Lucene search
+L

120 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/28 12:00 a.m.•5 views

CVE-2025-54542: Use of GET Request Method With Sensitive Query Strings

QuickCMS sends password and login via GET Request. This allows a local attacker with access to the victim's browser history to obtain the necessary credentials to log in as the user. The vendor was notified early about this vulnerability, but didn't respond with the details of vulnerability or...

6.9CVSS5.8AI score0.00135EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/25 12:00 a.m.•8 views

CVE-2025-8997: Use of GET Request Method With Sensitive Query Strings

An Information Exposure vulnerability has been identified in OpenText Enterprise Security Manager. The vulnerability could be remotely exploited...

5.7CVSS5.8AI score0.00294EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/14 12:00 a.m.•6 views

CVE-2025-51651: Use of GET Request Method With Sensitive Query Strings

An authenticated arbitrary file download vulnerability in the component /admin/Backups.php of Mccms v2.7.0 allows attackers to download arbitrary files via a crafted GET request...

5.5CVSS5.9AI score0.00227EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/08 12:00 a.m.•4 views

CVE-2025-40742: Use of GET Request Method With Sensitive Query Strings

A vulnerability has been identified in SIPROTEC 5 6MD84 CP300 All versions V11.0, SIPROTEC 5 6MD85 CP200 All versions, SIPROTEC 5 6MD85 CP300 All versions V11.0, SIPROTEC 5 6MD86 CP200 All versions, SIPROTEC 5 6MD86 CP300 All versions V11.0, SIPROTEC 5 6MD89 CP300 All versions V11.0, SIPROTEC 5...

6CVSS5.7AI score0.00323EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/30 12:00 a.m.•6 views

CVE-2025-52901: Use of GET Request Method With Sensitive Query Strings

File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files. Prior to version 2.33.9, access tokens are used as GET parameters. The JSON Web Token JWT which is used as a session identifier will get leaked to...

6.5CVSS5.8AI score0.00603EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/12 12:00 a.m.•8 views

CVE-2025-49188: Use of GET Request Method With Sensitive Query Strings

The application sends user credentials as URL parameters instead of POST bodies, making it vulnerable to information gathering...

7.5CVSS5.7AI score0.00436EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 5:00 p.m.•16 views

CVE-2020-15337

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a "Use of GET Request Method With Sensitive Query Strings" issue for /registerCpe requests...

5.3CVSS7.1AI score0.0079EPSS
SaveExploits1
osv_cve
osv_cve
•added 2025/05/22 1:15 p.m.•21 views

CVE-2025-3943

Use of GET Request Method With Sensitive Query Strings vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Parameter Injection. This issue affects Niagara Framework: before 4.14.2, before 4.15.1, before 4.10.11;...

7.5CVSS5.8AI score0.10162EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/05/22 12:42 p.m.•41 views

CVE-2025-3943 Use of GET Request Method With sensitive Query Strings

Use of GET Request Method With Sensitive Query Strings vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Parameter Injection. This issue affects Niagara Framework: before 4.14.2, before 4.15.1, before 4.10.11;...

4.1CVSS0.10162EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/05/22 12:42 p.m.•13 views

CVE-2025-3943 Use of GET Request Method With sensitive Query Strings

Use of GET Request Method With Sensitive Query Strings vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Parameter Injection. This issue affects Niagara Framework: before 4.14.2, before 4.15.1, before 4.10.11;...

4.1CVSS4.6AI score0.10162EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/22 12:00 a.m.•11 views

CVE-2025-3943: Use of GET Request Method With Sensitive Query Strings

Use of GET Request Method With Sensitive Query Strings vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Parameter Injection. This issue affects Niagara Framework: before 4.14.2, before 4.15.1, before 4.10.11;...

7.5CVSS7.5AI score0.10162EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/02 7:12 p.m.•31 views

CVE-2024-9877

: Use of GET Request Method With Sensitive Query Strings vulnerability in ABB ANC, ABB ANC-L, ABB ANC-mini.This issue affects ANC: through 1.1.4; ANC-L: through 1.1.4; ANC-mini: through 1.1.4...

5.3CVSS7.1AI score0.0022EPSS
SaveExploits0References3
NVD
NVD
•added 2025/04/30 7:15 p.m.•25 views

CVE-2024-9877

: Use of GET Request Method With Sensitive Query Strings vulnerability in ABB ANC, ABB ANC-L, ABB ANC-mini.This issue affects ANC: through 1.1.4; ANC-L: through 1.1.4; ANC-mini: through 1.1.4...

5.3CVSS0.0022EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/04/30 12:00 a.m.•23 views

PT-2025-18312 · Abb · Abb Anc-L +2

Name of the Vulnerable Software and Affected Versions: ABB ANC versions through 1.1.4 ABB ANC-L versions through 1.1.4 ABB ANC-mini versions through 1.1.4 Description: The issue is related to the use of the GET request method with sensitive query strings. This problem affects various ABB products...

5.3CVSS6.3AI score0.0022EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/30 12:00 a.m.•4 views

CVE-2024-9877: Use of GET Request Method With Sensitive Query Strings

: Use of GET Request Method With Sensitive Query Strings vulnerability in ABB ANC, ABB ANC-L, ABB ANC-mini.This issue affects ANC: through 1.1.4; ANC-L: through 1.1.4; ANC-mini: through 1.1.4...

5.3CVSS5.8AI score0.0022EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/25 12:00 a.m.•4 views

CVE-2025-3637: Use of GET Request Method With Sensitive Query Strings

A security vulnerability was found in Moodle where confidential information that prevents cross-site request forgery CSRF attacks was shared publicly through the site's URL. This vulnerability occurred specifically on two types of pages within the moddata module: edit and delete pages...

3.1CVSS5.3AI score0.00361EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/15 12:00 a.m.•2 views

CVE-2025-32021: Use of GET Request Method With Sensitive Query Strings

Weblate is a web based localization tool. Prior to version 5.11, when creating a new component from an existing component that has a source code repository URL specified in settings, this URL is included in the client's URL parameters during the creation process. If, for example, the source code...

7.5CVSS5.8AI score0.00382EPSS
SaveExploits1References1
NVD
NVD
•added 2025/03/17 1:15 a.m.•30 views

CVE-2025-2356

A vulnerability was found in BlackVue App 3.65 on Android. It has been classified as problematic. This affects the function deviceDelete of the component API Handler. The manipulation leads to use of get request method with sensitive query strings. It is possible to initiate the attack remotely...

6.3CVSS0.00415EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2025/03/17 1:00 a.m.•48 views

CVE-2025-2356 BlackVue App API deviceDelete get request method with sensitive query strings

A vulnerability was found in BlackVue App 3.65 on Android. It has been classified as problematic. This affects the function deviceDelete of the component API Handler. The manipulation leads to use of get request method with sensitive query strings. It is possible to initiate the attack remotely...

6.3CVSS0.00415EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/03/17 12:00 a.m.•6 views

PT-2025-11450

Name of the Vulnerable Software and Affected Versions BlackVue App version 3.65 Description A vulnerability was found in the BlackVue App, affecting the function deviceDelete of the component API Handler. The manipulation leads to the use of the GET request method with sensitive query strings. It...

6.3CVSS0.00415EPSS
SaveExploits0References8
Rows per page
Query Builder