Vulnerabilities > Information Exposure Through Log Files

DATE CVE VULNERABILITY TITLE RISK
2024-01-05 CVE-2023-52146 Information Exposure Through Log Files vulnerability in Ajexperience 404 Solution
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Aaron J 404 Solution.This issue affects 404 Solution: from n/a through 2.33.0.
network
low complexity
ajexperience CWE-532
5.3
2024-01-03 CVE-2023-46742 Information Exposure Through Log Files vulnerability in Linuxfoundation Cubefs
CubeFS is an open-source cloud-native file storage system.
network
low complexity
linuxfoundation CWE-532
6.5
2024-01-03 CVE-2023-50253 Information Exposure Through Log Files vulnerability in LAF
Laf is a cloud development platform.
network
low complexity
laf CWE-532
6.5
2024-01-01 CVE-2023-6064 Information Exposure Through Log Files vulnerability in Payhere Payment Gateway
The PayHere Payment Gateway WordPress plugin before 2.2.12 automatically creates publicly-accessible log files containing sensitive information when transactions occur.
network
low complexity
payhere CWE-532
7.5
2023-12-21 CVE-2023-6746 Information Exposure Through Log Files vulnerability in Github Enterprise Server
An insertion of sensitive information into log file vulnerability was identified in the log files for a GitHub Enterprise Server back-end service that could permit an `adversary in the middle attack` when combined with other phishing techniques.
network
high complexity
github CWE-532
5.7
2023-12-21 CVE-2023-6802 Information Exposure Through Log Files vulnerability in Github Enterprise Server
An insertion of sensitive information into the log file in the audit log in GitHub Enterprise Server was identified that could allow an attacker to gain access to the management console.
network
low complexity
github CWE-532
6.5
2023-12-14 CVE-2023-1904 Information Exposure Through Log Files vulnerability in Octopus Server
In affected versions of Octopus Server it is possible for the OpenID client secret to be logged in clear text during the configuration of Octopus Server.
network
low complexity
octopus CWE-532
7.5
2023-12-13 CVE-2023-46671 Information Exposure Through Log Files vulnerability in Elastic Kibana
An issue was discovered by Elastic whereby sensitive information may be recorded in Kibana logs in the event of an error.
network
low complexity
elastic CWE-532
6.5
2023-12-13 CVE-2023-46675 Information Exposure Through Log Files vulnerability in Elastic Kibana
An issue was discovered by Elastic whereby sensitive information may be recorded in Kibana logs in the event of an error or in the event where debug level logging is enabled in Kibana.
network
low complexity
elastic CWE-532
6.5
2023-12-12 CVE-2023-49922 Information Exposure Through Log Files vulnerability in Elastic Beats 8.0.0/8.9.2
An issue was discovered by Elastic whereby Beats and Elastic Agent would log a raw event in its own logs at the WARN or ERROR level if ingesting that event to Elasticsearch failed with any 4xx HTTP status code except 409 or 429.
network
low complexity
elastic CWE-532
6.5