Lucene search
+L

731 matches found

Cvelist
Cvelist
added 2025/11/25 2:40 p.m.13 views

CVE-2025-36134 IBM Sterling B2B Integrator and IBM Sterling File Gateway information disclosure

IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7 and 6.2.0.0 through 6.2.0.5 and 6.2.1.1 could disclose sensitive information due to a missing or insecure SameSite attribute for a sensitive cookie...

3.7CVSS0.00266EPSS
SaveExploits0References1
CVE
CVE
added 2025/11/25 2:40 p.m.22 views

CVE-2025-36134

IBM Sterling B2B Integrator and IBM Sterling File Gateway (versions 6.0.0.0–6.1.2.7_1; 6.2.0.0–6.2.0.5; 6.2.1.1) may disclose sensitive information due to a missing or insecure SameSite attribute on a sensitive cookie (CVE-2025-36134). The root cause is improper SameSite handling that can lead to...

7.5CVSS5.8AI score0.00266EPSS
SaveExploits0References1Affected Software2
Positive Technologies
Positive Technologies
added 2025/11/25 12:0 a.m.11 views

PT-2025-48033

Name of the Vulnerable Software and Affected Versions IBM Sterling B2B Integrator and IBM Sterling File Gateway versions 6.0.0.0 through 6.1.2.7 IBM Sterling B2B Integrator and IBM Sterling File Gateway versions 6.2.0.0 through 6.2.0.5 IBM Sterling B2B Integrator and IBM Sterling File Gateway...

7.5CVSS6AI score0.00266EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2025/11/25 12:0 a.m.10 views

IBM Sterling B2B Integrator和IBM Sterling File Gateway 安全漏洞

IBM Sterling B2B Integrator and IBM Sterling File Gateway are both products of International Business Machines IBM.IBM Sterling B2B Integrator is a suite of software that integrates critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B...

7.5CVSS6.3AI score0.00266EPSS
SaveExploits0References2
CVE
CVE
added 2025/11/18 11:28 a.m.25 views

CVE-2025-6670

Summary: CVE-2025-6670 describes a CSRF vulnerability in multiple WSO2 products due to using HTTP GET for state-changing admin service operations in the Carbon console event processor. Despite SameSite=Lax mitigation, the cookie attribute is ineffective for cross-origin top-level navigations, all...

8.8CVSS6AI score0.00218EPSS
SaveExploits0References1Affected Software9
Positive Technologies
Positive Technologies
added 2025/11/18 12:0 a.m.9 views

PT-2025-47301

Name of the Vulnerable Software and Affected Versions WSO2 products affected versions not specified Description A Cross-Site Request Forgery CSRF issue exists in multiple WSO2 products. This is due to the use of the HTTP GET method for state-changing operations within admin services, specifically...

8.8CVSS6.2AI score0.00218EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
added 2025/11/01 2:20 p.m.18 views

CVE-2025-48980

In Brave Browser Desktop versions prior to 1.83.10 that have the split view feature enabled, the "Open Link in Split View" context menu item did not respect the SameSite cookie attribute. Therefore SameSite=Strict cookies would be sent on a cross-site navigation using this method...

6.5CVSS6.7AI score0.00298EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/31 12:30 a.m.7 views

EUVD-2025-37235

In Brave Browser Desktop versions prior to 1.83.10 that have the split view feature enabled, the "Open Link in Split View" context menu item did not respect the SameSite cookie attribute. Therefore SameSite=Strict cookies would be sent on a cross-site navigation using this method...

6.5CVSS6.1AI score0.00298EPSS
SaveExploits0References2
NVD
NVD
added 2025/10/31 12:15 a.m.5 views

CVE-2025-48980

In Brave Browser Desktop versions prior to 1.83.10 that have the split view feature enabled, the "Open Link in Split View" context menu item did not respect the SameSite cookie attribute. Therefore SameSite=Strict cookies would be sent on a cross-site navigation using this method...

6.5CVSS0.00298EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/10/31 12:0 a.m.6 views

Brave Browser Desktop 安全漏洞

Brave Browser Desktop is a desktop browser from Brave USA. A security vulnerability exists in Brave Browser Desktop versions prior to 1.83.10, which stems from a failure to follow the SameSite cookie attribute for the Open Link in Split View context menu item when the Split View feature is enable...

6.5CVSS6.3AI score0.00298EPSS
SaveExploits0References2
CVE
CVE
added 2025/10/30 11:29 p.m.22 views

CVE-2025-48980

Brave Browser Desktop (pre-1.83.10) with Split View enabled has a cookie handling flaw in the Open Link in Split View context menu: SameSite=Strict cookies could be sent during cross-site navigation. This is tied to Brave’s Split View behavior and affects confidentiality with cross-site requests....

6.5CVSS6.3AI score0.00298EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/10/30 11:29 p.m.6 views

CVE-2025-48980

In Brave Browser Desktop versions prior to 1.83.10 that have the split view feature enabled, the "Open Link in Split View" context menu item did not respect the SameSite cookie attribute. Therefore SameSite=Strict cookies would be sent on a cross-site navigation using this method...

6.5CVSS6.4AI score0.00298EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/10/30 11:29 p.m.9 views

CVE-2025-48980

In Brave Browser Desktop versions prior to 1.83.10 that have the split view feature enabled, the "Open Link in Split View" context menu item did not respect the SameSite cookie attribute. Therefore SameSite=Strict cookies would be sent on a cross-site navigation using this method...

6.5CVSS0.00298EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/10/30 12:0 a.m.7 views

PT-2025-44560

Name of the Vulnerable Software and Affected Versions Brave Browser versions prior to 1.83.10 Description The "Open Link in Split View" context menu item in Brave Browser Desktop did not correctly handle the SameSite cookie attribute when the split view feature was enabled. Specifically,...

6.5CVSS6.5AI score0.00298EPSS
SaveExploits0References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2018-10082

Malware in sbrugna...

6.5CVSS7.9AI score0.0255EPSS
SaveExploits0References9
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2021-2538

Malware in sbrugna...

7.5CVSS6.4AI score0.01416EPSS
SaveExploits1References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2018-4344

Malware in sbrugna...

8.8CVSS9AI score0.01126EPSS
SaveExploits0References9
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2020-17763

Malware in sbrugna...

8.8CVSS8.6AI score0.00488EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.8 views

EUVD-2023-35038

Malicious code in bioql PyPI...

6.5CVSS6.6AI score0.00583EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2022-38174

Malicious code in bioql PyPI...

7.5CVSS5.8AI score0.00732EPSS
SaveExploits0References2
Rows per page
Query Builder