9 matches found
CVE-2025-58406 Lack of HTTP Response Headers
The CGM CLININET application respond without essential security HTTP headers, exposing users to client‑side attacks such as clickjacking, MIME sniffing, unsafe caching, weak cross‑origin isolation, and missing transport security controls...
EUVD-2022-3207
Malicious code in bioql PyPI...
CGA-HHFG-GJ2G-RCXV
Bulletin has no description...
IBM Security Verify Governance 安全漏洞
IBM Security Verify Governance is an intelligent identity access platform from International Business Machines IBM, Inc. provides organizations with a platform to analyze, define and control user access and access risk. An information disclosure vulnerability exists in IBM Security verify...
CVE-2022-3259
Openshift 4.9 does not use HTTP Strict Transport Security HSTS which may allow man-in-the-middle MITM attacks...
Rdiffweb 安全漏洞
Rdiffweb is a web application by Patrik Dufresne, an individual developer in the USA. It provides quick access to your files through an efficient web interface. A security vulnerability exists in Rdiffweb versions prior to 2.4.2, which stems from the presence of sensitive cookies in HTTPS session...
PT-2019-13371 · One Identity · One Identity Cloud Access Manager
Name of the Vulnerable Software and Affected Versions: One Identity Cloud Access Manager version 8.1.3 Description: The issue allows man-in-the-middle MITM attacks due to the lack of HTTP Strict Transport Security HSTS. Recommendations: For One Identity Cloud Access Manager version 8.1.3, update ...
CVE-2008-2174
Technical details for CVE-2008-2174 are not publicly provided in the supplied documents. Monitor for updates from NVD/other sources.
CVE-2008-2174
Multiple unspecified vulnerabilities in Robin Rawson-Tetley Animal Shelter Manager ASM before 2.2.2 have unknown impact and attack vectors, related to "various areas where security was missing."...