Lucene search
+L

37 matches found

EUVD
EUVD
•added 2025/10/07 12:30 a.m.•12 views

EUVD-2014-3359

Malware in sbrugna...

6.3CVSS6.4AI score0.01852EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2021-23763

Malware in sbrugna...

7.5CVSS7.5AI score0.00608EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2016-7282

Malware in sbrugna...

6.1CVSS6.3AI score0.00765EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•12 views

EUVD-2014-3358

Malware in sbrugna...

5CVSS6.4AI score0.02238EPSS
SaveExploits0References7
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2014-3357

Malware in sbrugna...

4.3CVSS6.4AI score0.01951EPSS
SaveExploits0References7
RedhatCVE
RedhatCVE
•added 2025/05/22 8:04 p.m.•16 views

CVE-2021-37189

An issue was discovered on Digi TransPort Gateway devices through 5.2.13.4. They do not set the Secure attribute for sensitive cookies in HTTPS sessions, which could cause the user agent to send those cookies in cleartext over an HTTP session...

7.5CVSS6.8AI score0.00608EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2021/12/10 1:15 p.m.•9 views

CVE-2021-37189

An issue was discovered on Digi TransPort Gateway devices through 5.2.13.4. They do not set the Secure attribute for sensitive cookies in HTTPS sessions, which could cause the user agent to send those cookies in cleartext over an HTTP session...

7.5CVSS7.1AI score0.00608EPSS
SaveExploits0References3
OSV
OSV
•added 2021/12/10 1:15 p.m.•13 views

CVE-2021-37189

An issue was discovered on Digi TransPort Gateway devices through 5.2.13.4. They do not set the Secure attribute for sensitive cookies in HTTPS sessions, which could cause the user agent to send those cookies in cleartext over an HTTP session...

7.5CVSS5.8AI score0.00608EPSS
SaveExploits0References2
NVD
NVD
•added 2021/12/10 1:15 p.m.•31 views

CVE-2021-37189

An issue was discovered on Digi TransPort Gateway devices through 5.2.13.4. They do not set the Secure attribute for sensitive cookies in HTTPS sessions, which could cause the user agent to send those cookies in cleartext over an HTTP session...

7.5CVSS0.00608EPSS
SaveExploits0References2
Prion
Prion
•added 2021/12/10 1:15 p.m.•23 views

Session fixation

An issue was discovered on Digi TransPort Gateway devices through 5.2.13.4. They do not set the Secure attribute for sensitive cookies in HTTPS sessions, which could cause the user agent to send those cookies in cleartext over an HTTP session...

5CVSS7.4AI score0.00608EPSS
SaveExploits0References2Affected Software6
Cvelist
Cvelist
•added 2021/12/10 12:47 p.m.•35 views

CVE-2021-37189

An issue was discovered on Digi TransPort Gateway devices through 5.2.13.4. They do not set the Secure attribute for sensitive cookies in HTTPS sessions, which could cause the user agent to send those cookies in cleartext over an HTTP session...

7.7AI score0.00608EPSS
SaveExploits0References2
CVE
CVE
•added 2021/12/10 12:47 p.m.•62 views

CVE-2021-37189

CVE-2021-37189 affects Digi TransPort Gateway devices up to version 5.2.13.4. The issue is that these devices do not set the Secure attribute for sensitive cookies in HTTPS sessions, which could cause cookies to be sent in cleartext over an HTTP session. This behavior is described in the NVD entr...

7.5CVSS7.4AI score0.00608EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
•added 2021/12/10 12:00 a.m.•12 views

Digi TransPort 安全漏洞

The Digi International Digi TransPort is a full-featured cellular router from Digi International USA. A security vulnerability exists in the Digi TransPort Gateway that stems from them not setting the Secure attribute for sensitive cookies in HTTPS sessions, which could result in a user agent...

7.5CVSS7.3AI score0.00608EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/10 12:00 a.m.•6 views

CVE-2021-37189: Missing Encryption of Sensitive Data

An issue was discovered on Digi TransPort Gateway devices through 5.2.13.4. They do not set the Secure attribute for sensitive cookies in HTTPS sessions, which could cause the user agent to send those cookies in cleartext over an HTTP session...

7.5CVSS5.8AI score0.00608EPSS
SaveExploits0References2
OSV
OSV
•added 2016/08/22 10:59 a.m.•16 views

CVE-2016-6359

Cross-site scripting XSS vulnerability in Cisco Transport Gateway Installation Software 4.14.0 on Smart Call Home Transport Gateway devices allows remote attackers to inject arbitrary web script or HTML via a crafted value, aka Bug IDs CSCva40650 and CSCva40817...

6.1CVSS5.9AI score0.00765EPSS
SaveExploits0References2
NVD
NVD
•added 2016/08/22 10:59 a.m.•19 views

CVE-2016-6359

Cross-site scripting XSS vulnerability in Cisco Transport Gateway Installation Software 4.14.0 on Smart Call Home Transport Gateway devices allows remote attackers to inject arbitrary web script or HTML via a crafted value, aka Bug IDs CSCva40650 and CSCva40817...

6.1CVSS6.1AI score0.00765EPSS
SaveExploits0References2
Prion
Prion
•added 2016/08/22 10:59 a.m.•20 views

Cross site scripting

Cross-site scripting XSS vulnerability in Cisco Transport Gateway Installation Software 4.14.0 on Smart Call Home Transport Gateway devices allows remote attackers to inject arbitrary web script or HTML via a crafted value, aka Bug IDs CSCva40650 and CSCva40817...

4.3CVSS6.2AI score0.00765EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2016/08/22 10:00 a.m.•37 views

CVE-2016-6359

Cross-site scripting XSS vulnerability in Cisco Transport Gateway Installation Software 4.14.0 on Smart Call Home Transport Gateway devices allows remote attackers to inject arbitrary web script or HTML via a crafted value, aka Bug IDs CSCva40650 and CSCva40817...

6.1AI score0.00765EPSS
SaveExploits0References2
CVE
CVE
•added 2016/08/22 10:00 a.m.•53 views

CVE-2016-6359

CVE-2016-6359 is an XSS vulnerability in Cisco Smart Call Home Transport Gateway, affecting the Transport Gateway Installation Software 4.1(4.0). The root cause is insufficient input validation in the web framework, enabling remote attackers to inject arbitrary script or HTML by supplying a craft...

6.1CVSS6AI score0.00765EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/08/22 12:00 a.m.•5 views

CVE-2016-6359: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Cisco Transport Gateway Installation Software 4.14.0 on Smart Call Home Transport Gateway devices allows remote attackers to inject arbitrary web script or HTML via a crafted value, aka Bug IDs CSCva40650 and CSCva40817...

6.1CVSS6.4AI score0.00765EPSS
SaveExploits0References2
Rows per page
Query Builder