PT-2021-11055

Name of the Vulnerable Software and Affected Versions: Trace Financial CRESTBridge versions prior to 6.3.0.03 Description: The issue concerns a stored XSS vulnerability. This vulnerability was fixed in version 6.3.0.03. Recommendations: For versions prior to 6.3.0.03, update to version 6.3.0.03 o...

PT-2021-11059

Name of the Vulnerable Software and Affected Versions: Trace Financial CRESTBridge versions prior to 6.3.0.03 Description: The issue concerns an authenticated SQL injection vulnerability. This means that an attacker who has valid credentials can potentially inject malicious SQL code to manipulate...

Trace Financial CRESTBridge 跨站脚本漏洞

CRESTBridge is a resilient, feature-rich interface for Trace Financial.A cross-site scripting vulnerability exists in Trace Financial CRESTBridge, which can be exploited by attackers to execute client-side code...

CVE-2020-15380

Brocade SANnav before version 2.1.1 logs account credentials at the ‘trace’ logging level...

Design/Logic Flaw

Brocade SANnav before version 2.1.1 logs account credentials at the ‘trace’ logging level...

CVE-2020-15380

Brocade SANnav before version 2.1.1 logs account credentials at the ‘trace’ logging level...

CVE-2020-15380

Brocade SANnav before version 2.1.1 logs account credentials at the trace logging level, exposing sensitive information. Affected product: Broadcom/Brocade SANnav prior to 2.1.1. Root cause: verbose logging of credentials. Impact: credential exposure risk; no exploitation details are provided in ...

PT-2021-9760

Name of the Vulnerable Software and Affected Versions Brocade SANnav versions prior to 2.1.1 Description The issue concerns the logging of account credentials at the 'trace' logging level. This could potentially expose sensitive information. Recommendations For versions prior to 2.1.1, update to...

SUSE: Security Advisory (SUSE-SU-2018:1784-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PYSEC-2021-89

Datasette is an open source multi-tool for exploring and publishing data. The ?trace=1 debugging feature in Datasette does not correctly escape generated HTML, resulting in a reflected cross-site scripting vulnerability. This vulnerability is particularly relevant if your Datasette installation...

CVE-2021-32670

Datasette is an open source multi-tool for exploring and publishing data. The ?trace=1 debugging feature in Datasette does not correctly escape generated HTML, resulting in a reflected cross-site scripting vulnerability. This vulnerability is particularly relevant if your Datasette installation...

Datasette 跨站脚本漏洞

Datasette is an open source multifunctional tool used by applications to explore and publish data. A cross-site scripting vulnerability exists in Datasette 0.57 and 0.56.1 that ? trace=1 input validation error. No detailed vulnerability details are provided at this time...

PT-2021-19845

Name of the Vulnerable Software and Affected Versions Datasette versions prior to 0.56.1 Datasette versions prior to 0.57 Description The ? trace=1 debugging feature in Datasette does not correctly escape generated HTML, resulting in a reflected cross-site scripting issue. This is particularly...

IBM Cognos Analytics Information Disclosure Vulnerability (CNVD-2021-38672)

IBM Cognos Analytics is a suite of business intelligence software from IBM in the United States. The software includes reports, dashboards, and scorecards, and can assist companies in adjusting their decisions by analyzing such things as key factors and key people. IBM Cognos Analytics suffers fr...

CVE-2019-4722

IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain sensitive information via a stack trace due to mishandling of certain error conditions. IBM X-Force ID: 172128...

CVE-2019-4722

IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain sensitive information via a stack trace due to mishandling of certain error conditions. IBM X-Force ID: 172128...

Information disclosure

IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain sensitive information via a stack trace due to mishandling of certain error conditions. IBM X-Force ID: 172128...

CVE-2019-4722

Summary of CVE-2019-4722 (IBM Cognos Analytics): IBM Cognos Analytics 11.0 and 11.1 contain an information-disclosure vulnerability that allows a remote attacker to obtain sensitive information via a stack trace, caused by mishandling certain error conditions. Public sources in the connected data...

CVE-2019-4722

IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain sensitive information via a stack trace due to mishandling of certain error conditions. IBM X-Force ID: 172128...

PT-2021-24568

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.10 through v5.11.19 Description: The issue is related to the restructuring of the trace clock global function to prevent it from blocking. The actual impact and attack plausibility have not yet been proven...