CVE-2012-5368

phpMyAdmin 3.5.x before 3.5.3 uses JavaScript code that is obtained through an HTTP session to phpmyadmin.net without SSL, which allows man-in-the-middle attackers to conduct cross-site scripting XSS attacks by modifying this code...

Cross site scripting

phpMyAdmin 3.5.x before 3.5.3 uses JavaScript code that is obtained through an HTTP session to phpmyadmin.net without SSL, which allows man-in-the-middle attackers to conduct cross-site scripting XSS attacks by modifying this code...

Security Advisory-HTTP Session Management Vulnerability in HTTP Module

Branch Intelligent Management System BIMS and Web management is provided by Huawei for network and device management. Both BIMS and Web management use HTTP. Therefore, to use BIMS and Web management, you must enable HTTP. Because HTTP session ID generation is weak and predictable, an attacker can...

CVE-2012-1288

The UTC Fire & Security GE-MC100-NTP/GPS-ZB Master Clock device uses hardcoded credentials for an administrative account, which makes it easier for remote attackers to obtain access via an HTTP session...

Hardcoded credentials

The UTC Fire & Security GE-MC100-NTP/GPS-ZB Master Clock device uses hardcoded credentials for an administrative account, which makes it easier for remote attackers to obtain access via an HTTP session...

CVE-2012-1288

The UTC Fire & Security GE-MC100-NTP/GPS-ZB Master Clock device uses hardcoded credentials for an administrative account, which makes it easier for remote attackers to obtain access via an HTTP session...

CVE-2012-1288: Undefined Security Weakness

The UTC Fire & Security GE-MC100-NTP/GPS-ZB Master Clock device uses hardcoded credentials for an administrative account, which makes it easier for remote attackers to obtain access via an HTTP session...

PT-2012-3176

Name of the Vulnerable Software and Affected Versions UTC Fire & Security GE-MC100-NTP/GPS-ZB Master Clock device affected versions not specified Description The issue concerns the use of hardcoded credentials for an administrative account in the device, making it easier for remote attackers to...

Google Chrome 'HTTP session' Information Disclosure Vulnerability (Linux)

The host is installed with Google Chrome and is prone to information disclosure vulnerability. OpenVAS Vulnerability Test $Id: gbgooglechromehttpsessioninfodiscvulnlin.nasl 6521 2017-07-04 14:51:10Z cfischer $ Google Chrome 'HTTP session' Information Disclosure Vulnerability Linux Authors: Madhur...

Google Chrome 'HTTP session' Information Disclosure Vulnerability (MAC OS X)

The host is installed with Google Chrome and is prone to information disclosure vulnerability. OpenVAS Vulnerability Test $Id: gbgooglechromehttpsessioninfodiscvulnmacosx.nasl 6521 2017-07-04 14:51:10Z cfischer $ Google Chrome 'HTTP session' Information Disclosure Vulnerability MAC OS X Authors:...

Google Chrome 'HTTP session' Information Disclosure Vulnerability (Windows)

The host is installed with Google Chrome and is prone to information disclosure vulnerability. OpenVAS Vulnerability Test $Id: gbgooglechromehttpsessioninfodiscvulnwin.nasl 5963 2017-04-18 09:02:14Z teissa $ Google Chrome 'HTTP session' Information Disclosure Vulnerability Windows Authors: Madhur...

Google Chrome 'HTTP session' Information Disclosure Vulnerability - Linux

Google Chrome is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Google Chrome 'HTTP session' Information Disclosure Vulnerability - Windows

Google Chrome is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Google Chrome 'HTTP session' Information Disclosure Vulnerability - Mac OS X

Google Chrome is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2011-3022

translate/translatemanager.cc in Google Chrome before 17.0.963.56 and 19.x before 19.0.1036.7 uses an HTTP session to exchange data for translation, which allows remote attackers to obtain sensitive information by sniffing the network...

CVE-2011-3022

CVE-2011-3022 affects Google Chrome (translation feature): the vulnerable code path is in translate/translate_manager.cc, where an HTTP session used for translation could leak information to an eavesdropper. The vulnerability is described as an information disclosure via the HTTP session. Affecte...

CVE-2011-3022

translate/translatemanager.cc in Google Chrome before 17.0.963.56 and 19.x before 19.0.1036.7 uses an HTTP session to exchange data for translation, which allows remote attackers to obtain sensitive information by sniffing the network...

CVE-2011-3022

translate/translatemanager.cc in Google Chrome before 17.0.963.56 and 19.x before 19.0.1036.7 uses an HTTP session to exchange data for translation, which allows remote attackers to obtain sensitive information by sniffing the network...

PT-2012-1589

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 17.0.963.56 Google Chrome versions 19.x prior to 19.0.1036.7 Description The issue allows remote attackers to obtain sensitive information by sniffing the network, due to the use of an HTTP session to exchange...

Design/Logic Flaw

The Server Administration Panel in Parallels Plesk Panel 10.2.0build1011110331.18 does not set the secure flag for a cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session, as demonstrated by cookies us...