CVE-2026-47889

A WebFlux application running on the Jetty 12 Core reactive adapter serializes response cookies without the sameSite attribute. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19...

CVE-2026-47889 Spring Framework sameSite Attribute Dropped in JettyCoreServerHttpResponse

A WebFlux application running on the Jetty 12 Core reactive adapter serializes response cookies without the sameSite attribute. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19...

PT-2026-82407

Name of the Vulnerable Software and Affected Versions Spring Framework versions 7.0.0 through 7.0.8 Spring Framework versions 6.2.0 through 6.2.19 Description A WebFlux application using the Jetty 12 Core reactive adapter fails to include the sameSite attribute when serializing response cookies...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a missing nostackprotector function attribute, which could lead to a stack protector initialization failure and ...

An Approach for Handling Missing Attribute Values in Attribute-Based Access Control Policy Mining

Attribute-Based Access Control ABAC enables highly expressive and flexible access decisions by considering a wide range of contextual attributes. ABAC policies use logical expressions that combine these attributes, allowing for precise and context-aware control. Algorithms that mine ABAC policies...

GO-2022-1192 usememos/memos missing Secure cookie attribute in github.com/usememos/memos

usememos/memos missing Secure cookie attribute in github.com/usememos/memos...

CVE-2024-27913

ospfteparsete in ospfd/ospfte.c in FRRouting FRR through 9.1 allows remote attackers to cause a denial of service ospfd daemon crash via a malformed OSPF LSA packet, because of an attempted access to a missing attribute field...

Design/Logic Flaw

ospfteparsete in ospfd/ospfte.c in FRRouting FRR through 9.1 allows remote attackers to cause a denial of service ospfd daemon crash via a malformed OSPF LSA packet, because of an attempted access to a missing attribute field...

FRRouting Security Vulnerabilities

FRRouting is an open source network routing software suite from the FRRouting Project that runs on Unix-like platforms. A security vulnerability exists in FRRouting 9.1 and earlier versions , the vulnerability stems from a missing attribute field , a remote attacker can cause a denial of service...

Reverse Tabnabbing

DOMPurify is vulnerable to reverse tabnabbing. The vulnerability is due to a missing rel="noopener noreferrer" attribute on links that use the target="blank" attribute. This can potentially lead to Phishing Attacks...

CVE-2022-3155: Incorrect Default Permissions

When saving or opening an email attachment on macOS, Thunderbird did not set attribute com.apple.quarantine on the received file. If the received file was an application and the user attempted to open it, then the application was started immediately without asking the user to confirm. This...

PT-2020-14308

Name of the Vulnerable Software and Affected Versions Smartstore versions 4.0.0 through 4.0.1 Description The issue is related to a missing WebApi Authentication attribute in affected versions of Smartstore. This affects Smartstore shops that have installed and activated the Web API plugin...

The vulnerability of the platform for automating operations in healthcare institutions of the Russian Federation’s entity Tra: The “medicare supply” issue, related to the absence of the defined attribute HTTPOnly, allows a hacker to gain access to the content of cookies files.

The vulnerability of the platform for automating operations in healthcare institutions of the Russian Federation’s Tra: platform is related to the absence of the defined attribute HTTPOnly. Exploiting this vulnerability may allow a malicious actor, operating remotely, to gain access to cookie...