Potential IP Addresses Found in the Viewstate

Home/Alerts/Alert detail/

Risk:
Medium

Type:
Passive

CWE:
CWE-642

Summary: The following potential IP addresses were found being serialized in the viewstate field:

Solution: Verify the provided information isn't confidential.

Other info: []

Latest Security News

Middle East Cyberwar Rages On, With No End in Sight

AI Could Generate 10,000 Malware Variants, Evading Detection in 88% of Case

Apache fixes remote code execution bypass in Tomcat web server

Microsoft fixes bug behind random Office 365 deactivation errors

Rockstar2FA Collapse Fuels Expansion of FlowerStorm Phishing-as-a-Service

Top 10 Cybersecurity Trends to Expect in 2025

U.S. Judge Rules Against NSO Group in WhatsApp Pegasus Spyware Case

Italy Fines OpenAI €15 Million for ChatGPT GDPR Data Privacy Violations

Common Alerts

HighSQL Injection - PostgreSQL

LowBig Redirect Detected (Potential Sensitive Information Leak)

LowServer Leaks Version Information via "Server" HTTP Response Header Field

MediumCSP: script-src unsafe-eval

HighProperties File Disclosure - /WEB-INF folder

InformationalImage Exposes Location or Privacy Data

HighCross Site Scripting (Reflected)

LowStrict-Transport-Security Multiple Header Entries (Non-compliant with Spec)

HighSQL Injection - MsSQL

InformationalInformation Disclosure - JWT in Browser sessionStorage

Latest CVE List

CVE-2024-12356 BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability

CVE-2018-14933 NUUO NVRmini Devices OS Command Injection Vulnerability

CVE-2022-23227 NUUO NVRmini 2 Devices Missing Authentication Vulnerability

CVE-2019-11001 Reolink Multiple IP Cameras OS Command Injection Vulnerability

CVE-2021-40407 Reolink RLC-410W IP Camera OS Command Injection Vulnerability

CVE-2024-55956 Cleo Multiple Products Unauthenticated File Upload Vulnerability

CVE-2024-20767 Adobe ColdFusion Improper Access Control Vulnerability

CVE-2024-35250 Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability

CVE-2024-50623 Cleo Multiple Products Unrestricted File Upload Vulnerability

CVE-2024-49138 Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability

Top CWE List

CWE-581 Object Model Violation: Just One of Equals and Hashcode Defined

HighCWE-200 Exposure of Sensitive Information to an Unauthorized Actor

HighCWE-863 Incorrect Authorization

HighCWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

CWE-1051 Initialization with Hard-Coded Network Resource Configuration Data

CWE-1395 Dependency on Vulnerable Third-Party Component

CWE-66 Improper Handling of File Names that Identify Virtual Resources

HighCWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE-1245 Improper Finite State Machines (FSMs) in Hardware Logic

CWE-1426 Improper Validation of Generative AI Output

Free security scan for your website

Don't show website scan report rating on the leaderboard