PT-2022-15875

Name of the Vulnerable Software and Affected Versions ZTE ZXCDN affected versions not specified Description The issue concerns a reflective XSS vulnerability. An attacker can modify parameters in the content clearing request URL. When a user clicks this URL, it triggers an XSS attack...

IBM Guardium Data Encryption Information Leakage Vulnerability (CNVD-2022-66261)

IBM Guardium Data Encryption is an encryption solution that captures pricing information and is used to protect data and business. An information leakage vulnerability exists in IBM Guardium Data Encryption that originates from storing sensitive information in URL parameters, which can be exploit...

Information disclosure

IBM Guardium Data Encryption GDE 4.0.0.7 and lower stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 213855...

CVE-2021-39020

IBM Guardium Data Encryption (GDE) has an information disclosure vulnerability (CVE-2021-39020) where sensitive data is stored in URL parameters. Affected: Vormetric Data Security Manager (DSM) inside GDE Server 4.0.0.7 and earlier. Impact described as potential exposure via server logs, referrer...

CVE-2021-39020

IBM Guardium Data Encryption GDE 4.0.0.7 and lower stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 213855...

CVE-2021-39020: Exposure of Sensitive Information to an Unauthorized Actor

IBM Guardium Data Encryption GDE 4.0.0.7 and lower stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 213855...

PT-2022-10844

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Encryption GDE versions 4.0.0.7 and lower Description The issue allows sensitive information to be stored in URL parameters, potentially leading to information disclosure if unauthorized parties access the URLs via server log...

IBM Guardium Data Encryption 信息泄露漏洞

IBM Guardium Data Encryption is an encryption solution that captures pricing information and is used to protect data and business. An information leakage vulnerability exists in IBM Guardium Data Encryption that originates from storing sensitive information in URL parameters, which can be exploit...

Security Bulletin: IBM Security Guardium Data Encryption has vulnerability ( CVE-2021-39020)

Summary IBM Guardium Data Encryption GDE stores sensitive information in URL parameters. Please apply the latest version for the fixes. Vulnerability Details CVEID: CVE-2021-39020 DESCRIPTION: IBM Guardium Data Encryption GDE stores sensitive information in URL parameters. This may lead to...

CVE-2021-39020

IBM Guardium Data Encryption GDE 4.0.0.7 and lower stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 213855...

ASUS RT-AX56U update_json function path traversal vulnerability

The ASUS RT-AX56U is a wireless router from ASUS of Taiwan, China. A path traversal vulnerability exists in the ASUS RT-AX56U updatejson function due to insufficient filtering of special characters in URL parameters. An attacker can exploit the vulnerability to cause a service interruption by...

ASUS RT-AX56U 路径遍历漏洞

The ASUS RT-AX56U is a wireless router from ASUS of Taiwan, China. A path traversal vulnerability exists in the ASUS RT-AX56U updatejson function due to insufficient filtering of special characters in URL parameters. An attacker can exploit the vulnerability to cause a service interruption by...

libkiwix 跨站脚本漏洞

libkiwix is a common code base for all Kiwix ports. A security vulnerability exists in libkiwix 10.0.0 and 10.0.1 that allows the use of XSS in the built-in web server functionality by searching for suggested URL parameters...

WordPress plugin FormCraft 代码问题漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an open source application plugin for WordPress. A code issue vulnerability previously existed in the WordPres...

Okta Advanced Server Access Client 代码注入漏洞

Okta Advanced Server Access Client is a zero-trust identity and access management for cloud and local infrastructures from Okta Corporation. A code injection vulnerability exists in Okta Advanced Server Access Client for Windows 1.57.0 and earlier versions, which stems from a lack of filtering an...

CVE-2022-22792

MobiSoft - MobiPlus User Take Over and Improper Handling of url Parameters Attacker can navigate to specific url which will expose all the users and password in clear text. http://IP/MobiPlusWeb/Handlers/MainHandler.ashx?MethodName=GridData&GridName=Users...

Design/Logic Flaw

MobiSoft - MobiPlus User Take Over and Improper Handling of url Parameters Attacker can navigate to specific url which will expose all the users and password in clear text. http://IP/MobiPlusWeb/Handlers/MainHandler.ashx?MethodName=GridData&GridName=Users...

CVE-2022-22792 MobiSoft - MobiPlus User Take Over and Improper Handling of url Parameters

MobiSoft - MobiPlus User Take Over and Improper Handling of url Parameters Attacker can navigate to specific url which will expose all the users and password in clear text. http://IP/MobiPlusWeb/Handlers/MainHandler.ashx?MethodName=GridData&GridName=Users...

CVE-2022-22792

CVE-2022-22792 concerns MobiSoft MobiPlus. The vulnerability arises from an improper handling of URL parameters in the web handler; specifically, an attacker could navigate to a crafted URL such as /MobiPlusWeb/Handlers/MainHandler.ashx?MethodName=GridData&GridName=Users to expose all users and p...

CVE-2022-22792: Improper Handling of Parameters

MobiSoft - MobiPlus User Take Over and Improper Handling of url Parameters Attacker can navigate to specific url which will expose all the users and password in clear text. http://IP/MobiPlusWeb/Handlers/MainHandler.ashx?MethodName=GridData&GridName=Users...