Lucene search
+L

466 matches found

osv-cleanstart
osv-cleanstart
•added 2026/10/09 12:49 a.m.•10 views

CLEANSTART-2026-TI49446 HTTP strict parsing changes added in Apache httpd 2

Security vulnerability affects the apache2 package. The HTTP strict parsing changes added in Apache httpd 2...

7.5CVSS8AI score0.57472EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/18 12:00 a.m.•15 views

CVE-2024-56344: Use of a Broken or Risky Cryptographic Algorithm

IBM Cognos Analytics 12.0.4 through 12.0.4 FP2, and 12.1.0 through 12.1.3 FP1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using...

5.9CVSS6AI score0.00165EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/07/16 1:05 p.m.•22 views

CVE-2026-35145 HCL DFXAnalytics is affected by a Missing HTTP Strict-Transport-Security Header vulnerability.

HCL DFXAnalytics is affected by a Missing HTTP Strict-Transport-Security Header vulnerability. The application fails to implement the HTTP Strict Transport Security HSTS policy within its responses, which could allow a remote attacker to downgrade the communication channel to an unencrypted...

3.1CVSS6AI score0.00272EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/16 12:00 a.m.•9 views

CVE-2026-35145: Exposure of Sensitive Information to an Unauthorized Actor

HCL DFXAnalytics is affected by a Missing HTTP Strict-Transport-Security Header vulnerability. The application fails to implement the HTTP Strict Transport Security HSTS policy within its responses, which could allow a remote attacker to downgrade the communication channel to an unencrypted...

3.1CVSS6AI score0.00272EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/02/09 3:24 a.m.•57 views

CVE-2025-66600

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product lacks HSTS HTTP Strict Transport Security configuration. When an attacker performs a Man in the middle MITM attack, communications with the web server could be sniffed. The affected products and...

8.8CVSS0.00358EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 12:31 p.m.•25 views

CVE-2023-4342

Broadcom RAID Controller web interface is vulnerable due to insecure defaults of lacking HTTP strict-transport-security policy...

9.8CVSS6.9AI score0.00703EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 9:29 a.m.•28 views

CVE-2023-50962

IBM PowerSC 1.3, 2.0, and 2.1 MFA does not implement the "HTTP Strict Transport Security" HSTS web security policy mechanism. IBM X-Force ID: 276004...

7.5CVSS6.5AI score0.00318EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 9:04 a.m.•25 views

CVE-2024-39746

IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the...

5.9CVSS6.2AI score0.00275EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/11/21 3:43 p.m.•35 views

CVE-2025-36161

IBM Concert 1.0.0 through 2.0.0 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict-Transport-Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques...

5.9CVSS6.4AI score0.00211EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/20 12:00 a.m.•10 views

CVE-2025-36161: Use of a Broken or Risky Cryptographic Algorithm

IBM Concert 1.0.0 through 2.0.0 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict-Transport-Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques...

5.9CVSS6.2AI score0.00211EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2016-4116

Malware in sbrugna...

5.9CVSS6.2AI score0.01227EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•20 views

EUVD-2008-7249

Malware in sbrugna...

5.8CVSS5.8AI score0.01005EPSS
SaveExploits0References6
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2016-7050

Malware in sbrugna...

5.9CVSS6.2AI score0.01227EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2016-6963

Malware in sbrugna...

5.9CVSS6.8AI score0.01233EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•23 views

EUVD-2019-13769

Malware in sbrugna...

7.5CVSS6.1AI score0.00595EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•20 views

EUVD-2021-16166

Malware in sbrugna...

5.9CVSS6.2AI score0.01049EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•22 views

EUVD-2020-25407

Malware in sbrugna...

5.9CVSS6.6AI score0.01325EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•22 views

EUVD-2016-9791

Malware in sbrugna...

5.9CVSS6.2AI score0.01227EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•22 views

EUVD-2021-16312

Malware in sbrugna...

5.9CVSS6.7AI score0.01283EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•20 views

EUVD-2019-13745

Malware in sbrugna...

5.9CVSS6.2AI score0.02094EPSS
SaveExploits0References4
Rows per page
Query Builder