CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

334 matches found

Prion•added 2020/12/01 12:15 a.m.•27 views

Design/Logic Flaw

HCL iNotes is susceptible to a sensitive cookie exposure vulnerability. This can allow an unauthenticated remote attacker to capture the cookie by intercepting its transmission within an http session. Fixes are available in HCL Domino and iNotes versions 10.0.1 FP6 and 11.0.1 FP2 and later...

4.3CVSS5.8AI score0.00674EPSS

SaveExploits0References1Affected Software1

Cvelist•added 2020/11/30 11:50 p.m.•43 views

CVE-2020-4126

5.8AI score0.00674EPSS

SaveExploits0References1

Veracode•added 2020/11/30 4:35 a.m.•29 views

Cross-Site Request Forgery (CSRF)

akka-http-session is vulnerable to cross-site request forgery CSRF. The CSRF protection can be bypassed using an empty X-XSRF-TOKEN header and a XSRF-TOKEN cookie with empty value...

8.8CVSS2.4AI score0.00653EPSS

SaveExploits0References3Affected Software4

Rapid7 Vulnerability Database (full)•added 2020/11/30 12:00 a.m.•9 views

CVE-2020-4126: Missing Encryption of Sensitive Data

5.9CVSS5.9AI score0.00674EPSS

SaveExploits0References2

osv_cve•added 2020/11/27 5:15 p.m.•31 views

CVE-2020-7780

This affects the package com.softwaremill.akka-http-session:core2.13 before 0.5.11; the package com.softwaremill.akka-http-session:core2.12 before 0.5.11; the package com.softwaremill.akka-http-session:core2.11 before 0.5.11. For older versions, endpoints protected by randomTokenCsrfProtection...

8.8CVSS6.8AI score

SaveExploits0References6

NVD•added 2020/11/27 5:15 p.m.•45 views

CVE-2020-7780

8.8CVSS6.9AI score0.00653EPSS

SaveExploits0References6

Prion•added 2020/11/27 5:15 p.m.•34 views

Code injection

6.8CVSS8.7AI score0.00653EPSS

SaveExploits0References6Affected Software1

Cvelist•added 2020/11/27 4:40 p.m.•54 views

CVE-2020-7780 Cross-site Request Forgery (CSRF)

6.3CVSS8.7AI score0.00653EPSS

SaveExploits0References6

CVE•added 2020/11/27 4:40 p.m.•120 views

CVE-2020-7780

CVE-2020-7780 affects the akka-http-session core artifacts: core_2.13, core_2.12, and core_2.11 up to version 0.5.11. The underlying issue is a CSRF protection bypass where endpoints protected by randomTokenCsrfProtection can be reached with an empty X-XSRF-TOKEN header and an empty XSRF-TOKEN co...

8.8CVSS7.3AI score0.00653EPSS

SaveExploits0References6Affected Software1

Mend•added 2020/11/27 4:40 p.m.•8 views

CVE-2020-7780

8.8CVSS0.00653EPSS

SaveExploits0References4

attackerkb•added 2020/11/27 4:35 p.m.•9 views

CVE-2020-7780

8.8CVSS7.9AI score0.00653EPSS

SaveExploits0References7

CNNVD•added 2020/11/27 12:00 a.m.•25 views

Softwaremill Akka-http-session Cross-Site Request Forgery Vulnerability

Softwaremill Softwaremill Akka-http-session is a codebase for providing continuous JWT and continuous connection support for single page or mobile applications from Softwaremill, Poland. A security vulnerability exists in com.softwaremill.akka-http-session:core2.13, which stems from the fact that...

8.8CVSS7.2AI score0.00653EPSS

SaveExploits0References5

Rapid7 Vulnerability Database (full)•added 2020/11/27 12:00 a.m.•7 views

CVE-2020-7780: Cross-Site Request Forgery (CSRF)

8.8CVSS5.8AI score0.00653EPSS

SaveExploits0References2

vulnersOsv•added 2020/11/24 4:51 p.m.•9 views

com.codacy:codacy-seed-client-akka-http_2.11 (>=1.1.0_akka24circe08, <=1.2.0_akka25circe08), com.softwaremill.akka-http-session:jwt_2.11 (>=0.2.0, <=0.5.11) potentially affected by CVE-2020-28452 via com.softwaremill.akka-http-session:core_2.11 (>=0.2.0, <=0.5.11)

com.softwaremill.akka-http-session:core2.11 MAVEN version =0.2.0, =1.1.0akka24circe08, =0.2.0, =0.5.11 Source cves: CVE-2020-28452 Source advisory: SNYK:JAVA-COMSOFTWAREMILLAKKAHTTPSESSION-1046675...

8.8CVSS8AI score0.0053EPSS

SaveExploits0

Mend•added 2020/10/06 12:00 a.m.•9 views

CVE-2020-25644

A memory leak flaw was found in WildFly OpenSSL in versions prior to 1.1.3.Final, where it removes an HTTP session. It may allow the attacker to cause OOM leading to a denial of service. The highest threat from this vulnerability is to system availability...

8.7CVSS0.02365EPSS

SaveExploits0References9

Snyk•added 2020/03/10 4:51 p.m.•7 views

Cross-site Request Forgery (CSRF)

Overview Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF. For older versions, endpoints protected by randomTokenCsrfProtection could be bypassed with an empty X-XSRF-TOKEN header and an empty XSRF-TOKEN cookie. Remediation Upgrade...

8.8CVSS6.8AI score0.00653EPSS

SaveExploits0References2

Snyk•added 2020/03/10 4:51 p.m.•7 views

Cross-site Request Forgery (CSRF)

8.8CVSS6.8AI score0.00653EPSS

SaveExploits0References2

RedhatCVE•added 2019/10/22 9:51 p.m.•45 views

CVE-2019-10405

Jenkins 2.196 and earlier, LTS 2.176.3 and earlier printed the value of the "Cookie" HTTP request header on the /whoAmI/ URL, allowing attackers exploiting another XSS vulnerability to obtain the HTTP session cookie despite it being marked HttpOnly...

5.4CVSS2.5AI score0.6529EPSS

SaveExploits0References3

osv_cve•added 2019/09/25 4:15 p.m.•34 views

CVE-2019-10405

5.4CVSS5.7AI score0.6529EPSS

SaveExploits0References2

Prion•added 2019/09/25 4:15 p.m.•30 views

Cross site scripting

3.5CVSS5.1AI score0.6529EPSS

SaveExploits0References2Affected Software1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by