2486 matches found
CVE-2016-0125
Microsoft Edge mishandles the Referer policy, which allows remote attackers to obtain sensitive browser-history and request information via a crafted HTTPS web site, aka "Microsoft Edge Information Disclosure Vulnerability."...
CVE-2016-0125: Exposure of Sensitive Information to an Unauthorized Actor
Microsoft Edge mishandles the Referer policy, which allows remote attackers to obtain sensitive browser-history and request information via a crafted HTTPS web site, aka "Microsoft Edge Information Disclosure Vulnerability."...
PT-2016-1373
Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue is related to errors in handling the Referer policy, which can be exploited by a remote attacker to gain access to a user's browser history or request other information using...
UBUNTU-CVE-2015-3272
Open redirect vulnerability in the cleanparam function in lib/moodlelib.php in Moodle through 2.6.11, 2.7.x before 2.7.9, 2.8.x before 2.8.7, and 2.9.x before 2.9.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via vectors involving an HTTP Referer...
CVE-2015-3272
Open redirect vulnerability in the cleanparam function in lib/moodlelib.php in Moodle through 2.6.11, 2.7.x before 2.7.9, 2.8.x before 2.8.7, and 2.9.x before 2.9.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via vectors involving an HTTP Referer...
CVE-2015-3272
CVE-2015-3272 describes an open redirect vulnerability in Moodle’s lib/moodlelib.php: the clean_param function can be abused to redirect users to arbitrary sites via an HTTP Referer header that matches a local URL substring. Affected Moodle versions are up to 2.6.11, and 2.7.x before 2.7.9, 2.8.x...
CVE-2015-3272
Open redirect vulnerability in the cleanparam function in lib/moodlelib.php in Moodle through 2.6.11, 2.7.x before 2.7.9, 2.8.x before 2.8.7, and 2.9.x before 2.9.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via vectors involving an HTTP Referer...
CVE-2015-3272
Open redirect vulnerability in the cleanparam function in lib/moodlelib.php in Moodle through 2.6.11, 2.7.x before 2.7.9, 2.8.x before 2.8.7, and 2.9.x before 2.9.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via vectors involving an HTTP Referer...
CVE-2015-3272: Undefined Security Weakness
Open redirect vulnerability in the cleanparam function in lib/moodlelib.php in Moodle through 2.6.11, 2.7.x before 2.7.9, 2.8.x before 2.8.7, and 2.9.x before 2.9.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via vectors involving an HTTP Referer...
http-vuln-cve2013-6786 NSE Script
Detects a URL redirection and reflected XSS vulnerability in Allegro RomPager Web server. The vulnerability has been assigned CVE-2013-6786. The check is general enough script tag injection via Referer header that some other software may be vulnerable in the same way. See also:...
CVE-2015-7929
eWON devices with firmware through 10.1s0 support unspecified GET requests, which might allow remote attackers to obtain sensitive information by reading 1 web-server access logs, 2 web-server Referer logs, or 3 the browser history...
PT-2015-7676
Name of the Vulnerable Software and Affected Versions eWON devices with firmware through 10.1s0 Description The issue allows remote attackers to obtain sensitive information by reading web-server access logs, web-server Referer logs, or the browser history, due to the support of unspecified GET...
CVE-2015-7929: Exposure of Sensitive Information to an Unauthorized Actor
eWON devices with firmware through 10.1s0 support unspecified GET requests, which might allow remote attackers to obtain sensitive information by reading 1 web-server access logs, 2 web-server Referer logs, or 3 the browser history...
ClipperCMS 'Referer Check' Cross-Site Request Forgery Vulnerability
ClipperCMS is a content management system CMS. A cross-site request forgery vulnerability exists in ClipperCMS. A remote attacker could exploit this vulnerability to perform unauthorized actions and gain access to the affected application...
ClipperCMS 1.3.0 Cross Site Request Forgery
Security Advisory - Curesec Research Team 1. Introduction Affected Product: ClipperCMS 1.3.0 Fixed in: not fixed Fixed Version Link: n/a Vendor Website: http://www.clippercms.com/ Vulnerability Type: CSRF Remote Exploitable: Yes Reported to vendor: 10/02/2015 Disclosed to public: 11/13/2015 Relea...
Design/Logic Flaw
IBM Security QRadar Incident Forensics 7.2.x before 7.2.5 Patch 5 places session IDs in https URLs, which allows remote attackers to obtain sensitive information by reading 1 web-server access logs, 2 web-server Referer logs, or 3 the browser history...
CVE-2015-1999: Exposure of Sensitive Information to an Unauthorized Actor
IBM Security QRadar Incident Forensics 7.2.x before 7.2.5 Patch 5 places session IDs in https URLs, which allows remote attackers to obtain sensitive information by reading 1 web-server access logs, 2 web-server Referer logs, or 3 the browser history...
HTTP GET Request Invalid 'Referer' Header Detection
Binary data 8998.prm...