CVE-2022-28927: Unrestricted Upload of File with Dangerous Type

A remote code execution RCE vulnerability in Subconverter v0.7.2 allows attackers to execute arbitrary code via crafted config and url parameters...

Chain Sea Ai Chatbot System Cross-Site Scripting Vulnerability

Chain Sea Ai Chatbot System is an intelligent human customer service software from Chain Sea, China. Chain Sea Ai Chatbot System is vulnerable to a cross-site scripting vulnerability, which is caused by the product not filtering special characters in URL parameters and can be exploited for JS...

CVE-2020-4957

IBM Security Identity Governance and Intelligence 5.2.6 could disclose sensitive information in URL parameters that could aid in future attacks against the system. IBM X-Force ID: 192208...

Design/Logic Flaw

IBM Security Identity Governance and Intelligence 5.2.6 could disclose sensitive information in URL parameters that could aid in future attacks against the system. IBM X-Force ID: 192208...

CVE-2020-4957

CVE-2020-4957 affects IBM Security Identity Governance and Intelligence 5.2.6. The vulnerability stems from information disclosure in URL parameters within the Bulk Data Load module, potentially aiding future attacks. A fix is available: 5.2.6.0-ISS-SIGI-FP0004. See IBM Security bulletin for reme...

CVE-2020-4957: Exposure of Sensitive Information to an Unauthorized Actor

IBM Security Identity Governance and Intelligence 5.2.6 could disclose sensitive information in URL parameters that could aid in future attacks against the system. IBM X-Force ID: 192208...

PT-2022-9042

Name of the Vulnerable Software and Affected Versions IBM Security Identity Governance and Intelligence version 5.2.6 Description The issue could disclose sensitive information in URL parameters, potentially aiding in future attacks against the system. Recommendations For IBM Security Identity...

Security Bulletin: IBM Security Identity Governance and Intelligence is vulnerable to sensitive information disclosure (CVE-2020-4957)

Summary IBM Security Identity Governance and Intelligence could disclose sensitive information in URL parameters due to a vulnerability in the Bulk Data Load module CVE-2020-4957. This vulnerability is resolved by a code fix in the affected part of the product. Vulnerability Details...

CVE-2020-4957

IBM Security Identity Governance and Intelligence 5.2.6 could disclose sensitive information in URL parameters that could aid in future attacks against the system. IBM X-Force ID: 192208...

PT-2022-15875

Name of the Vulnerable Software and Affected Versions ZTE ZXCDN affected versions not specified Description The issue concerns a reflective XSS vulnerability. An attacker can modify parameters in the content clearing request URL. When a user clicks this URL, it triggers an XSS attack...

IBM Guardium Data Encryption Information Leakage Vulnerability (CNVD-2022-66261)

IBM Guardium Data Encryption is an encryption solution that captures pricing information and is used to protect data and business. An information leakage vulnerability exists in IBM Guardium Data Encryption that originates from storing sensitive information in URL parameters, which can be exploit...

Information disclosure

IBM Guardium Data Encryption GDE 4.0.0.7 and lower stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 213855...

CVE-2021-39020

IBM Guardium Data Encryption GDE 4.0.0.7 and lower stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 213855...

CVE-2021-39020

IBM Guardium Data Encryption (GDE) has an information disclosure vulnerability (CVE-2021-39020) where sensitive data is stored in URL parameters. Affected: Vormetric Data Security Manager (DSM) inside GDE Server 4.0.0.7 and earlier. Impact described as potential exposure via server logs, referrer...

CVE-2021-39020: Exposure of Sensitive Information to an Unauthorized Actor

IBM Guardium Data Encryption GDE 4.0.0.7 and lower stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 213855...

IBM Guardium Data Encryption information leakage vulnerability

IBM Guardium Data Encryption is an encryption solution that captures pricing information and is used to protect data and business. An information leakage vulnerability exists in IBM Guardium Data Encryption that originates from storing sensitive information in URL parameters, which can be exploit...

PT-2022-10844

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Encryption GDE versions 4.0.0.7 and lower Description The issue allows sensitive information to be stored in URL parameters, potentially leading to information disclosure if unauthorized parties access the URLs via server log...

Security Bulletin: IBM Security Guardium Data Encryption has vulnerability ( CVE-2021-39020)

Summary IBM Guardium Data Encryption GDE stores sensitive information in URL parameters. Please apply the latest version for the fixes. Vulnerability Details CVEID: CVE-2021-39020 DESCRIPTION: IBM Guardium Data Encryption GDE stores sensitive information in URL parameters. This may lead to...

CVE-2021-39020

IBM Guardium Data Encryption GDE 4.0.0.7 and lower stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 213855...

ASUS RT-AX56U update_json function path traversal vulnerability

The ASUS RT-AX56U is a wireless router from ASUS of Taiwan, China. A path traversal vulnerability exists in the ASUS RT-AX56U updatejson function due to insufficient filtering of special characters in URL parameters. An attacker can exploit the vulnerability to cause a service interruption by...