Vulnerabilities > Information Exposure Through Log Files

DATE CVE VULNERABILITY TITLE RISK
2024-08-02 CVE-2024-42349 Information Exposure Through Log Files vulnerability in Fogproject
FOG is a cloning/imaging/rescue suite/inventory management system.
network
low complexity
fogproject CWE-532
5.3
2024-08-01 CVE-2024-6687 Information Exposure Through Log Files vulnerability in Thisfunctional CTT Expresso Para Woocommerce
The CTT Expresso para WooCommerce plugin for WordPress is vulnerable to sensitive information exposure in all versions up to and including 3.2.12 via the /wp-content/uploads/cepw directory.
network
low complexity
thisfunctional CWE-532
7.5
2024-07-31 CVE-2024-6977 Information Exposure Through Log Files vulnerability in Catonetworks Cato Client
A vulnerability in Cato Networks SDP Client on Windows allows the insertion of sensitive information into the log file, which can lead to an account takeover.
local
low complexity
catonetworks CWE-532
6.5
2024-07-26 CVE-2023-49921 Information Exposure Through Log Files vulnerability in Elastic Elasticsearch
An issue was discovered by Elastic whereby Watcher search input logged the search query results on DEBUG log level.
network
low complexity
elastic CWE-532
6.5
2024-07-22 CVE-2024-41824 Information Exposure Through Log Files vulnerability in Jetbrains Teamcity
In JetBrains TeamCity before 2024.07 parameters of the "password" type could leak into the build log in some specific cases
network
low complexity
jetbrains CWE-532
6.5
2024-07-07 CVE-2024-40596 Information Exposure Through Log Files vulnerability in Mediawiki
An issue was discovered in the CheckUser extension for MediaWiki through 1.42.1.
network
low complexity
mediawiki CWE-532
4.3
2024-07-07 CVE-2024-40598 Information Exposure Through Log Files vulnerability in Mediawiki
An issue was discovered in the CheckUser extension for MediaWiki through 1.42.1.
network
low complexity
mediawiki CWE-532
4.3
2024-07-02 CVE-2022-25477 Information Exposure Through Log Files vulnerability in Realtek Rtsper and Rtsuer
Vulnerability in Realtek RtsPer driver for PCIe Card Reader (RtsPer.sys) before 10.0.22000.21355 and Realtek RtsUer driver for USB Card Reader (RtsUer.sys) before 10.0.22000.31274 leaks driver logs that contain addresses of kernel mode objects, weakening KASLR.
local
low complexity
realtek CWE-532
5.5
2024-06-26 CVE-2024-28830 Information Exposure Through Log Files vulnerability in Checkmk
Insertion of Sensitive Information into Log File in Checkmk GmbH's Checkmk versions <2.3.0p7, <2.2.0p28, <2.1.0p45 and <=2.0.0p39 (EOL) causes automation user secrets to be written to audit log files accessible to administrators.
network
low complexity
checkmk CWE-532
2.7
2024-06-26 CVE-2024-29954 Information Exposure Through Log Files vulnerability in Broadcom Fabric Operating System
A vulnerability in a password management API in Brocade Fabric OS versions before v9.2.1, v9.2.0b, v9.1.1d, and v8.2.3e prints sensitive information in log files.
local
low complexity
broadcom CWE-532
5.5