Lucene search
+L

357 matches found

Vulnrichment
Vulnrichment
•added 2025/11/05 6:23 p.m.•13 views

CVE-2025-31954 HCL iAutomate is susceptible to a sensitive information disclosure

HCL iAutomate v6.5.1 and v6.5.2 is susceptible to a sensitive information disclosure. An HTTP GET method is used to process a request and includes sensitive information in the query string of that request. An attacker could potentially access information or resources they were not intended to see...

5.4CVSS6.2AI score0.00182EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/24 12:30 a.m.•16 views

EUVD-2025-35736

The ComboServlet in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.2, 2023.Q3.1 through 2023.Q3.5, 7.4 GA through update 92, 7.3 GA through update 35, and older unsupported versions does not limit the number or size of the files i...

6.9CVSS6.4AI score0.00553EPSS
SaveExploits0References2
CVE
CVE
•added 2025/10/23 10:16 p.m.•37 views

CVE-2025-62254

The CVE-2025-62254 issue affects Liferay Portal 7.4.0–7.4.3.111 and older unsupported versions, and Liferay DXP 2023.Q3.1–2023.Q3.5, 2023.Q4.0–2023.Q4.2, 7.4 GA–update 92, 7.3 GA–update 35. The underlying problem is that ComboServlet does not limit the number or size of files it will combine, all...

7.5CVSS6.5AI score0.00553EPSS
SaveExploits0References1Affected Software2
Tenable Nessus
Tenable Nessus
•added 2025/10/21 12:00 a.m.•10 views

Fedora 41 : gi-docgen (2025-52dc5ac7d9)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-52dc5ac7d9 advisory. gi-docgen 2025.5 - 2025-10-11 This is a security fix for CVE-2025-11687. The severity of this issue depends on what else is hosted on the same domain as the...

6.1CVSS5.5AI score0.00384EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/10/13 5:29 a.m.•20 views

CVE-2025-60868

The Alt Redirect 1.6.3 addon for Statamic fails to consistently strip query string parameters when the "Query String Strip" feature is enabled. Case variations, encoded keys, and duplicates are not removed, allowing attackers to bypass sanitization. This may lead to cache poisoning, parameter...

6.5CVSS6.8AI score0.00229EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/10 3:31 p.m.•14 views

EUVD-2025-33723

The Alt Redirect 1.6.3 addon for Statamic fails to consistently strip query string parameters when the "Query String Strip" feature is enabled. Case variations, encoded keys, and duplicates are not removed, allowing attackers to bypass sanitization. This may lead to cache poisoning, parameter...

6.5CVSS6.3AI score0.00229EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2025/10/10 12:00 a.m.•24 views

CVE-2025-60868

The Alt Redirect 1.6.3 addon for Statamic fails to consistently strip query string parameters when the "Query String Strip" feature is enabled. Case variations, encoded keys, and duplicates are not removed, allowing attackers to bypass sanitization. This may lead to cache poisoning, parameter...

0.00229EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/10/10 12:00 a.m.•18 views

PT-2025-41562

Name of the Vulnerable Software and Affected Versions Statamic Alt Redirect version 1.6.3 Description The Alt Redirect 1.6.3 addon for Statamic does not consistently remove query string parameters when the "Query String Strip" feature is enabled. Variations in case, encoded keys, and duplicate...

6.5CVSS6.4AI score0.00229EPSS
SaveExploits0References7
GitLab Advisory Database
GitLab Advisory Database
•added 2025/10/10 12:00 a.m.•35 views

Alt Redirect: Potential Authentication Bypass by Spoofing through query-string stripping logic flaw

The Alt Redirect 1.6.3 addon for Statamic fails to consistently strip query string parameters when the "Query String Strip" feature is enabled. Case variations, encoded keys, and duplicates are not removed, allowing attackers to bypass sanitization. This may lead to cache poisoning, parameter...

6.5CVSS5.8AI score0.00229EPSS
SaveExploits0References7Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/09 12:00 a.m.•1 views

CVE-2025-32916: Use of GET Request Method With Sensitive Query Strings

Potential use of sensitive information in GET requests in Checkmk GmbH's Checkmk versions 2.4.0p13, 2.3.0p38, 2.2.0p46, and 2.1.0 EOL may cause sensitive form data to be included in URL query parameters, which may be logged in various places such as browser history or web server logs...

4.3CVSS5.7AI score0.00192EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2004-1830

Malware in sbrugna...

4.3CVSS6.4AI score0.01208EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2013-0186

Malware in sbrugna...

6.5CVSS6.2AI score0.06965EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•10 views

EUVD-2011-3108

Malware in sbrugna...

5CVSS6.4AI score0.02151EPSS
SaveExploits1References8
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2018-17237

Malware in sbrugna...

6.5CVSS6.9AI score0.01281EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2000-0381

Malware in sbrugna...

2.6CVSS6.4AI score0.00917EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2006-5616

Malware in sbrugna...

6.8CVSS6.3AI score0.01412EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2007-3407

Malware in sbrugna...

7.5CVSS6.4AI score0.01126EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2014-3316

Malware in sbrugna...

4CVSS6.4AI score0.02032EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•12 views

EUVD-2018-6706

Malware in sbrugna...

9.8CVSS9.5AI score0.02919EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•12 views

EUVD-2012-5827

Malware in sbrugna...

4.3CVSS6.4AI score0.01321EPSS
SaveExploits0References4
Rows per page
Query Builder