Use of HTTP Request With Sensitive Query String

ACTi cameras including the D, B, I, and E series using firmware version A1D-500-V6.11.31-AC have a web application that uses the GET method

• Pre-auth

acti · camera firmwareDec 15, 2017

Entes EMG12 versions 2.57 and prior an information exposure through query strings vulnerability in the web interface has been identified, wh

• pre-auth RCE

entes · emg-12 firmwareOct 2, 2018

MLflow Authentication Bypass

• Pre-auth
• Auth bypass

lfprojects · mlflowNov 16, 2023

Ebyte NA111-M Use of GET Request Method With Sensitive Query Strings

• Pre-auth

ebyte · ebyte na111-m firmwareAug 27, 2026

openssl_encrypt before 1.4.0 Token Leakage via Query Parameters

• Pre-auth

jahlives · openssl encryptAug 17, 2026

Tugtainer vulnerable to Password Exposure via URL Query Parameter

• Pre-auth

quenary · tugtainerJan 19, 2026

The RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance products prior to 7.1.1 P03 contain a Session Fixation vulner

• Pre-auth

dell · rsa identity governance and lifecycleDec 18, 2019

Dell EMC Streaming Data Platform versions before 1.3 contain a SQL Injection Vulnerability.

• SQL injection

dell · emc streaming data platformNov 30, 2021

DELL EMC AppSync versions 3.9 to 4.3 use GET request method with sensitive query strings.

• Pre-auth

dell · emc appsyncJan 21, 2022

Outback Power Mojave Inverter Use of GET Request Method With Sensitive Query Strings

• Pre-auth

outbackpower · mojave inverter oghi8048a firmwareFeb 13, 2025

Grav API Plugin - Cross-Origin Admin Account Takeover via CORS Wildcard and JWT Query Parameter

• Pre-auth

getgrav · gravJul 8, 2026

Use of GET Request Method With sensitive Query Strings

• Pre-auth

tridium · niagaraMay 22, 2025

An attacker could retrieve passwords from a HTTP GET request from the Kunbus PR100088 Modbus gateway versions prior to Release R02 (or Softw

• Pre-auth

kunbus · pr100088 modbus gateway firmwareApr 2, 2019

Flextype CMS through 1.0.0-alpha.3 API Token Exposure via Query String

• Pre-auth

flextype · flextypeSep 10, 2026

Grav < 1.0.0-rc.16 Authentication Bypass via token URL Parameter

• Pre-auth
• Auth bypass

getgrav · gravJul 16, 2026

An issue in DirectAdmin v1.680 allows unauthorized attackers to manipulate the page layout and replace the legitimate login interface with a

• Pre-auth

directadmin · directadminOct 3, 2025

A use of GET request method with sensitive query strings vulnerability in Fortinet FortiOS 7.0.0 - 7.0.12, 7.2.0 - 7.2.5 and 7.4.0 allows an

• Pre-auth

fortinet · fortiosOct 10, 2023

Novell Identity Manager User Application get request url contains the session token.

• Pre-auth

netiq · identity managerMar 2, 2018

Apache OpenMeetings: Login Credentials Passed via GET Query Parameters

• Pre-auth

apache · openmeetingsApr 9, 2026

Certain requests pass the authentication token in the URL as string query parameter, making it vulnerable to theft through server logs, prox

• Pre-auth

sick · incoming goods suiteJan 15, 2026

Multiple Vulnerabilities in IBM Engineering AI hub.

• Pre-auth

ibm · engineering ai hubJul 17, 2026

IBM Maximo Application Suite information disclosure

• Pre-auth

ibm · maximo application suiteMar 13, 2024

Grav API Plugin: JWT Access Token Accepted via `?token=` URL Query Parameter

• Pre-auth

getgrav · grav-plugin-apiAug 19, 2026

Portainer: JWT accepted in URL query leaks tokens to logs and referers

• Pre-auth

portainer · portainerMay 28, 2026

An issue was discovered on HMS Anybus X-Gateway AB7832-F 3 devices.

• Pre-auth
• Denial of service

Jun 26, 2024