← Back
CWE-117

102 CVEs • Abstraction: Base • Likelihood of Exploit: Medium

Improper Output Neutralization for Logs

The product does not neutralize or incorrectly neutralizes output that is written to logs.

JSON object

Loading...

CVEs (102)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2019-14846
3Debian
OpensuseRedhat
5Ansible Engine
Backports SleDebian Linux+2 more
Jun 17, 2026
Oct 8, 2019
N/A· v4
7.8 HIGH· v3
2.1 LOW· v2
In Ansible, all Ansible Engine versions up to ansible-engine 2.8.5, ansible-engine 2.7.13, ansible-engine 2.6.19, were logging at the DEBUG level which lead to a disclosure of credentials if a plugin used a library that...Show more
In Ansible, all Ansible Engine versions up to ansible-engine 2.8.5, ansible-engine 2.7.13, ansible-engine 2.6.19, were logging at the DEBUG level which lead to a disclosure of credentials if a plugin used a library that logged credentials at the DEBUG level. This flaw does not affect Ansible modules, as those are executed in a separate process.Show less
CVE-2018-10932
1Intel
1Lldptool
Nov 21, 2024
Aug 21, 2018
N/A· v4
4.3 MEDIUM· v3
3.3 LOW· v2
lldptool version 1.0.1 and older can print a raw, unsanitized attacker controlled buffer when mngAddr information is displayed. This may allow an attacker to inject shell control characters into the buffer and impact the...Show more
lldptool version 1.0.1 and older can print a raw, unsanitized attacker controlled buffer when mngAddr information is displayed. This may allow an attacker to inject shell control characters into the buffer and impact the behavior of the terminal.Show less