34211 matches found
EUVD-2026-104478
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, the Secure attribute for a shared cookie is not enforced. An attacker can consequently cause a shared cookie marked Secure to be sent with an unencrypted request. This issue is fixed in version 3.14.4...
CVE-2026-111063 AIOHTTP: Secure attribute not enforced for shared cookie
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, the Secure attribute for a shared cookie is not enforced. An attacker can consequently cause a shared cookie marked Secure to be sent with an unencrypted request. This issue is fixed in version 3.14.4...
CVE-2026-111063
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, the Secure attribute for a shared cookie is not enforced. An attacker can consequently cause a shared cookie marked Secure to be sent with an unencrypted request. This issue is fixed in version 3.14.4...
CVE-2026-111063 AIOHTTP: Secure attribute not enforced for shared cookie
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, the Secure attribute for a shared cookie is not enforced. An attacker can consequently cause a shared cookie marked Secure to be sent with an unencrypted request. This issue is fixed in version 3.14.4...
CVE-2026-111063 AIOHTTP: Secure attribute not enforced for shared cookie
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, the Secure attribute for a shared cookie is not enforced. An attacker can consequently cause a shared cookie marked Secure to be sent with an unencrypted request. This issue is fixed in version 3.14.4...
CVE-2026-111063
The AIOHTTP asynchronous HTTP client/server framework for Python and asyncio is vulnerable to a security flaw prior to version 3.14.4 . The Secure attribute for a shared cookie is not enforced, which could allow an attacker to cause a shared cookie marked as Secure to be transmitted over an unenc...
CVE-2026-111063
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, the Secure attribute for a shared cookie is not enforced. An attacker can consequently cause a shared cookie marked Secure to be sent with an unencrypted request. This issue is fixed in version 3.14.4...
Oracle Secure Backup security vulnerabilities
Oracle Secure Backup versions 19.1.0.0.0 and 19.1.0.1.0 have security vulnerabilities. These vulnerabilities stem from issues with the Backup and Restore component. Unauthorized attackers may gain access through the TCP network, causing the service to hang or crash frequently...
Oracle Secure Backup security vulnerabilities
Oracle Secure Backup versions 19.1.0.0.0 and 19.1.0.1.0 have security vulnerabilities. These vulnerabilities stem from issues with the Device Management and Support component. They may allow low-privilege attackers to log in and take control of Oracle Secure Backup after accessing the...
IBM Cyber Fraud Exception Handling Vulnerability
IBM Cyber Fraud 1.0.0 to 1.0.2 versions have a vulnerability related to improper exception handling. This vulnerability arises due to the absence of the Secure attribute, allowing sensitive cookies to be transmitted over unencrypted connections. This could enable attackers to intercept session da...
Oracle Secure Backup security vulnerability
Versions 19.1.0.0.0 and 19.1.0.1.0 of Oracle Secure Backup contain a security vulnerability stemming from issues in the Device Management and Support component. This vulnerability may allow low-privilege attackers to log in and execute infrastructure tasks, resulting in Oracle Secure Backup being...
Oracle Secure Backup security vulnerability
Versions 19.1.0.0.0 and 19.1.0.1.0 of Oracle Secure Backup contain a security vulnerability stemming from issues in the Device Management and Support component. This vulnerability may allow attackers with limited privileges to log in to the infrastructure running Oracle Secure Backup, take contro...
Eclipse ThreadX – NetX Duo input validation vulnerability
Eclipse ThreadX – NetX Duo 6.5.1.202602 and earlier versions have a security vulnerability. This vulnerability stems from the X.509 parser in NetX Secure accepting RSA public keys of arbitrary size and decrypting them into a fixed-size buffer. Certificates with larger modulus values may lead to...
Oracle Secure Backup authorization issue vulnerability
Versions 19.1.0.0.0 and 19.1.0.1.0 of Oracle Secure Backup contain an authorization issue vulnerability. This vulnerability stems from issues within the Backup and Restore component and may allow unauthenticated attackers to gain access to Oracle Secure Backup via the TCP network...
Oracle Secure Backup security vulnerability
Versions 19.1.0.0.0 and 19.1.0.1.0 of Oracle Secure Backup contain a security vulnerability stemming from an issue in the NDMP daemon component. This vulnerability may allow unauthenticated attackers to access TCP-based networks and read certain accessible data...
Apple macOS Information Leakage Vulnerability
Apple macOS versions prior to Golden Gate 27, Apple macOS Sequoia 15.8, and Apple macOS Tahoe 26.7 have security vulnerabilities. These vulnerabilities stem from improper handling of secure input states, which may allow applications to access sensitive user data...
Cisco Secure Firewall ASA 9.24 / FTD 10.0 Detection
Cisco Secure Firewall ASA and FTD Software versions contain a remote access SSL VPN denial of service vulnerability. The supplied Nuclei template passively fingerprints a VPN endpoint and compares its reported firmware version against selected affected release ranges...
PT-2026-118087
Nginx UI: OTP secure-session step-up can be bypassed via MCP configuration tools in github.com/0xJacky/Nginx-UI...