Lucene search
K

19 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2011-4987

Malware in sbrugna...

5CVSS6.4AI score0.00338EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-7349

Malicious code in bioql PyPI...

4.9CVSS5.4AI score0.0011EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2025/08/04 11:25 p.m.1 views

SUSE CVE-2025-6624

Versions of the package snyk before 1.1297.3 are vulnerable to Insertion of Sensitive Information into Log File through local Snyk CLI debug logs. Container Registry credentials provided via environment variables or command line arguments can be exposed when executing Snyk CLI in DEBUG or...

7.2CVSS7.1AI score0.00115EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/03/13 6:6 p.m.7 views

CVE-2025-0071

SAP Web Dispatcher and Internet Communication Manager allow an attacker with administrative privileges to enable debugging trace mode with a specific parameter value. This exposes unencrypted passwords in the logs, causing a high impact on the confidentiality of the application. There is no impac...

4.9CVSS6.8AI score0.0011EPSS
Exploits0References1
NVD
NVD
added 2025/03/11 1:15 a.m.5 views

CVE-2025-0071

SAP Web Dispatcher and Internet Communication Manager allow an attacker with administrative privileges to enable debugging trace mode with a specific parameter value. This exposes unencrypted passwords in the logs, causing a high impact on the confidentiality of the application. There is no impac...

4.9CVSS0.0011EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/03/11 12:31 a.m.6 views

CVE-2025-0071 Information Disclosure vulnerability in SAP Web Dispatcher and Internet Communication Manager

SAP Web Dispatcher and Internet Communication Manager allow an attacker with administrative privileges to enable debugging trace mode with a specific parameter value. This exposes unencrypted passwords in the logs, causing a high impact on the confidentiality of the application. There is no impac...

4.9CVSS0.0011EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/03/11 12:31 a.m.5 views

CVE-2025-0071 Information Disclosure vulnerability in SAP Web Dispatcher and Internet Communication Manager

SAP Web Dispatcher and Internet Communication Manager allow an attacker with administrative privileges to enable debugging trace mode with a specific parameter value. This exposes unencrypted passwords in the logs, causing a high impact on the confidentiality of the application. There is no impac...

4.9CVSS7.1AI score0.0011EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/02/15 12:0 a.m.2 views

PT-2024-2258 · Unknown · Trace Mode 7

Name of the Vulnerable Software and Affected Versions: TRACE MODE 7 affected versions not specified Description: The issue is related to the storage of confidential information in unencrypted form in memory. Exploitation of this issue could allow an attacker to gain unauthorized access to protect...

4.6CVSS7.1AI score
Exploits0References2
Positive Technologies
Positive Technologies
added 2023/03/07 12:0 a.m.4 views

PT-2023-7551 · Unknown · Trace Mode

Name of the Vulnerable Software and Affected Versions: TRACE MODE affected versions not specified Description: The issue is related to the unencrypted storage of credentials in the SCADA system. Exploitation of this issue could allow an attacker to modify user privileges, potentially granting...

4.9CVSS6.9AI score
Exploits0References1
Positive Technologies
Positive Technologies
added 2023/03/07 12:0 a.m.1 views

PT-2023-7550 · Unknown · Trace Mode

Name of the Vulnerable Software and Affected Versions: TRACE MODE affected versions not specified Description: The issue is related to the storage of unencrypted credentials in the SCADA system. Exploitation of this issue could allow an attacker to substitute a password hash from one user to...

4.9CVSS7AI score
Exploits0References1
RedHat Linux
RedHat Linux
added 2021/04/20 1:23 p.m.80 views

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

7.8CVSS6.8AI score0.00335EPSS
Exploits4References5
OSV
OSV
added 2020/08/07 4:15 p.m.5 views

DEBIAN-CVE-2020-11993

Apache HTTP Server versions 2.4.20 to 2.4.43 When trace/debug was enabled for the HTTP/2 module and on certain traffic edge patterns, logging statements were made on the wrong connection, causing concurrent use of memory pools. Configuring the LogLevel of modhttp2 above "info" will mitigate this...

7.5CVSS6.6AI score0.2745EPSS
Exploits2References1
OSV
OSV
added 2020/08/07 4:15 p.m.1 views

UBUNTU-CVE-2020-11993

Apache HTTP Server versions 2.4.20 to 2.4.43 When trace/debug was enabled for the HTTP/2 module and on certain traffic edge patterns, logging statements were made on the wrong connection, causing concurrent use of memory pools. Configuring the LogLevel of modhttp2 above "info" will mitigate this...

7.5CVSS6.9AI score0.2745EPSS
Exploits2References5
NVD
NVD
added 2012/04/18 10:33 a.m.9 views

CVE-2011-5087

Unspecified vulnerability in AdAstrA TRACE MODE Data Center allows remote attackers to read arbitrary files via unknown vectors, as demonstrated by the GLEG Agora SCADA+ Exploit Pack for Immunity CANVAS...

5CVSS6.7AI score0.00338EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2012/04/18 10:33 a.m.1 views

CVE-2011-5087

Unspecified vulnerability in AdAstrA TRACE MODE Data Center allows remote attackers to read arbitrary files via unknown vectors, as demonstrated by the GLEG Agora SCADA+ Exploit Pack for Immunity CANVAS...

5CVSS5.8AI score0.00338EPSS
Exploits0References3
Prion
Prion
added 2012/04/18 10:33 a.m.13 views

Design/Logic Flaw

Unspecified vulnerability in AdAstrA TRACE MODE Data Center allows remote attackers to read arbitrary files via unknown vectors, as demonstrated by the GLEG Agora SCADA+ Exploit Pack for Immunity CANVAS...

5CVSS7.2AI score0.00338EPSS
Exploits0References2
CVE
CVE
added 2012/04/18 10:0 a.m.40 views

CVE-2011-5087

Summary: CVE-2011-5087 is described as an unspecified vulnerability in AdAstrA TRACE MODE Data Center that allows remote attackers to read arbitrary files through unknown vectors, with demonstration tied to the GLEG Agora SCADA+ Exploit Pack for Immunity CANVAS. Affected product (per documents): ...

5CVSS6.9AI score0.00338EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2012/04/18 10:0 a.m.16 views

CVE-2011-5087

Unspecified vulnerability in AdAstrA TRACE MODE Data Center allows remote attackers to read arbitrary files via unknown vectors, as demonstrated by the GLEG Agora SCADA+ Exploit Pack for Immunity CANVAS...

6.7AI score0.00338EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2006/05/13 12:0 a.m.49 views

FreeBSD : sudo -- arbitrary command execution (1b725079-9ef6-11da-b410-000e0c2e438a)

Tavis Ormandy reports : The bash shell uses the value of the PS4 environment variable after expansion as a prefix for commands run in execution trace mode. Execution trace mode xtrace is normally set via bash's -x command line option or interactively by running 'set -o xtrace'. However, it may al...

4.6CVSS5.8AI score0.00128EPSS
Exploits2References3
Rows per page
Query Builder