Search Results (468 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2016-0898 1 Vmware 1 Pivotal Software Mysql 2024-11-21 10.0 Critical
MySQL for PCF tiles 1.7.x before 1.7.10 were discovered to log the AWS access key in plaintext. These credentials were logged to the Service Backup component logs, and not the system log, thus were not exposed outside the Service Backup VM.
CVE-2015-9543 1 Openstack 1 Nova 2024-11-21 3.3 Low
An issue was discovered in OpenStack Nova before 18.2.4, 19.x before 19.1.0, and 20.x before 20.1.0. It can leak consoleauth tokens into log files. An attacker with read access to the service's logs may obtain tokens used for console access. All Nova setups using novncproxy are affected. This is related to NovaProxyRequestHandlerBase.new_websocket_client in console/websocketproxy.py.
CVE-2015-1343 1 Canonical 1 Ubuntu Linux 2024-11-21 N/A
All versions of unity-scope-gdrive logs search terms to syslog.
CVE-2014-3536 1 Redhat 1 Cloudforms Management Engine 2024-11-21 5.5 Medium
CFME (CloudForms Management Engine) 5: RHN account information is logged to top_output.log during registration
CVE-2013-1771 1 Monkey-project 1 Monkey 2024-11-21 7.5 High
The web server Monkeyd produces a world-readable log (/var/log/monkeyd/master.log) on gentoo.
CVE-2012-1156 3 Fedoraproject, Moodle, Redhat 3 Fedora, Moodle, Enterprise Linux 2024-11-21 7.5 High
Moodle before 2.2.2 has users' private files included in course backups
CVE-2021-22518 1 Opentext 1 Identity Manager Azuread Driver 2024-10-02 5.8 Medium
A vulnerability identified in OpenTextâ„¢ Identity Manager AzureAD Driver that allows logging of sensitive information into log file. This impacts all versions before 5.1.4.0
CVE-2021-22533 2 Microfocus, Opentext 2 Edirectory, Edirectory 2024-09-19 6.5 Medium
Possible Insertion of Sensitive Information into Log File Vulnerability in eDirectory has been discovered in OpenTextâ„¢ eDirectory 9.2.4.0000.