CVE-2021-37709

Shopware is an open source eCommerce platform. Versions prior to 6.4.3.1 contain a vulnerability involving an insecure direct object reference of log files of the Import/Export feature. Version 6.4.3.1 contains a patch. As workarounds for older versions of 6.1, 6.2, and 6.3, corresponding securit...

CVE-2021-24766

The 404 to 301 – Redirect, Log and Notify 404 Errors WordPress plugin before 3.0.9 does not have CSRF check in place when cleaning the logs, which could allow attacker to make a logged in admin delete all of them via a CSRF attack...

CVE-2020-8447

In OSSEC-HIDS 2.7 through 3.5.0, the server component responsible for log analysis ossec-analysisd is vulnerable to a use-after-free during processing of syscheck formatted msgs received from authenticated remote agents and delivered to the analysisd processing queue by ossec-remoted...

CVE-2016-10818

cPanel before 57.9999.54 incorrectly sets log-file permissions in dnsadmin-startup and spamd-startup SEC-124...

Kibana 7.13.x < 7.17.16 Insertion of Sensitive Information into Log File

According to its self-reported version number, the Kibana application running on the remote host is 7.13.x prior to 7.17.16 or 8.x prior to 8.11.1. It is, therefore, affected by an issue that can log sensitive information in Kibana logs in the event of an error or in the event where debug level...

CVE-2025-27111

Rack is a modular Ruby web server interface. The Rack::Sendfile middleware logs unsanitised header values from the X-Sendfile-Type header. An attacker can exploit this by injecting escape sequences such as newline characters into the header, resulting in log injection. This vulnerability is fixed...

Linux Distros Unpatched Vulnerability : CVE-2017-3317

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Logging. Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earli...

CVE-2023-31423

Possible information exposure through log file vulnerability where sensitive fields are recorded in the configuration log without masking on Brocade SANnav before v2.3.0 and 2.2.2a. Notes: To access the logs, the local attacker must have access to an already collected Brocade SANnav "supportsave"...

Infinispan vulnerable to Insertion of Sensitive Information into Log File

A flaw was found in Infinispan, when using JGroups with JDBCPING. This issue occurs when an application inadvertently exposes sensitive information, such as configuration details or credentials, through logging mechanisms. This exposure can lead to unauthorized access and exploitation by maliciou...

CVE-2024-45598

Cacti is an open source performance and fault management framework. Prior to 1.2.29, an administrator can change the Poller Standard Error Log Path parameter in either Installation Step 5 or in Configuration-Settings-Paths tab to a local file inside the server. Then simply going to Logs tab and...

CVE-2024-49088

CVE-2024-49088 affects the Windows Common Log File System Driver and is described as a local elevation of privilege vulnerability. The CVSS 3.1 vector (LOCAL, LOW complexity, LOW privileges required) with a base score of 7.8 indicates a high-risk, local-attack scenario resulting in high impact to...

Log Injection

ckan is vulnerable Log Injection. The vulnerability is due to the lack of filtering on incoming parameters in the user endpoint, allowing attackers to inject false log entries or corrupt the log file format, resulting in Log Injection...

PT-2023-28911 · Apache · Apache Inlong

Name of the Vulnerable Software and Affected Versions: Apache InLong versions 1.4.0 through 1.8.0 Description: The issue affects Apache InLong, allowing an attacker to create misleading or false log records. This makes it harder to audit and trace malicious activities. The estimated number of...

CVE-2023-29371

creationtimestamp| type| source ---|---|--- 2023-06-16 04:40:39+00:00| seen| https://t.me/GhostPrincess/12279 2023-06-22 09:15:28+00:00| seen| MISP/d930fe8e-c0fa-4a94-a43d-71fc6f512aa3...

WordPress 404 to 301 Plugin < 3.1.2 XSS Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:404to301project:404to301"; ifdescription...

CVE-2022-22000

Windows Common Log File System Driver Elevation of Privilege Vulnerability...

CVE-2013-1202

Cisco ACE A23.6 allows log retention DoS...

Arbitrary File Read

redhat-access-plugin-openstack is vulnerable to arbitrary file read. The vulnerability exists as the log-viewing function in the Red Hat redhat-access-plugin before 6.0.3 for OpenStack Dashboard horizon allows remote attackers to read arbitrary files via a crafted path...

Positive Software H-Sphere Winbox 2.4 Sensitive Logfile Content Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/13559/info It is reported that Positive Software H-Sphere Winbox stores user account information in a plaintext format inside of application log files. As a result, user credentials could be exposed to other local users w...

CVE-2010-2550

creationtimestamp| type| source ---|---|--- 2010-08-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/14607 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/windows/smb/ms10054queryfspooloverflow.rb 2025-02-06...