CVE-2015-7929: Exposure of Sensitive Information to an Unauthorized Actor

eWON devices with firmware through 10.1s0 support unspecified GET requests, which might allow remote attackers to obtain sensitive information by reading 1 web-server access logs, 2 web-server Referer logs, or 3 the browser history...

PT-2014-5192

Name of the Vulnerable Software and Affected Versions Cisco Intelligent Automation for Cloud in Cisco Cloud Portal affected versions not specified Description The issue allows remote authenticated users to obtain sensitive information by reading web-server access logs, web-server Referer logs, or...

PT-2014-5189

Name of the Vulnerable Software and Affected Versions Cisco WebEx Meeting Server affected versions not specified Description The issue allows remote authenticated users to obtain sensitive information by reading web-server access logs, web-server Referer logs, or the browser history...

CVE-2014-3294: Undefined Security Weakness

Cisco WebEx Meeting Server does not properly restrict the content of URLs, which allows remote authenticated users to obtain sensitive information by reading 1 web-server access logs, 2 web-server Referer logs, or 3 the browser history, aka Bug ID CSCuj81691...

PT-2013-5574

Name of the Vulnerable Software and Affected Versions Cisco SocialMiner affected versions not specified Description The issue concerns the gadget implementation in Cisco SocialMiner, which does not properly restrict the content of GET requests. This allows remote attackers to obtain sensitive...

CVE-2011-4751

SmarterTools SmarterStats 6.2.4100 generates web pages containing external links in response to GET requests with query strings for frmGettingStarted.aspx, which makes it easier for remote attackers to obtain sensitive information by reading 1 web-server access logs or 2 web-server Referer logs,...

CVE-2009-3166

Bugzilla 3.4rc1–3.4.1 vulnerability: token.cgi places a password in the login URL after a reset, allowing context-dependent attackers to obtain passwords via web server access logs, Referer logs, or browser history. The provided documents confirm Bugzilla involvement and CVE-2009-3166, but do not...