Lucene search
+L

987 matches found

Cvelist
Cvelist
•added 2025/10/09 8:20 p.m.•38 views

CVE-2025-35052 Newforma Info Exchange (NIX) shared hard-coded secret key

Newforma Info Exchange NIX uses a hard-coded key to encrypt certain query parameters. Some encrypted parameter values can specify paths to download files, potentially bypassing authentication and authorization, for example, the 'qs' parameter used in '/DownloadWeb/download.aspx'. This key is shar...

6.3CVSS0.00369EPSS
SaveExploits0References2
NVD
NVD
•added 2025/10/09 3:16 p.m.•21 views

CVE-2025-32916

Potential use of sensitive information in GET requests in Checkmk GmbH's Checkmk versions 2.4.0p13, 2.3.0p38, 2.2.0p46, and 2.1.0 EOL may cause sensitive form data to be included in URL query parameters, which may be logged in various places such as browser history or web server logs...

4.3CVSS0.00192EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2025/10/09 3:16 p.m.•24 views

UBUNTU-CVE-2025-32916

Potential use of sensitive information in GET requests in Checkmk GmbH's Checkmk versions 2.4.0p13, 2.3.0p38, 2.2.0p46, and 2.1.0 EOL may cause sensitive form data to be included in URL query parameters, which may be logged in various places such as browser history or web server logs...

4.3CVSS5.7AI score0.00192EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/10/09 3:00 p.m.•7 views

CVE-2025-32916 Sensitive form data in URL query parameters

Potential use of sensitive information in GET requests in Checkmk GmbH's Checkmk versions 2.4.0p13, 2.3.0p38, 2.2.0p46, and 2.1.0 EOL may cause sensitive form data to be included in URL query parameters, which may be logged in various places such as browser history or web server logs...

1CVSS5.6AI score0.00192EPSS
SaveExploits0References1
CVE
CVE
•added 2025/10/09 3:00 p.m.•44 views

CVE-2025-32916

CVE-2025-32916 affects Checkmk platforms prior to 2.4.0p13, 2.3.0p38, 2.2.0p46, and 2.1.0 (EOL). The issue is that sensitive information may be included in URL query parameters due to GET requests, potentially being logged in browser history, web server logs, or other logging destinations. The de...

4.3CVSS5.6AI score0.00192EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2025/10/09 3:00 p.m.•30 views

CVE-2025-32916 Sensitive form data in URL query parameters

Potential use of sensitive information in GET requests in Checkmk GmbH's Checkmk versions 2.4.0p13, 2.3.0p38, 2.2.0p46, and 2.1.0 EOL may cause sensitive form data to be included in URL query parameters, which may be logged in various places such as browser history or web server logs...

1CVSS0.00192EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/10/09 12:00 a.m.•20 views

Newforma Project Center Server security vulnerabilities

Newforma Project Center Server is a project information management solution for the Architecture, Engineering and Construction AEC industry from Newforma for centralized storage and management of project documents and collaboration. Newforma Project Center Server suffers from an information...

6.3CVSS5.8AI score0.00369EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/10/09 12:00 a.m.•23 views

PT-2025-41387

Potential use of sensitive information in GET requests in Checkmk GmbH's Checkmk versions 2.4.0p13, 2.3.0p38, 2.2.0p46, and 2.1.0 EOL may cause sensitive form data to be included in URL query parameters, which may be logged in various places such as browser history or web server logs...

1CVSS5.7AI score0.00192EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/10/09 12:00 a.m.•21 views

Checkmk security vulnerabilities

Checkmk is an IT monitoring platform from Checkmk, Inc. A security vulnerability exists in Checkmk versions prior to 2.4.0p13, prior to 2.3.0p38, prior to 2.2.0p46, and 2.1.0, which stems from the possible use of sensitive information in a GET request, which could result in sensitive form data...

4.3CVSS5.7AI score0.00192EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/10/09 12:00 a.m.•26 views

PT-2025-41468

Name of the Vulnerable Software and Affected Versions Newforma Info Exchange NIX versions 2023.3 and 2024.1 Description Newforma Info Exchange NIX utilizes a hard-coded key for encrypting query parameters. Certain encrypted parameter values can define file paths for download, potentially...

6.3CVSS5.8AI score0.00369EPSS
SaveExploits0References7
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2020-26232

Malware in sbrugna...

7.5CVSS5.8AI score0.00982EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•29 views

EUVD-2019-0471

Malware in sbrugna...

5.3CVSS6.2AI score0.01087EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•21 views

EUVD-2019-2976

Malware in sbrugna...

8.8CVSS7.4AI score0.01075EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•23 views

EUVD-2019-2975

Malware in sbrugna...

8.8CVSS7.5AI score0.01277EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•21 views

EUVD-2020-0120

Malware in sbrugna...

5.7CVSS6AI score0.00803EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•25 views

EUVD-2007-5094

Malware in sbrugna...

5CVSS6.4AI score0.02978EPSS
SaveExploits1References6
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2021-0038

Malware in sbrugna...

6.8CVSS6.9AI score0.01786EPSS
SaveExploits1References13
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•22 views

EUVD-2021-1019

Malware in sbrugna...

8.8CVSS8AI score0.01606EPSS
SaveExploits1References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2017-17010

Malware in sbrugna...

6.1CVSS6.3AI score0.00877EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•24 views

EUVD-2021-10423

Malware in sbrugna...

5.9CVSS7AI score0.40736EPSS
SaveExploits1References49
Rows per page
Query Builder