357 matches found
The vulnerability of the exacqVision Web Service web interface of the exacqVision surveillance system, related to the disclosure of information through query strings, allows a intruder to gain unauthorized access to the protected information.
The vulnerability of the exacqVision Web Service web interface of the video surveillance system involves the disclosure of information through query strings during the processing of authentication tokens. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorize...
PT-2024-5522 · Unknown · Exacqvision Web Service
Name of the Vulnerable Software and Affected Versions: exacqVision Web Service affected versions not specified Description: The issue is related to the exposure of authentication token details within communications under certain circumstances. This can occur when the exacqVision Web Service handl...
CVE-2024-32931: Use of GET Request Method With Sensitive Query Strings
Under certain circumstances the exacqVision Web Service can expose authentication token details within communications...
CVE-2023-50954: Use of GET Request Method With Sensitive Query Strings
IBM InfoSphere Information Server 11.7 returns sensitive information in URL information that could be used in further attacks against the system. IBM X-Force ID: 275776...
PT-2024-4814 · Ibm · Ibm Infosphere Information Server
Name of the Vulnerable Software and Affected Versions: IBM InfoSphere Information Server version 11.7 Description: The issue is related to the disclosure of information through a query string, potentially allowing a remote attacker to gain unauthorized access to protected information. This could ...
PT-2024-27173
Name of the Vulnerable Software and Affected Versions Teldat M1 version 11.00.05.50.01 Description The issue is related to incorrect access control, allowing attackers to obtain sensitive information by using a crafted query string. Recommendations For Teldat M1 version 11.00.05.50.01, consider...
OESA-2024-1400 nodejs-qs security update
This is a query string parser for node and the browser supporting nesting, as it was removed from 0.3.x, so this library provides the previous and commonly desired behavior and twice as fast. Used by express, connect and others. Security Fixes: qs before 6.10.3, as used in Express before 4.17.3 a...
CVE-2024-2745
Rapid7's InsightVM maintenance mode login page suffers from a sensitive information exposure vulnerability whereby, sensitive information is exposed through query strings in the URL when login is attempted before the page is fully loaded. This vulnerability allows attackers to acquire sensitive...
CVE-2024-2745 Rapid7 InsightVM Sensitive Information Exposure via URL
Rapid7's InsightVM maintenance mode login page suffers from a sensitive information exposure vulnerability whereby, sensitive information is exposed through query strings in the URL when login is attempted before the page is fully loaded. This vulnerability allows attackers to acquire sensitive...
CVE-2024-2745
Affected product : Rapid7 InsightVM maintenance mode login page. Vulnerability : sensitive information exposure via URL query strings when a login attempt occurs before the page is fully loaded. Impact : potential exposure of passwords, authentication tokens, usernames, and other sensitive data. ...
CVE-2024-2745 Rapid7 InsightVM Sensitive Information Exposure via URL
Rapid7's InsightVM maintenance mode login page suffers from a sensitive information exposure vulnerability whereby, sensitive information is exposed through query strings in the URL when login is attempted before the page is fully loaded. This vulnerability allows attackers to acquire sensitive...
CVE-2024-2745: Use of GET Request Method With Sensitive Query Strings
Rapid7's InsightVM maintenance mode login page suffers from a sensitive information exposure vulnerability whereby, sensitive information is exposed through query strings in the URL when login is attempted before the page is fully loaded. This vulnerability allows attackers to acquire sensitive...
OESA-2024-1338 nodejs-qs security update
This is a query string parser for node and the browser supporting nesting, as it was removed from 0.3.x, so this library provides the previous and commonly desired behavior and twice as fast. Used by express, connect and others. Security Fixes: qs before 6.10.3, as used in Express before 4.17.3 a...
Sensitive Query Strings In GET Request
directus is vulnerable to the Use of a GET Request Method With Sensitive Query Strings. The vulnerability is due to the inclusion of session tokens in URLs, which are often logged in various places, posing a security risk. Attackers gaining access to these logs may hijack active user sessions,...
IBM PowerSC Information Disclosure Vulnerability (CNVD-2024-09949)
IBM PowerSC is an International Business Machines IBM security and compliance solution for IBM Power Systems servers. An information disclosure vulnerability exists in IBM PowerSC, which can be exploited by an attacker to view session identifiers passed via URL query strings...
CVE-2023-50328
IBM PowerSC 1.3, 2.0, and 2.1 may allow a remote attacker to view session identifiers passed via URL query strings. IBM X-Force ID: 275110...
Code injection
IBM PowerSC 1.3, 2.0, and 2.1 may allow a remote attacker to view session identifiers passed via URL query strings. IBM X-Force ID: 275110...
CVE-2023-50328
CVE-2023-50328 affects IBM PowerSC 1.3, 2.0, and 2.1. A vulnerability allowed remote attackers to view session identifiers passed via URL query strings. The IBM bulletin lists PowerSC 2.2 as the remediation (update to 2.2 on Fix Central) and enumerates affected filesets (powerscStd.uiServer, powe...