Lucene search
+L

404 matches found

Positive Technologies
Positive Technologies
added 2025/10/31 12:0 a.m.6 views

PT-2025-44624

Name of the Vulnerable Software and Affected Versions IBM Jazz for Service Management versions 1.1.3.0 through 1.1.3.25 Description The software does not set the secure attribute on authorization tokens or session cookies. This could allow attackers to obtain cookie values by sending an insecure...

5.3CVSS6.2AI score0.00147EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2025/10/22 6:18 p.m.17 views

CVE-2025-12031

HTTP Security Misconfiguration - Lacking Secure and HTTPOnly Attribute may allow reading the sensitive cookies from the javascript contextThis issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...

5.3CVSS7AI score0.00194EPSS
SaveExploits0References1
NVD
NVD
added 2025/10/21 6:15 p.m.13 views

CVE-2025-12031

HTTP Security Misconfiguration - Lacking Secure and HTTPOnly Attribute may allow reading the sensitive cookies from the javascript contextThis issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...

5.3CVSS0.00194EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/10/21 5:22 p.m.13 views

CVE-2025-12031 HTTP Security Misconfiguration - Lacking Secure and HTTPOnly Attribute

HTTP Security Misconfiguration - Lacking Secure and HTTPOnly Attribute may allow reading the sensitive cookies from the javascript contextThis issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...

5.3CVSS6.6AI score0.00194EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/10/21 5:22 p.m.10 views

CVE-2025-12031 HTTP Security Misconfiguration - Lacking Secure and HTTPOnly Attribute

HTTP Security Misconfiguration - Lacking Secure and HTTPOnly Attribute may allow reading the sensitive cookies from the javascript contextThis issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...

5.3CVSS0.00194EPSS
SaveExploits0References1
CVE
CVE
added 2025/10/21 5:22 p.m.20 views

CVE-2025-12031

The CVE-2025-12031 entry covers Azure Access Technology BLU-IC2 and BLU-IC4 networked access controllers. The connected CNVD/RH/NVD records confirm a weakness caused by missing Secure and HttpOnly cookie attributes, enabling reading of sensitive cookies from a JavaScript context. Affected version...

5.3CVSS6.6AI score0.00194EPSS
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2025/10/11 10:31 a.m.8 views

CVE-2025-52632

A Missing Secure Attribute in Encrypted Session SSL Cookie vulnerability in HCL AION.This issue affects AION: 2.0...

6.5CVSS7AI score0.0014EPSS
SaveExploits0References1
NVD
NVD
added 2025/10/10 10:15 a.m.12 views

CVE-2025-52632

A Missing Secure Attribute in Encrypted Session SSL Cookie vulnerability in HCL AION.This issue affects AION: 2.0...

7.5CVSS0.0014EPSS
SaveExploits0References1
OSV
OSV
added 2025/10/10 10:15 a.m.6 views

CVE-2025-52632

A Missing Secure Attribute in Encrypted Session SSL Cookie vulnerability in HCL AION.This issue affects AION: 2.0...

7.5CVSS5.8AI score0.0014EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/10/10 10:6 a.m.3 views

CVE-2025-52632 HCL AION is susceptible to Missing Secure Attribute in Encrypted Session (SSL) Cookie vulnerability

A Missing Secure Attribute in Encrypted Session SSL Cookie vulnerability in HCL AION.This issue affects AION: 2.0...

6.5CVSS6.6AI score0.0014EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/10/10 10:6 a.m.14 views

CVE-2025-52632 HCL AION is susceptible to Missing Secure Attribute in Encrypted Session (SSL) Cookie vulnerability

A Missing Secure Attribute in Encrypted Session SSL Cookie vulnerability in HCL AION.This issue affects AION: 2.0...

6.5CVSS0.0014EPSS
SaveExploits0References1
CVE
CVE
added 2025/10/10 10:6 a.m.20 views

CVE-2025-52632

CVE-2025-52632 affects HCL AION 2.0 and is described as a Missing Secure Attribute in Encrypted Session (SSL) Cookie vulnerability. The available connected sources confirm the affected product (HCL AION) and the issue arises in encrypted session cookies lacking the Secure attribute, which can exp...

7.5CVSS6.6AI score0.0014EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
added 2025/10/10 10:6 a.m.6 views

EUVD-2025-33702

A Missing Secure Attribute in Encrypted Session SSL Cookie vulnerability in HCL AION.This issue affects AION: 2.0...

6.5CVSS6.5AI score0.0014EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/10/10 12:0 a.m.8 views

PT-2025-41538

Name of the Vulnerable Software and Affected Versions HCL AION version 2.0 Description The software contains a missing secure attribute in encrypted session cookies. This could allow attackers to potentially intercept sensitive information transmitted in the session. Recommendations At the moment...

6.5CVSS6.2AI score0.0014EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2021-25414

Malware in sbrugna...

4.3CVSS4.2AI score0.00515EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2019-14350

Malware in sbrugna...

4.3CVSS5.2AI score0.0063EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2021-23763

Malware in sbrugna...

7.5CVSS7.5AI score0.00588EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2018-17250

Malware in sbrugna...

7.4CVSS7.5AI score0.00648EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2019-13778

Malware in sbrugna...

4.3CVSS4.7AI score0.00642EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2019-14223

Malware in sbrugna...

4.3CVSS4.8AI score0.00309EPSS
SaveExploits0References3
Rows per page
Query Builder