Lucene search
+L

581 matches found

CVE
CVE
•added 2026/01/09 11:16 a.m.•41 views

CVE-2026-22081

The CVE-2026-22081 issue affects Tenda 300Mbps Wireless Router F3 and N300 Easy Setup Router, arising from the absence of the HTTPOnly flag on cookies used by the web-based administrative interface. This enables a remote attacker to potentially capture session cookies transmitted over unencrypted...

8.8CVSS6.1AI score0.00376EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 9:59 a.m.•34 views

CVE-2020-7051

Codologic Codoforum through 4.8.4 allows stored XSS in the login area. This is relevant in conjunction with CVE-2020-5842 because session cookies lack the HttpOnly flag. The impact is account takeover...

6.1CVSS6.3AI score0.01816EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/09 12:00 a.m.•10 views

CVE-2026-22081: Sensitive Cookie Without 'HttpOnly' Flag

This vulnerability exists in Tenda wireless routers 300Mbps Wireless Router F3 and N300 Easy Setup Router due to the missing HTTPOnly flag for session cookies associated with the web-based administrative interface. A remote at-tacker could exploit this vulnerability by capturing session cookies...

8.8CVSS6.1AI score0.00376EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/07 9:33 a.m.•25 views

CVE-2019-16187

Limesurvey before 3.17.14 uses an anti-CSRF cookie without the HttpOnly flag, which allows attackers to access a cookie value via a client-side script...

7.5CVSS7.3AI score0.01387EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/10/21 12:00 a.m.•20 views

Security vulnerabilities in Azure Access Technology BLU-IC2 and Azure Access Technology BLU-IC4

The Azure Access Technology BLU-IC2 and Azure Access Technology BLU-IC4 are both networked access controllers from Azure Access Technology, USA. A security vulnerability exists in Azure Access Technology BLU-IC2 and Azure Access Technology BLU-IC4, which stems from the lack of Secure and HTTPOnly...

5.3CVSS5.8AI score0.00208EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/21 12:00 a.m.•7 views

CVE-2025-12031: Sensitive Cookie Without 'HttpOnly' Flag

HTTP Security Misconfiguration - Lacking Secure and HTTPOnly Attribute may allow reading the sensitive cookies from the javascript contextThis issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...

5.3CVSS5.8AI score0.00208EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/10/13 8:27 a.m.•18 views

CVE-2025-52614

HCL Unica Platform is affected by a Cookie without HTTPOnly Flag Set vulnerability. A malicious agent may be able to induce this event by feeding a user suitable links, either directly or via another web site...

4.3CVSS5.8AI score0.00138EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2025/10/12 8:15 a.m.•20 views

CVE-2025-52614

HCL Unica Platform is affected by a Cookie without HTTPOnly Flag Set vulnerability. A malicious agent may be able to induce this event by feeding a user suitable links, either directly or via another web site...

4.3CVSS5.8AI score0.00138EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/10/12 7:52 a.m.•9 views

CVE-2025-52614 HCL Unica Platform is affected by a Cookie without HTTPOnly Flag Set vulnerability

HCL Unica Platform is affected by a Cookie without HTTPOnly Flag Set vulnerability. A malicious agent may be able to induce this event by feeding a user suitable links, either directly or via another web site...

3.5CVSS5.8AI score0.00138EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/10/12 7:52 a.m.•35 views

CVE-2025-52614 HCL Unica Platform is affected by a Cookie without HTTPOnly Flag Set vulnerability

HCL Unica Platform is affected by a Cookie without HTTPOnly Flag Set vulnerability. A malicious agent may be able to induce this event by feeding a user suitable links, either directly or via another web site...

3.5CVSS0.00138EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2013-4575

Malware in sbrugna...

5CVSS5.8AI score0.01173EPSS
SaveExploits2References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2011-4656

Malware in sbrugna...

5CVSS5.8AI score0.01092EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•25 views

EUVD-2009-3547

Malware in sbrugna...

4.3CVSS6.3AI score0.04038EPSS
SaveExploits4References11
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2014-0665

Malware in sbrugna...

6CVSS5.8AI score0.00956EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•22 views

EUVD-2012-4771

Malware in sbrugna...

4.3CVSS5.8AI score0.01191EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•24 views

EUVD-2021-25316

Malware in sbrugna...

5.3CVSS5.4AI score0.01137EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2020-25536

Malware in sbrugna...

5.3CVSS5.8AI score0.01665EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•21 views

EUVD-2020-25393

Malware in sbrugna...

5.3CVSS5.4AI score0.01111EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•24 views

EUVD-2012-1847

Malware in sbrugna...

5CVSS5.8AI score0.01339EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•30 views

EUVD-2021-14505

Malware in sbrugna...

7.4CVSS6.6AI score0.00554EPSS
SaveExploits0References2
Rows per page
Query Builder