CVE-2022-29876: Improper Neutralization of Input During Web Page Generation

A vulnerability has been identified in SICAM T All versions V3.0. Affected devices do not properly handle the input of a GET request parameter. The provided argument is directly reflected in the web server response. This could allow an unauthenticated attacker to perform reflected XSS attacks...

CVE-2022-23443

An improper access control in Fortinet FortiSOAR before 7.2.0 allows unauthenticated attackers to access gateway API data via crafted HTTP GET requests...

CVE-2022-25787

Information Exposure Through Query Strings in GET Request vulnerability in LMM API of Secomea GateManager allows system administrator to hijack connection. This issue affects: Secomea GateManager all versions prior to 9.7...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Web UI of Secomea GateManager allows phishing attacker to issue get request in logged in user session...

CVE-2022-25787

The CVE concerns Secomea GateManager, specifically its LMM API: Information Exposure Through Query Strings in GET requests can leak information via the GATE LMM API, allowing a local attacker (or an admin) to hijack connections. Affected are all GateManager versions prior to 9.7. The root cause i...

CVE-2022-25787 GTA URLs issued by LMM WEB API may leak information

Information Exposure Through Query Strings in GET Request vulnerability in LMM API of Secomea GateManager allows system administrator to hijack connection. This issue affects: Secomea GateManager all versions prior to 9.7...

CVE-2022-25778 Unload handlers may unintentionally defeat CSRF guards

Cross-Site Request Forgery CSRF vulnerability in Web UI of Secomea GateManager allows phishing attacker to issue get request in logged in user session...

CVE-2022-25778: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Web UI of Secomea GateManager allows phishing attacker to issue get request in logged in user session...

PT-2022-17504

Name of the Vulnerable Software and Affected Versions Secomea GateManager affected versions not specified Description A Cross-Site Request Forgery CSRF issue in the Web UI of Secomea GateManager allows a phishing attacker to issue a GET request within a logged-in user's session. Recommendations A...

CVE-2022-25787: Use of GET Request Method With Sensitive Query Strings

Information Exposure Through Query Strings in GET Request vulnerability in LMM API of Secomea GateManager allows system administrator to hijack connection. This issue affects: Secomea GateManager all versions prior to 9.7...

GHSA-PQR5-9V2J-44XG Apache Tomcat DoS via Malicious Get Request

Tomcat 4.0 through 4.1.12, using modjk 1.2.1 module on Apache 1.3 through 1.3.27, allows remote attackers to cause a denial of service desynchronized communications via an HTTP GET request with a Transfer-Encoding chunked field with invalid values...

Apache Tomcat DoS via Malicious Get Request

Tomcat 4.0 through 4.1.12, using modjk 1.2.1 module on Apache 1.3 through 1.3.27, allows remote attackers to cause a denial of service desynchronized communications via an HTTP GET request with a Transfer-Encoding chunked field with invalid values...

CVE-2022-28994

Small HTTP Server version 3.06 suffers from a remote buffer overflow vulnerability via long GET request...

CVE-2022-28994

Small HTTP Server version 3.06 suffers from a remote buffer overflow vulnerability via long GET request...

Buffer overflow

Small HTTP Server version 3.06 suffers from a remote buffer overflow vulnerability via long GET request...

CVE-2022-28994

Small HTTP Server version 3.06 suffers from a remote buffer overflow vulnerability via long GET request...

Roundup Directory traversal vulnerability

Directory traversal vulnerability in Roundup 0.6.4 and earlier allows remote attackers to view arbitrary files via .. dot dot sequences in an @@ command in an HTTP GET request...

CVE-2022-28994: Buffer Copy without Checking Size of Input

Small HTTP Server version 3.06 suffers from a remote buffer overflow vulnerability via long GET request...

Small HTTP Server 安全漏洞

Small Http Server is a small Http server from the individual developer Max Feoktistov. A security vulnerability exists in Small Http Server version 3.06, which stems from a remote buffer overflow vulnerability caused by a long GET request...

PT-2022-19350

Name of the Vulnerable Software and Affected Versions Small HTTP Server version 3.06 Description The issue is a remote buffer overflow vulnerability that can be triggered via a long GET request. Recommendations For Small HTTP Server version 3.06, consider restricting access to the server or...