CWE-532
Medium likelihoodInsertion of Sensitive Information into Log File
The product writes sensitive information to a log file.
1,137 vulnerabilities with CWE-532
CVE-2024-10544
MEDIUM
Woo Manage Fraud Orders <6.1.7 - Info Disclosure
CVSS 5.3
CVE-2024-44239
MEDIUM
iPadOS < 17.7.1 - Sensitive Kernel State Exposure via Log File
CVSS 5.5
CVE-2024-27849
LOW
macOS Sequoia <15 - Info Disclosure
CVSS 3.3
CVE-2024-49750
MEDIUM
Snowflake Connector for Python <3.12.3 - Info Disclosure
CVSS 5.5
CVE-2024-44205
MEDIUM
iPadOS < 16.7.9 - Sensitive Information Exposure in System Logs
CVSS 5.5
CVE-2024-45739
MEDIUM
Splunk < 9.3.1, < 9.2.3, < 9.1.6 - Plaintext Password Exposure in AdminManager Debug Log
CVSS 4.9
CVE-2024-45738
MEDIUM
Splunk 9.1.0-9.1.5 - Sensitive Information Exposure via REST_Calls Log Channel
CVSS 4.9
CVE-2024-38862
MEDIUM
Checkmk <2.3.0p18, <2.2.0p35, <2.1.0p48, <=2.0.0p39 - Sensitive Information Disclosure in Audit Log
CVSS 4.4
CVE-2024-8264
MEDIUM
Fortra's Robot Schedule Enterprise Agent <3.05 - Info Disclosure
CVSS 5.5
CVE-2024-9466
MEDIUM
Palo Alto Networks Expedition 1.2.0-1.2.95 - Authenticated Sensitive Information Disclosure in Log Files
CVSS 6.5
CVE-2024-47822
MEDIUM
Directus < 10.13.2 - Sensitive Information Exposure in Log Files via Query String Access Token
CVSS 4.2
CVE-2024-9621
MEDIUM
Quarkus CXF - Sensitive Information Disclosure in Log Files
CVSS 5.3
CVE-2024-47913
MEDIUM
MediaWiki AbuseFilter <1.39.9, 1.40.x-1.41.x<1.41.3, 1.42.x<1.42.2 - API Unauthorized Log Disclosure
CVSS 5.3
CVE-2024-20491
MEDIUM
Cisco Nexus Dashboard Insights - Info Disclosure
CVSS 6.3
CVE-2024-20490
MEDIUM
Cisco Nexus Dashboard - Info Disclosure
CVSS 6.3
CVE-2024-8609
HIGH
Oceanic Software ValeApp <2.0.0 - Info Disclosure
CVSS 7.5
CVE-2024-47083
HIGH
Power Platform Terraform Provider <3.0.0 - Info Disclosure
CVSS 7.5
CVE-2024-7421
MEDIUM
Devolutions Remote Desktop Manager < 2024.3.10 - Local Credential Exposure via WinSCP Command-Line Arguments
CVSS 5.5
CVE-2024-43990
MEDIUM
StylemixThemes Masterstudy LMS Starter - Info Disclosure
CVSS 5.3
CVE-2024-44166
MEDIUM
macOS < 13.7, < 14.7, < 15 - Unprotected User Data Exposure via Log File Insertion
CVSS 5.5
CVE-2024-40791
LOW
macOS Ventura <13.7 - Info Disclosure
CVSS 3.3
CVE-2024-8775
MEDIUM
ansible-core >=2.17.0b1 <2.17.6 - Sensitive Information Exposure in Log Files via Vault Variable Handling
CVSS 5.5
CVE-2024-4472
MEDIUM
GitLab CE/EE <17.1.7-17.2.5-17.3.2 - Info Disclosure
CVSS 4.0
CVE-2024-43781
MEDIUM
SINUMERIK 828D/840D sl V4 < V4.95 SP3, ONE < V6.23/6.15 SP4 - Authenticated Sensitive Information Disclosure
CVSS 5.5
CVE-2024-42344
MEDIUM
SINEMA Remote Connect Client < 3.2 SP2 - Sensitive Information Disclosure in Log File
CVSS 4.4
Details
Vulnerabilities
1,137
Exploit Likelihood
Medium