Input validation

In QED ResourceXpress through 4.9k, a large numeric or alphanumeric value submitted in specific URL parameters causes a server error in script execution due to insufficient input validation...

pki-core: Reflected XSS in getcookies?url= endpoint in CA

A Reflected Cross Site Scripting vulnerability was found in the pki-ca module from the pki-core server. This flaw is caused by missing sanitization of the GET URL parameters. An attacker could abuse this flaw to trick an authenticated user into clicking a specially crafted link which can execute...

CVE-2019-10221 Pki-core: Reflected XSS In Getcookies?url= Endpoint In CA

pki-core is vulnerable to cross-site scripting. The vulnerability exists due to a missing sanitization of the GET URL parameters...

USN-4442-2 sympa vulnerabilities

USN-4442-1 fixed vulnerabilities in Sympa. This update provides the corresponding updates for Ubuntu 16.04 ESM, Ubuntu 18.04 ESM and Ubuntu 20.04 ESM. Original advisory details: Nicolas Chatelain discovered that Sympa incorrectly handled environment variables. An attacker could possibly use this...

GHSA-9PGX-GCPH-MPQR vrana/adminer via XSS in the history parameter in SQL command

Impact Users of Adminer versions supporting SQL command most versions, e.g. MySQL using browsers not encoding URL parameters before sending to server likely Edge, not Chrome, not Firefox are affected. Patches Patched by 5c395afc, included in version 4.7.9. Workarounds Use browser which encodes UR...

Cloudbees Jenkins and LTS Cross-Site Scripting Vulnerability (CNVD-2021-04646)

Cloudbees Jenkins Hudson Labs is the United States CloudBees Cloudbees company a set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version of the release/test project and some timed tasks . A cross-site scripting...

IBM WebSphere eXtreme Scale 8.6.1 < 8.6.1.4 (6397682)

The version of IBM WebSphere eXtreme Scale installed on the remote host is prior to 8.6.1.4. It is, therefore, affected by a vulnerability as referenced in the 6397682 advisory. - IBM WebSphere eXtreme Scale 8.6.1 stores sensitive information in URL parameters. This may lead to information...

CVE-2019-4687

IBM Security Guardium Data Encryption GDE 3.0.0.2 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 171823...

CVE-2019-4687

CVE-2019-4687 affects IBM Security Guardium Data Encryption (GDE) 3.0.0.2, where sensitive data is stored in URL parameters. The root cause is the disclosure risk from information in URLs that can be exposed via server logs, referrer headers, or browser history. The vulnerability is documented ac...

CVE-2019-4687

IBM Security Guardium Data Encryption GDE 3.0.0.2 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 171823...

IBM Security Guardium Data Encryption (GDE) 信息泄露漏洞

IBM Security Guardium Data Encryption GDE provides a modular set of encryption solutions that help security teams effectively implement data-at-rest security across the organization. An information disclosure vulnerability exists in IBM Security Guardium Data Encryption 3.0.0.2. The vulnerability...

PT-2021-9115 · Ibm · Ibm Security Guardium Data Encryption

Name of the Vulnerable Software and Affected Versions: IBM Security Guardium Data Encryption GDE version 3.0.0.2 Description: The issue allows for potential information disclosure due to sensitive information being stored in URL parameters. This could be accessed by unauthorized parties through...

PT-2021-1708 · Cisco · Cisco Webex Meetings

Name of the Vulnerable Software and Affected Versions: Cisco Webex Meetings affected versions not specified Description: The issue is related to improper input validation of the URL parameters in an HTTP request, allowing an unauthenticated, remote attacker to redirect a user to an untrusted web...

CVE-2020-4336

IBM WebSphere eXtreme Scale 8.6.1 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 177932...

Information disclosure

IBM WebSphere eXtreme Scale 8.6.1 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 177932...

CVE-2020-4336

IBM WebSphere eXtreme Scale 8.6.1 is affected by CVE-2020-4336, where sensitive information is stored in URL parameters, enabling potential disclosure if URLs are exposed via logs, referer headers, or browser history. The affected product/version is WebSphere eXtreme Scale 8.6.1; remediation prov...

CVE-2020-4336

IBM WebSphere eXtreme Scale 8.6.1 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 177932...

IBM WebSphere eXtreme Scale Information Disclosure Vulnerability

IBM WebSphere eXtreme Scale is a distributed caching solution from IBM USA. The product supports dynamic caching, partitioning, replication and management of application data and business logic across multiple servers. An information disclosure vulnerability exists in IBM WebSphere eXtreme Scale...

Security Bulletin: Vulnerability in IBM WebSphere eXtreme Scale Liberty Deployment could expose sensitive information.

Summary Vulnerability in IBM WebSphere eXtreme Scale Liberty Deployment could expose sensitive information. Vulnerability Details CVEID: CVE-2020-4336 DESCRIPTION: IBM WebSphere Extreme Scale stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized...

HGiga MailSherlock Cross-Site Scripting Vulnerability (CNVD-2021-06947)

HGiga MailSherlock is an email archiving and auditing system that provides a complete email security solution. A cross-site scripting vulnerability exists in HGiga MailSherlock. The vulnerability stems from MailSherlock failing to properly validate specific URL parameters. An attacker can exploit...