CVE-2020-15380

Brocade SANnav before version 2.1.1 logs account credentials at the ‘trace’ logging level...

CVE-2020-15380

Brocade SANnav before version 2.1.1 logs account credentials at the trace logging level, exposing sensitive information. Affected product: Broadcom/Brocade SANnav prior to 2.1.1. Root cause: verbose logging of credentials. Impact: credential exposure risk; no exploitation details are provided in ...

PT-2021-9760

Name of the Vulnerable Software and Affected Versions Brocade SANnav versions prior to 2.1.1 Description The issue concerns the logging of account credentials at the 'trace' logging level. This could potentially expose sensitive information. Recommendations For versions prior to 2.1.1, update to...

SUSE: Security Advisory (SUSE-SU-2018:1784-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PYSEC-2021-89

Datasette is an open source multi-tool for exploring and publishing data. The ?trace=1 debugging feature in Datasette does not correctly escape generated HTML, resulting in a reflected cross-site scripting vulnerability. This vulnerability is particularly relevant if your Datasette installation...

CVE-2021-32670

Datasette is an open source multi-tool for exploring and publishing data. The ?trace=1 debugging feature in Datasette does not correctly escape generated HTML, resulting in a reflected cross-site scripting vulnerability. This vulnerability is particularly relevant if your Datasette installation...

PT-2021-19845

Name of the Vulnerable Software and Affected Versions Datasette versions prior to 0.56.1 Datasette versions prior to 0.57 Description The ? trace=1 debugging feature in Datasette does not correctly escape generated HTML, resulting in a reflected cross-site scripting issue. This is particularly...

Datasette cross-site scripting vulnerabilities

Datasette is an open source multifunctional tool used by applications to explore and publish data. A cross-site scripting vulnerability exists in Datasette 0.57 and 0.56.1 that ? trace=1 input validation error. No detailed vulnerability details are provided at this time...

IBM Cognos Analytics Information Disclosure Vulnerability (CNVD-2021-38672)

IBM Cognos Analytics is a suite of business intelligence software from IBM in the United States. The software includes reports, dashboards, and scorecards, and can assist companies in adjusting their decisions by analyzing such things as key factors and key people. IBM Cognos Analytics suffers fr...

CVE-2019-4722

IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain sensitive information via a stack trace due to mishandling of certain error conditions. IBM X-Force ID: 172128...

CVE-2019-4722

IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain sensitive information via a stack trace due to mishandling of certain error conditions. IBM X-Force ID: 172128...

Information disclosure

IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain sensitive information via a stack trace due to mishandling of certain error conditions. IBM X-Force ID: 172128...

CVE-2019-4722

Summary of CVE-2019-4722 (IBM Cognos Analytics): IBM Cognos Analytics 11.0 and 11.1 contain an information-disclosure vulnerability that allows a remote attacker to obtain sensitive information via a stack trace, caused by mishandling certain error conditions. Public sources in the connected data...

CVE-2019-4722

IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain sensitive information via a stack trace due to mishandling of certain error conditions. IBM X-Force ID: 172128...

PT-2021-28562

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.10 through v5.11.19 Description The issue is related to the restructuring of the trace clock global function to prevent it from blocking. The actual impact and attack plausibility have not yet been proven...

PT-2021-24641

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.118 Description The issue is related to the restructuring of the trace clock global function to prevent it from blocking. The actual impact and attack plausibility have not yet been proven. Recommendations F...

PT-2021-24568

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.10 through v5.11.19 Description: The issue is related to the restructuring of the trace clock global function to prevent it from blocking. The actual impact and attack plausibility have not yet been proven...

PT-2021-28635

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.118 Description The issue is related to the restructuring of the trace clock global function to prevent it from blocking. The actual impact and potential for attack have not been proven yet. Recommendations...

PT-2021-24528

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.10 through v5.12.3 Description: The issue is related to the restructuring of the trace clock global function to prevent it from blocking. The actual impact and attack plausibility have not yet been proven...

PT-2021-28600

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.36 Description The issue is related to the restructuring of the trace clock global function to never block. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kern...