Lucene search
+L

4 matches found

Mend
Mend
•added 2024/01/21 12:00 a.m.•2 views

MSC-2024-0349

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Contacting external host – this package sends...

8.8CVSS5.8AI score
SaveExploits0References1
osv_cve
osv_cve
•added 2024/01/09 11:15 p.m.•21 views

CVE-2024-0349

A vulnerability was found in SourceCodester Engineers Online Portal 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to sensitive cookie without secure attribute. The attack can be launched remotely. The complexity of an...

5.3CVSS4.3AI score0.00385EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2024/01/09 10:31 p.m.•18 views

CVE-2024-0349 SourceCodester Engineers Online Portal missing secure attribute

A vulnerability was found in SourceCodester Engineers Online Portal 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to sensitive cookie without secure attribute. The attack can be launched remotely. The complexity of an...

3.7CVSS5.3AI score0.00385EPSS
SaveExploits0References3
CVE
CVE
•added 2024/01/09 10:31 p.m.•76 views

CVE-2024-0349

Affected product: SourceCodester Engineers Online Portal 1.0. The issue is a missing secure attribute on sensitive cookies, enabling potential cookie leakage. A remote attacker could exploit this vulnerability, with attack complexity described as high and no user interaction required. Multiple so...

5.3CVSS5.3AI score0.00385EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder