#cwe-117

共收录 47 条相关情报。

← 返回所有主题
漏洞预警2026-06-24 发布INFO

Improper output neutralization for logs vulnerability in upKeeper Solutions upKeeper Instant Privilege Access on Windows allows Log Injection-Tampering-Forging. This issue affe...

CVE-2026-10745

Improper output neutralization for logs vulnerability in upKeeper Solutions upKeeper Instant Privilege Access on Windows

历史摘要 · 未重新核验 · NVD

安全公告2026-06-06 发布INFO

The Debug Log Manager – Conveniently Monitor and Inspect Errors plugin for WordPress is...

CVE-2026-9016

The Debug Log Manager – Conveniently Monitor and Inspect Errors plugin for WordPress is vulnerable to Improper Output Ne

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-06 发布INFO

The Debug Log Manager – Conveniently Monitor and Inspect Errors plugin for WordPress is vulnerable to Improper Output Neutralization for Logs in all versions up to, and includin...

CVE-2026-9016

The Debug Log Manager – Conveniently Monitor and Inspect Errors plugin for WordPress is vulnerable to Improper Output Ne

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-03 发布INFO

Impact: The morgan logging middleware's :remote-user token extracts the Basic auth username from the Authorization request header and writes it to the log stream without neutral...

CVE-2026-5078

Impact: The morgan logging middleware's :remote-user token extracts the Basic auth username from the Authorization reque

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-02 发布INFO

OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. Prior to version 0.9.0, OBI exports raw Redis error text as the span status...

CVE-2026-45679

OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. Prior to version 0

历史摘要 · 未重新核验 · NVD

安全公告2026-05-18 发布INFO

OpenTelemetry eBPF Instrumentation: Redis error text is exported in span status messages

CVE-2026-45679

### Summary OBI exports raw Redis error text as the span status message. Because Redis error replies can contain attack

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-02-10 发布MEDIUM

A flaw was found in Keycloak. When the logging format is configured to a verbose, user-supplied pattern (such as the pre-defined 'long' pattern), sensitive headers including Aut...

CVE-2025-11537

A flaw was found in Keycloak. When the logging format is configured to a verbose, user-supplied pattern (such as the pre

来源摘录 · NVD