CWE-532

Under certain circumstances SAP Dynamic Authorization Management (DAM) by NextLabs (Java Policy Controller versions 7.7

IBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 discloses sensitive information in error messages that could aid an a

IBM Security Access Manager Appliance 8.0.0 through 8.0.1.6, and 9.0.0 through 9.0.3.1 stores potentially sensitive info

A flaw was found in moodle before versions 3.5.1, 3.4.4, 3.3.7. No option existed to omit logs from data privacy exports

Execution of Ansible playbooks on Windows platforms with PowerShell ScriptBlock logging and Module logging enabled can a

IBM Spectrum Protect Server 7.1 and 8.1 could disclose highly sensitive information via trace logs to a local privileged

IBM QRadar 7.3 stores potentially sensitive information in log files that could be read by a local user. IBM X-Force ID:

The LinuxMagic MagicSpam extension before 2.0.14-1 for Plesk allows local users to discover mailbox names by reading /va

The commandline package update tool zypper writes HTTP proxy credentials into its logfile, allowing local attackers to g

In the JDBC driver of NetIQ Identity Manager before 4.6 sending out incorrect XML configurations could result in passwor

The NetIQ Identity Manager Oracle EBS driver before 4.0.2.0 sent EBS logs containing the driver authentication password,

The NetIQ Identity Manager driver log file, in versions prior to 4.7, provides details that could aid in system or confi

The NetIQ Identity Manager driver log file, in versions prior to 4.7, provides details that could aid in system enumerat

Log files generated by Lenovo XClarity Administrator (LXCA) versions earlier than 1.2.2 may contain user credentials in

An issue was discovered in exception_wrapper.py in OpenStack Nova 13.x through 13.1.3, 14.x through 14.0.4, and 15.x thr

On the TP-Link TL-SG108E 1.0, a remote attacker could retrieve credentials from "SEND data" log lines where passwords ar

On the TP-Link TL-SG108E 1.0, a remote attacker could retrieve credentials from "Switch Info" log lines where passwords

An issue was discovered in Pivotal PCF Elastic Runtime 1.6.x versions prior to 1.6.65, 1.7.x versions prior to 1.7.48, 1

Password exposure in Cognito Software Moneyworks 8.0.3 and earlier allows attackers to gain administrator access to all

A vulnerability in the AutoVNF tool for the Cisco Ultra Services Framework could allow an unauthenticated, remote attack

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM, and WebSafe 11.5.1 HF6 through 11.5.4 H

Before Thornberry NDoc version 8.0, laptop clients and the server have default database (Cache) users set up with a sing

Mahara Mobile before 1.2.1 is vulnerable to passwords being sent to the Mahara access log in plain text.

A flaw was found in the way Ansible (2.3.x before 2.3.3, and 2.4.x before 2.4.1) passed certain parameters to the jenkin

An issue was discovered in EMC ScaleIO 2.0.1.x. In a Linux environment, one of the support scripts saves the credentials

An issue was discovered in OSIsoft PI Coresight 2016 R2 and earlier versions, and PI Web API 2016 R2 when deployed using

An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v250 and CAPI-release versions prior to

MyBB (aka MyBulletinBoard) before 1.6.18 and 1.8.x before 1.8.6 and MyBB Merge System before 1.8.6 allow remote attacker

An issue was discovered in Moxa EDR-810 Industrial Secure Router. By accessing a specific uniform resource locator (URL)

An issue was discovered in Moxa MiiNePort E1 versions prior to 1.8, E2 versions prior to 1.4, and E3 versions prior to 1

Product: Apache Cordova Android 5.2.2 and earlier. The application calls methods of the Log class. Messages passed to th

In Redmine before 3.2.6 and 3.3.x before 3.3.3, remote attackers can obtain sensitive information (password reset tokens

Prior to Logstash version 5.0.1, Elasticsearch Output plugin when updating connections after sniffing, would log to file

In the IMM2 firmware of Lenovo System x servers, remote commands issued by LXCA or other utilities may be captured in th

An issue was discovered in heinekingmedia StashCat through 1.7.5 for Android. The login credentials are written into a l

An issue was discovered on SendQuick Entera and Avera devices before 2HF16. An attacker could request and download the S

The rend_service_intro_established function in or/rendservice.c in Tor before 0.2.8.15, 0.2.9.x before 0.2.9.12, 0.3.0.x

In F5 BIG-IP APM software version 13.0.0 and 12.1.2, under rare conditions, the BIG-IP APM system appends log details wh

The klsi_105_get_line_state function in drivers/usb/serial/kl5kusb105.c in the Linux kernel before 4.9.5 places uninitia

IBM Cognos Server 10.1.1 and 10.2 stores highly sensitive information in log files that could be read by a local user. I

rsyslog uses weak permissions for generating log files, which allows local users to obtain sensitive information by read

The admin_edit function in app/Controller/UsersController.php in MISP 2.4.82 mishandles the enable_password field, which

IBM Kenexa LMS on Cloud 13.1 and 13.2 - 13.2.4 stores potentially sensitive information in in log files that could be re

IBM Tivoli Endpoint Manager - Mobile Device Management (MDM) stores potentially sensitive information in log files that