Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 13

Export CSV
CVE-2026-22644

Token Leakage via URL Parameter Enabling Session Hijack

Certain requests pass the authentication token in the URL as string query parameter, making it vulnerable to theft through server logs, proxy logs and Referer headers, which could allow an attacker to hijack the user's session and gain unauthorized access.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Sick Sick Ag
Products
Incoming Goods Suite Incoming Goods Suite
CVE-2026-22646

Error Messages Reveal Sensitive System Details

Certain error messages returned by the application expose internal system details that should not be visible to end users, providing attackers with valuable reconnaissance information (like file paths, database errors, or software versions) that can be used to map the application's internal structure and discover other, more critical vulnerabilities.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Sick Sick Ag
Products
Incoming Goods Suite Incoming Goods Suite
CVE-2024-11075

SICK Incoming Goods Suite privilege escalation vulnerability

A vulnerability in the Incoming Goods Suite allows a user with unprivileged access to the underlying system (e.g. local or via SSH) a privilege escalation to the administrative level due to the usage of component vendor Docker images running with root permissions. Exploiting this misconfiguration leads to the fact that an attacker can gain administrative control. over the whole system.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Sick Ag
Products
Incoming Goods Suite