CWE-778

30 CVEs classified under CWE-778. Browse by severity and year.

Top CVEs for CWE-778
CVESeverityScorePublishedSummary
CVE-2024-48967Critical10.02024-11-14The ventilator and the Service PC lack sufficient audit logging capabilities to allow for detection of malicious activity and subsequent forensic examination…
CVE-2026-32693High8.82026-03-18In Juju from version 3.0.0 through 3.6.18, the authorization of the "secret-set" tool is not performed correctly, which allows a grantee to update the secret c…
CVE-2026-76208High8.22026-08-19phpMyFAQ versions 3.1.0 through 4.1.6 contain an authentication bypass vulnerability in AuthLdap::create(). When LDAP authentication is enabled, after a succes…
CVE-2021-43419High7.52023-11-07An Information Disclosure vulnerability exists in Opay Mobile application 1.5.1.26 and maybe be higher in the logcat app.
CVE-2019-7613High7.52019-03-25Winlogbeat versions before 5.6.16 and 6.6.2 had an insufficient logging flaw. An attacker able to inject certain characters into a log entry could prevent Winl…
CVE-2019-19277Medium6.52020-03-10A vulnerability has been identified in SIPORT MP (All versions < 3.1.4). Vulnerable versions of the device allow the creation of special accounts ("service use…
CVE-2020-37268Medium6.32026-08-24Print Assumptions does not report that a definition was produced while universe checking was disabled when that definition reaches the caller through Parameter…
CVE-2025-52644Medium5.82026-03-16HCL AION is affected by a vulnerability where certain user actions are not adequately audited or logged. The absence of proper auditing mechanisms may reduce t…
CVE-2025-62307Medium5.42026-08-20HCL IntelliOps Event Management (IEM) is affected by insufficient logging. Insufficient logging weakens accountability, obscures attack detection, and enables…
CVE-2025-32967Medium5.42025-05-23OpenEMR is a free and open source electronic health records and medical practice management application. A logging oversight in versions prior to 7.0.3.4 allow…
CVE-2025-2562Medium5.42025-03-26Insufficient logging in the autotyping feature in Devolutions Remote Desktop Manager on Windows allows an authenticated user to use a stored password without g…
CVE-2026-25598Medium5.32026-02-09Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. Prior to 2.14.2, a security vulnerability has been identified in the…
CVE-2025-53498Medium5.32025-07-07Insufficient Logging vulnerability in Wikimedia Foundation Mediawiki - AbuseFilter Extension allows Data Leakage Attacks.This issue affects Mediawiki - AbuseFi…
CVE-2023-1995Medium5.32023-08-29Insufficient Logging vulnerability in Hitachi HiRDB Server, HiRDB Server With Addtional Function, HiRDB Structured Data Access Facility.This issue affects HiRD…
CVE-2026-3494Medium4.32026-03-03In MariaDB server version through 11.8.5, when server audit plugin is enabled with server_audit_events variable configured with QUERY_DCL, QUERY_DDL, or QUERY_…
CVE-2026-22279Medium4.32026-01-22Dell PowerScale OneFS, versions prior 9.13.0.0, contains an insufficient logging vulnerability. An unauthenticated attacker with remote access could potentiall…
CVE-2025-66552Medium4.32025-12-05Nextcloud Server is a self hosted personal cloud system. In Nextcloud Server and Enterprise Server prior to 30.0.9 and 31.0.1, incorrect path handling with gro…
CVE-2024-2291Medium4.32024-03-20 In Progress MOVEit Transfer versions released before 2022.0.11 (14.0.11), 2022.1.12 (14.1.12), 2023.0.9 (15.0.9), 2023.1.4 (15.1.4), a logging bypass vulnerab…
CVE-2022-25783Medium4.32022-05-04Insufficient Logging vulnerability in web server of Secomea GateManager allows logged in user to issue improper queries without logging. This issue affects: Se…
CVE-2021-33689Medium4.32021-07-14When user with insufficient privileges tries to access any application in SAP NetWeaver Administrator (Administrator applications), version - 7.50, no security…
All CVEs classified under CWE-778 — newest first (page 1 of 1)
CVESeverityScorePublishedSummary
CVE-2026-82863Low3.32026-08-31@hulumi/baseline versions before 1.3.2 fail to fully detect CloudTrail selector tampering events, reducing audit logging configuration change coverage. Attacke…
CVE-2020-37268Medium6.32026-08-24Print Assumptions does not report that a definition was produced while universe checking was disabled when that definition reaches the caller through Parameter…
CVE-2025-62307Medium5.42026-08-20HCL IntelliOps Event Management (IEM) is affected by insufficient logging. Insufficient logging weakens accountability, obscures attack detection, and enables…
CVE-2026-76208High8.22026-08-19phpMyFAQ versions 3.1.0 through 4.1.6 contain an authentication bypass vulnerability in AuthLdap::create(). When LDAP authentication is enabled, after a succes…
CVE-2026-41709Low2.72026-07-30VMware ESX contains an insufficient logging vulnerability. A malicious administrator could exploit this issue to perform certain operations without them being…
CVE-2026-9247Low2.42026-05-22Insufficient logging in the entry export feature in Devolutions Server allows an authenticated user with export permissions to export a sealed entry without tr…
CVE-2026-32803Low3.32026-05-08Dell PowerScale OneFS versions 9.5.0.0 through 9.5.1.6, 9.6.0.0 through 9.7.1.13, 9.8.0.0 through 9.10.1.5 and 9.11.0.0 through 9.12.0.1 contains an Insufficie…
CVE-2026-32693High8.82026-03-18In Juju from version 3.0.0 through 3.6.18, the authorization of the "secret-set" tool is not performed correctly, which allows a grantee to update the secret c…
CVE-2025-52644Medium5.82026-03-16HCL AION is affected by a vulnerability where certain user actions are not adequately audited or logged. The absence of proper auditing mechanisms may reduce t…
CVE-2026-3494Medium4.32026-03-03In MariaDB server version through 11.8.5, when server audit plugin is enabled with server_audit_events variable configured with QUERY_DCL, QUERY_DDL, or QUERY_…
CVE-2026-25598Medium5.32026-02-09Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. Prior to 2.14.2, a security vulnerability has been identified in the…
CVE-2026-22279Medium4.32026-01-22Dell PowerScale OneFS, versions prior 9.13.0.0, contains an insufficient logging vulnerability. An unauthenticated attacker with remote access could potentiall…
CVE-2025-66552Medium4.32025-12-05Nextcloud Server is a self hosted personal cloud system. In Nextcloud Server and Enterprise Server prior to 30.0.9 and 31.0.1, incorrect path handling with gro…
CVE-2025-53498Medium5.32025-07-07Insufficient Logging vulnerability in Wikimedia Foundation Mediawiki - AbuseFilter Extension allows Data Leakage Attacks.This issue affects Mediawiki - AbuseFi…
CVE-2025-32967Medium5.42025-05-23OpenEMR is a free and open source electronic health records and medical practice management application. A logging oversight in versions prior to 7.0.3.4 allow…
CVE-2025-2562Medium5.42025-03-26Insufficient logging in the autotyping feature in Devolutions Remote Desktop Manager on Windows allows an authenticated user to use a stored password without g…
CVE-2024-108632024-11-22: Insufficient Logging vulnerability in OpenText Secure Content Manager on Windows allows Audit Log Manipulation.This issue affects Secure Content Manager: fro…
CVE-2024-48967Critical10.02024-11-14The ventilator and the Service PC lack sufficient audit logging capabilities to allow for detection of malicious activity and subsequent forensic examination…
CVE-2024-2291Medium4.32024-03-20 In Progress MOVEit Transfer versions released before 2022.0.11 (14.0.11), 2022.1.12 (14.1.12), 2023.0.9 (15.0.9), 2023.1.4 (15.1.4), a logging bypass vulnerab…
CVE-2024-24901Low3.02024-03-04Dell PowerScale OneFS 8.2.x through 9.6.0.x contain an insufficient logging vulnerability. A local malicious user with high privileges could potentially exploi…
CVE-2021-43419High7.52023-11-07An Information Disclosure vulnerability exists in Opay Mobile application 1.5.1.26 and maybe be higher in the logcat app.
CVE-2023-1995Medium5.32023-08-29Insufficient Logging vulnerability in Hitachi HiRDB Server, HiRDB Server With Addtional Function, HiRDB Structured Data Access Facility.This issue affects HiRD…
CVE-2022-30305Low3.72022-12-06An insufficient logging [CWE-778] vulnerability in FortiSandbox versions 4.0.0 to 4.0.2, 3.2.0 to 3.2.3 and 3.1.0 to 3.1.5 and FortiDeceptor versions 4.2.0, 4…
CVE-2022-31120Low2.12022-08-04Nextcloud server is an open source personal cloud solution. The audit log is used to get a full trail of the actions which has been incompletely populated. In…
CVE-2022-25783Medium4.32022-05-04Insufficient Logging vulnerability in web server of Secomea GateManager allows logged in user to issue improper queries without logging. This issue affects: Se…
CVE-2021-33689Medium4.32021-07-14When user with insufficient privileges tries to access any application in SAP NetWeaver Administrator (Administrator applications), version - 7.50, no security…
CVE-2021-32680Low3.32021-07-12Nextcloud Server is a Nextcloud package that handles data storage. In versions priot to 19.0.13, 20.0.11, and 21.0.3, Nextcloud Server audit logging functional…
CVE-2019-19295Medium4.32020-03-10A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The Control Center Server (CCS) does not enforce logging of securit…
CVE-2019-19277Medium6.52020-03-10A vulnerability has been identified in SIPORT MP (All versions < 3.1.4). Vulnerable versions of the device allow the creation of special accounts ("service use…
CVE-2019-7613High7.52019-03-25Winlogbeat versions before 5.6.16 and 6.6.2 had an insufficient logging flaw. An attacker able to inject certain characters into a log entry could prevent Winl…