7 matches found
CVE-2026-1697
The Secure and SameSite attribute are missing in the GraphicalData web services and WebClient web app of PcVue in version 12.0.0 through 16.3.3 included...
EUVD-2015-5184
Malware in sbrugna...
SUSE CVE-2018-16423
A double free when handling responses from a smartcard in scfilesetsecattr in libopensc/sc.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service application crash or possibly have unspecified other impact...
CVE-2020-4665
IBM Sterling File Gateway 2.2.0.0 through 2.2.6.5 and 6.0.0.0 through 6.0.3.2 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The...
PT-2019-16947 · Ibm · Ibm Cognos Controller
Name of the Vulnerable Software and Affected Versions: IBM Cognos Controller versions 10.3.0 through 10.4.1 Description: The issue allows an attacker to obtain sensitive information using man-in-the-middle techniques because it does not set the secure attribute on authorization tokens or session...
CVE-2015-5183
CVE-2015-5183 affects Red Hat AMQ/Hawtio console where cookies are missing HTTPOnly and Secure attributes. This exposes session cookies and could enable session-reuse or related unauthorized access in affected deployments. Public mentions and Red Hat advisories confirm the issue as a cookie secur...
CVE-2015-5183
Console: HTTPOnly and Secure attributes not set on cookies in Red Hat AMQ...