175 matches found
CVE-2025-9086 Out of bounds read for cookie path
A cookie is set using the secure keyword for https://target 2. curl is redirected to or otherwise made to speak with http://target same hostname, but using clear text HTTP using the same cookie set 3. The same cookie name is set - but with only a slash as path path="/". Since this site is not...
CVE-2025-9086
A cookie is set using the secure keyword for https://target 2. curl is redirected to or otherwise made to speak with http://target same hostname, but using clear text HTTP using the same cookie set 3. The same cookie name is set - but with only a slash as path path="/". Since this site is not...
CVE-2025-9086
libcurl (curl) contains an out-of-bounds read in its cookie path comparison logic, introduced in curl 7.31.0 and fixed in curl 8.16.0 . When a cookie is set with the secure attribute on an HTTPS host and curl is subsequently directed to the same hostname over plain HTTP, the same cookie name is r...
Curl 7.31.0 < 8.16.0 Out of Bounds Read (CVE-2025-9086)
The version of Curl installed on the remote host is 7.31.0 prior to 8.16.0. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-9086 advisory. - A cookie is set using the secure keyword for https://target. Curl is redirected to or otherwise made to speak with http://target...
Security update for curl
This update for curl fixes the following issues: CVE-2025-9086: bug in path comparison logic when processing cookies can lead to out-of-bounds read in heap buffer bsc1249191. CVE-2025-10148: predictable websocket mask can lead to proxy cache poisoning by malicious server bsc1249348. Patch...
SUSE-SU-2025:03173-1 Security update for curl
This update for curl fixes the following issues: - CVE-2025-9086: bug in path comparison logic when processing cookies can lead to out-of-bounds read in heap buffer bsc1249191. - CVE-2025-10148: predictable websocket mask can lead to proxy cache poisoning by malicious server bsc1249348...
curl: CVE-2025-9086: Out of bounds read for cookie path
We are tracking this issue with the public ID BIGSLEEP-437903454. Please use this identifier for reference in any future communication. Vulnerability Details In the cookie support found in cookie.c, there's an out-of-bounds string comparison that results from a crafted sequence of cookie...
cookie accepts cookie name path and domain with out of bounds characters
...
quarkus-vertx-http: a cross-site attack may be initiated which might lead to the Information Disclosure
A flaw was found in Quarkus. If the Quarkus Form Authentication session cookie Path attribute is set to /, then a cross-site attack may be initiated, which might lead to information disclosure...
SUSE CVE-2007-1362
Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2, allows remote attackers to cause a denial of service via 1 a large cookie path parameter, which triggers memory consumption, or 2 an internal delimiter within cookie path or name values, which could trigg...
quarkus-vertx-http: a cross-site attack may be initiated which might lead to the Information Disclosure
A flaw was found in Quarkus. If the Quarkus Form Authentication session cookie Path attribute is set to /, then a cross-site attack may be initiated, which might lead to information disclosure...
CVE-2022-41158
Eyoom Builder (Eyoom) contains a path traversal/remote code execution flaw. Affects versions prior to 4.5.4; vulnerability arises from using cookie values as file paths, enabling remote attackers to execute or inject code. Reported across multiple feeds (CNNVD/CVE entries). Remediation cited: upd...
Eyoom Builder 路径遍历漏洞
Eyoom Builder is a builder from the Korean company Eyoom. A path traversal vulnerability exists in Eyoom Builder versions prior to 4.5.4, which originates from remote code execution using a cookie value as the path to a file, and can be exploited by remote attackers to execute or inject malicious...
in getgrav/grav
✍️ Description Developers often set cookies to be accessible from the root context path "/". Doing so exposes the cookie to all web applications on the domain. Since cookies often carry sensitive information such as session identifiers, sharing cookies across applications can lead a vulnerability...
Security Bulletin: IBM Cloud Automation Manager is affected by an issue with insecure cookie path attribute (CVE-2019-4616)
Summary IBM Cloud Automation Manager does not set the secure attribute on authorization tokens or session cookies. Vulnerability Details CVEID: CVE-2019-4616 DESCRIPTION: IBM Cloud Automation Manager does not set the secure attribute on authorization tokens or session cookies. Attackers may be ab...
CVE-2019-7267
Linear eMerge 50P/5000P devices allow Cookie Path Traversal...
CVE-2019-7267
Linear eMerge 50P/5000P devices allow Cookie Path Traversal...
Path traversal
Linear eMerge 50P/5000P devices allow Cookie Path Traversal...
CVE-2019-7267
Linear eMerge 50P/5000P devices allow Cookie Path Traversal...
PT-2019-18497 · Linear · Linear Emerge 50P/5000P
Name of the Vulnerable Software and Affected Versions: Linear eMerge 50P/5000P devices affected versions not specified Description: The issue allows Cookie Path Traversal, which may lead to unauthorized access or data manipulation. No information is provided about the estimated number of...