Lucene search
+L

112 matches found

RedhatCVE
RedhatCVE
•added 2025/05/22 5:00 p.m.•15 views

CVE-2020-15337

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a "Use of GET Request Method With Sensitive Query Strings" issue for /registerCpe requests...

5.3CVSS7.1AI score0.0079EPSS
SaveExploits1
OSV
OSV
•added 2025/05/22 1:15 p.m.•16 views

CVE-2025-3943

Use of GET Request Method With Sensitive Query Strings vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Parameter Injection. This issue affects Niagara Framework: before 4.14.2, before 4.15.1, before 4.10.11;...

7.5CVSS5.8AI score0.10679EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/05/22 12:42 p.m.•11 views

CVE-2025-3943 Use of GET Request Method With sensitive Query Strings

Use of GET Request Method With Sensitive Query Strings vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Parameter Injection. This issue affects Niagara Framework: before 4.14.2, before 4.15.1, before 4.10.11;...

4.1CVSS4.6AI score0.10679EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/05/22 12:42 p.m.•38 views

CVE-2025-3943 Use of GET Request Method With sensitive Query Strings

Use of GET Request Method With Sensitive Query Strings vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Parameter Injection. This issue affects Niagara Framework: before 4.14.2, before 4.15.1, before 4.10.11;...

4.1CVSS0.10679EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/22 12:00 a.m.•3 views

CVE-2025-3943: Use of GET Request Method With Sensitive Query Strings

Use of GET Request Method With Sensitive Query Strings vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Parameter Injection. This issue affects Niagara Framework: before 4.14.2, before 4.15.1, before 4.10.11;...

7.5CVSS7.5AI score0.10679EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/02 7:12 p.m.•29 views

CVE-2024-9877

: Use of GET Request Method With Sensitive Query Strings vulnerability in ABB ANC, ABB ANC-L, ABB ANC-mini.This issue affects ANC: through 1.1.4; ANC-L: through 1.1.4; ANC-mini: through 1.1.4...

5.3CVSS7.1AI score0.0022EPSS
SaveExploits0References3
NVD
NVD
•added 2025/04/30 7:15 p.m.•22 views

CVE-2024-9877

: Use of GET Request Method With Sensitive Query Strings vulnerability in ABB ANC, ABB ANC-L, ABB ANC-mini.This issue affects ANC: through 1.1.4; ANC-L: through 1.1.4; ANC-mini: through 1.1.4...

5.3CVSS0.0022EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/30 12:00 a.m.•2 views

CVE-2024-9877: Use of GET Request Method With Sensitive Query Strings

: Use of GET Request Method With Sensitive Query Strings vulnerability in ABB ANC, ABB ANC-L, ABB ANC-mini.This issue affects ANC: through 1.1.4; ANC-L: through 1.1.4; ANC-mini: through 1.1.4...

5.3CVSS5.8AI score0.0022EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/04/30 12:00 a.m.•22 views

PT-2025-18312 · Abb · Abb Anc-L +2

Name of the Vulnerable Software and Affected Versions: ABB ANC versions through 1.1.4 ABB ANC-L versions through 1.1.4 ABB ANC-mini versions through 1.1.4 Description: The issue is related to the use of the GET request method with sensitive query strings. This problem affects various ABB products...

5.3CVSS6.3AI score0.0022EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/25 12:00 a.m.•2 views

CVE-2025-3637: Use of GET Request Method With Sensitive Query Strings

A security vulnerability was found in Moodle where confidential information that prevents cross-site request forgery CSRF attacks was shared publicly through the site's URL. This vulnerability occurred specifically on two types of pages within the moddata module: edit and delete pages...

3.1CVSS5.3AI score0.00361EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/15 12:00 a.m.•1 views

CVE-2025-32021: Use of GET Request Method With Sensitive Query Strings

Weblate is a web based localization tool. Prior to version 5.11, when creating a new component from an existing component that has a source code repository URL specified in settings, this URL is included in the client's URL parameters during the creation process. If, for example, the source code...

7.5CVSS5.8AI score0.00375EPSS
SaveExploits1References1
NVD
NVD
•added 2025/03/17 1:15 a.m.•27 views

CVE-2025-2356

A vulnerability was found in BlackVue App 3.65 on Android. It has been classified as problematic. This affects the function deviceDelete of the component API Handler. The manipulation leads to use of get request method with sensitive query strings. It is possible to initiate the attack remotely...

6.3CVSS0.00407EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2025/03/17 1:00 a.m.•44 views

CVE-2025-2356 BlackVue App API deviceDelete get request method with sensitive query strings

A vulnerability was found in BlackVue App 3.65 on Android. It has been classified as problematic. This affects the function deviceDelete of the component API Handler. The manipulation leads to use of get request method with sensitive query strings. It is possible to initiate the attack remotely...

6.3CVSS0.00407EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/17 12:00 a.m.•1 views

CVE-2025-2356: Use of GET Request Method With Sensitive Query Strings

A vulnerability was found in BlackVue App 3.65 on Android. It has been classified as problematic. This affects the function deviceDelete of the component API Handler. The manipulation leads to use of get request method with sensitive query strings. It is possible to initiate the attack remotely...

6.3CVSS4.5AI score0.00407EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/04 12:00 a.m.•4 views

CVE-2021-41719: Use of GET Request Method With Sensitive Query Strings

Maharashtra State Electricity Distribution Company Limited Mahavitran IOS Application 16.1 application till version 16.1 communicates using the GET method to process requests that contain sensitive information such as user account name and password, which can expose that information through the...

7.5CVSS5.8AI score0.00373EPSS
SaveExploits0References1
NVD
NVD
•added 2025/02/13 4:15 p.m.•22 views

CVE-2024-12012

A CWE-598 “Use of GET Request Method with Sensitive Query Strings” was discovered affecting the 130.8005 TCP/IP Gateway running firmware version 12h. Both the SHA-1 hash of the password as well as the session tokens are included as part of the URL and therefore exposed to information leakage...

5.7CVSS0.00382EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/13 12:00 a.m.•4 views

CVE-2025-26473: Use of GET Request Method With Sensitive Query Strings

The Mojave Inverter uses the GET method for sensitive information...

8.7CVSS5.8AI score0.00463EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/01/27 5:00 p.m.•31 views

CVE-2025-0730 TP-Link TL-SG108E HTTP GET Request usr_account_set.cgi get request method with sensitive query strings

A vulnerability classified as problematic has been found in TP-Link TL-SG108E 1.0.0 Build 20201208 Rel. 40304. Affected is an unknown function of the file /usraccountset.cgi of the component HTTP GET Request Handler. The manipulation of the argument username/password leads to use of get request...

6.3CVSS0.00677EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/27 12:00 a.m.•1 views

CVE-2025-0730: Use of GET Request Method With Sensitive Query Strings

A vulnerability classified as problematic has been found in TP-Link TL-SG108E 1.0.0 Build 20201208 Rel. 40304. Affected is an unknown function of the file /usraccountset.cgi of the component HTTP GET Request Handler. The manipulation of the argument username/password leads to use of get request...

6.3CVSS4.8AI score0.00677EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/04 12:00 a.m.•4 views

CVE-2025-22387: Use of GET Request Method With Sensitive Query Strings

An issue was discovered in Optimizely Configured Commerce before 5.2.2408. A medium-severity issue exists in requests for resources where the session token is submitted as a URL parameter. This exposes information about the authenticated session, which can be leveraged for session hijacking...

7.5CVSS5.8AI score0.00374EPSS
SaveExploits0References1
Rows per page
Query Builder