CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

2 matches found

Mend•added 2026/04/03 2:25 a.m.•7 views

CVE-2026-35536

In Tornado before 6.5.5, cookie attribute injection could occur because the domain, path, and samesite arguments to .RequestHandler.setcookie were not checked for crafted characters...

7.2CVSS6.1AI score0.00242EPSS

SaveExploits0References7

Rapid7 Vulnerability Database (full)•added 2026/04/03 12:00 a.m.•6 views

CVE-2026-35536: Improper Handling of Invalid Use of Special Elements

In Tornado before 6.5.5, cookie attribute injection could occur because the domain, path, and samesite arguments to .RequestHandler.setcookie were not checked for crafted characters...

7.2CVSS6.1AI score0.00242EPSS

SaveExploits0References3

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by