows ETW is a lightweight logging facility first introduced with Windows 2000. Originally intended as a software diagnostic, troubleshooting and performance monitoring tool, it was greatly expanded in Windows Vista to create a lightweight debugging mechanism. The...
CVE-2013-1768
The BrokerFactory functionality in Apache OpenJPA 1.x before 1.2.3 and 2.x before 2.2.2 creates local executable JSP files containing logging trace data produced during deserialization of certain crafted OpenJPA objects, which makes it easier for remote attackers to execute arbitrary code by...
CVE-2013-1768
The BrokerFactory functionality in Apache OpenJPA 1.x before 1.2.3 and 2.x before 2.2.2 creates local executable JSP files containing logging trace data produced during deserialization of certain crafted OpenJPA objects, which makes it easier for remote attackers to execute arbitrary code by...
CVE-2013-1768
The BrokerFactory functionality in Apache OpenJPA 1.x before 1.2.3 and 2.x before 2.2.2 creates local executable JSP files containing logging trace data produced during deserialization of certain crafted OpenJPA objects, which makes it easier for remote attackers to execute arbitrary code by...
CVE-2007-4358
Zoidcom 0.6.7 and earlier allows remote attackers to cause a denial of service application crash via a JOIN packet aka connection packet containing 0x69 in the ninth byte, which triggers a "double-delete" of trace data, a different vulnerability than CVE-2005-1643...
Design/Logic Flaw
Zoidcom 0.6.7 and earlier allows remote attackers to cause a denial of service application crash via a JOIN packet aka connection packet containing 0x69 in the ninth byte, which triggers a "double-delete" of trace data, a different vulnerability than CVE-2005-1643...
