Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CWE-532 (通过日志文件的信息暴露) — Vulnerability Class 598

598 vulnerabilities classified as CWE-532 (通过日志文件的信息暴露). AI Chinese analysis included.

CVE IDTitleCVSSSeverityPublished
CVE-2025-26332 Dell Data Protection Advisor 日志信息泄露漏洞 — TechAdvisor 8.8 High2025-07-30
CVE-2025-30105 Dell XtremIO 日志信息泄露漏洞 — XtremIO 8.8 High2025-07-30
CVE-2025-53649 SwitchBot 日志信息泄露漏洞 — SwitchBot App for iOS/Android 6.5AIMediumAI2025-07-29
CVE-2025-54120 PCL Community Edition exposes login credentials in logs — PCL2-CE 7.5 -2025-07-23
CVE-2025-43485 Poly Clariti Manager - Multiple Security Vulnerabilities — Poly Clariti Manager 4.9 -2025-07-22
CVE-2025-7371 Okta On-Premises Provisioning Agent 日志信息泄露漏洞 — Okta On-Premises Provisioning Agent 6.8 Medium2025-07-22
CVE-2025-52580 Gift Pad region PAY 日志信息泄露漏洞 — "region PAY" App for Android 6.5 -2025-07-22
CVE-2025-54319 Westermo WeOS 日志信息泄露漏洞 — WeOS 6.3 Medium2025-07-20
CVE-2025-6391 JSON Web Token (JWT) Exposure in Log Files — Brocade ASCG 8.1AIHighAI2025-07-17
CVE-2025-54064 rucio-server, rucio-ui, and rucio-webui vulnerable to insertion of X-Rucio-Auth-Token in apache access logfiles — helm-charts 7.5AIHighAI2025-07-17
CVE-2025-30483 Dell ECS和Dell ObjectScale 日志信息泄露漏洞 — ECS 5.5 Medium2025-07-15
CVE-2025-53885 Directus doesn't redact sensitive user data when logging via event hooks — directus 4.2 Medium2025-07-14
CVE-2025-6392 Daily Data Dump Collector logs database password in cleartext when running docker exec commands (CVE-2025-6392) — Brocade SANnav 6.2AIMediumAI2025-07-10
CVE-2025-36599 Dell PowerFlex Manager VM 日志信息泄露漏洞 — PowerFlex Manager VM 4.3 Medium2025-07-09
CVE-2025-5464 Ivanti Connect Secure 日志信息泄露漏洞 — Connect Secure 6.5 Medium2025-07-08
CVE-2025-5463 Ivanti Connect Secure 日志信息泄露漏洞 — Connect Secure 5.5 Medium2025-07-08
CVE-2025-6711 Incomplete Redaction of Sensitive Information in MongoDB Server Logs — MongoDB Server 4.4 Medium2025-07-07
CVE-2024-9453 Jenkins-image: sensitive data disclosure when using openshift jenkins image — openshift-sync-plugin 6.5 Medium2025-07-04
CVE-2025-6587 Exposure of system environment variables in Docker Desktop diagnostic logs — Docker Desktop 6.5AIMediumAI2025-07-03
CVE-2025-6624 Snyk CLI 安全漏洞 — snyk 7.2 High2025-06-26
CVE-2025-52893 OpenBao May Leak Sensitive Information in Logs When Processing Malformed Data — openbao 4.5 Medium2025-06-25
CVE-2024-7586 Insertion of Sensitive Information into Log File in GitLab — GitLab 4.1 Medium2025-06-20
CVE-2025-36050 IBM QRadar SIEM information disclosure — QRadar SIEM 6.2 Medium2025-06-19
CVE-2025-50200 RabbitMQ Node can log Basic Auth header from an HTTP request — rabbitmq-server 6.8AIMediumAI2025-06-19
CVE-2025-2327 FlashArray KEK Logging Vulnerability — FlashArray 7.5AIHighAI2025-06-16
CVE-2025-36573 Dell Smart Dock Firmware 日志信息泄露漏洞 — Smart Dock 7.1 High2025-06-12
CVE-2025-49009 Para Inserts Sensitive Information into Log File for Facebook authentication — para 6.2 Medium2025-06-05
CVE-2025-48493 Yii 2 Redis may expose AUTH paramters in logs in case of connection failure — yii2-redis 6.5AIMediumAI2025-06-05
CVE-2025-48955 Para Server Logs Sensitive Information — para 6.2 Medium2025-06-02
CVE-2025-46777 Fortinet FortiPortal 日志信息泄露漏洞 — FortiPortal 2.2 Low2025-05-28

Vulnerabilities classified as CWE-532 (通过日志文件的信息暴露) represent 598 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.