GoCD Cross-Site Scripting Vulnerability

GoCD is a continuous delivery server. A cross-site scripting vulnerability exists in GoCD versions 19.11.0 through 21.4.0, which could be exploited by attackers to obtain a GoCD user's session cookie and execute malicious code...

CVE-2022-0959

A malicious, but authorised and authenticated user can construct an HTTP request using their existing CSRF token and session cookie to manually upload files to any location that the operating system user account under which pgAdmin is running has permission to write...

CVE-2022-29182: Improper Neutralization of Input During Web Page Generation

GoCD is a continuous delivery server. GoCD versions 19.11.0 through 21.4.0 inclusive are vulnerable to a Document Object Model DOM-based cross-site scripting attack via a pipeline run's Stage Details Graphs tab. It is possible for a malicious script on a attacker-hosted site to execute script tha...

Zoom Client information leakage vulnerability

Zoom Client is a video conferencing client application from Zoom, Inc. that supports multiple platforms. An information disclosure vulnerability exists in Zoom Client for Meetings prior to version 5.10.0, which stems from an inability to properly bind a client session cookie to a Zoom domain...

GHSA-G466-57GH-CQFW Spree uses a hardcoded hash value

The session cookie store implementation in Spree 0.2.0 uses a hardcoded config.actioncontrollersession hash value aka secret key, which makes it easier for remote attackers to bypass cryptographic protection mechanisms by leveraging an application that contains this value within the...

Spree uses a hardcoded hash value

The session cookie store implementation in Spree 0.2.0 uses a hardcoded config.actioncontrollersession hash value aka secret key, which makes it easier for remote attackers to bypass cryptographic protection mechanisms by leveraging an application that contains this value within the...

UBUNTU-CVE-2022-1726

Bootstrap Tables XSS vulnerability with Table Export plug-in when exportOptions: htmlContent is true in GitHub repository wenzhixin/bootstrap-table prior to 1.20.2. Disclosing session cookies, disclosing secure session data, exfiltrating data to third-parties...

InHand Networks InRouter302 Information Disclosure Vulnerability (CNVD-2022-59185)

InHand Networks InRouter Series is a series of routers from InHand Networks, Inc. An information disclosure vulnerability exists in InHand Networks InRouter302 V3.5.4, which stems from the lack of the HttpOnly flag in the session cookie, which could be exploited by an attacker to The vulnerabilit...

ro.pippo:pippo-demo-session (0.4.0), ro.pippo:pippo-session-cookie (0.4.0) potentially affected by CVE-2018-18240 via ro.pippo:pippo-session (0.4.0)

ro.pippo:pippo-session MAVEN version 0.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on ro.pippo:pippo-session and may be impacted: - ro.pippo:pippo-demo-session 0.4.0 - ro.pippo:pippo-session-cookie 0.4.0 Source cves: CVE-2018-18240 Source advisory...

ro.pippo:pippo-demo-session (0.4.1), ro.pippo:pippo-session-cookie (0.4.1) potentially affected by CVE-2018-18240 via ro.pippo:pippo-session (0.4.1)

ro.pippo:pippo-session MAVEN version 0.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on ro.pippo:pippo-session and may be impacted: - ro.pippo:pippo-demo-session 0.4.1 - ro.pippo:pippo-session-cookie 0.4.1 Source cves: CVE-2018-18240 Source advisory...

ro.pippo:pippo-demo-session (0.4.2), ro.pippo:pippo-session-cookie (0.4.2) potentially affected by CVE-2018-18240 via ro.pippo:pippo-session (0.4.2)

ro.pippo:pippo-session MAVEN version 0.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on ro.pippo:pippo-session and may be impacted: - ro.pippo:pippo-demo-session 0.4.2 - ro.pippo:pippo-session-cookie 0.4.2 Source cves: CVE-2018-18240 Source advisory...

ro.pippo:pippo-demo-session (0.5.0), ro.pippo:pippo-session-cookie (0.5.0) potentially affected by CVE-2018-18240 via ro.pippo:pippo-session (0.5.0)

ro.pippo:pippo-session MAVEN version 0.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on ro.pippo:pippo-session and may be impacted: - ro.pippo:pippo-demo-session 0.5.0 - ro.pippo:pippo-session-cookie 0.5.0 Source cves: CVE-2018-18240 Source advisory...

ro.pippo:pippo-demo-session (0.6.0), ro.pippo:pippo-session-cookie (0.6.0) potentially affected by CVE-2018-18240 via ro.pippo:pippo-session (0.6.0)

ro.pippo:pippo-session MAVEN version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on ro.pippo:pippo-session and may be impacted: - ro.pippo:pippo-demo-session 0.6.0 - ro.pippo:pippo-session-cookie 0.6.0 Source cves: CVE-2018-18240 Source advisory...

ro.pippo:pippo-demo-session (0.6.1), ro.pippo:pippo-session-cookie (0.6.1) potentially affected by CVE-2018-18240 via ro.pippo:pippo-session (0.6.1)

ro.pippo:pippo-session MAVEN version 0.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on ro.pippo:pippo-session and may be impacted: - ro.pippo:pippo-demo-session 0.6.1 - ro.pippo:pippo-session-cookie 0.6.1 Source cves: CVE-2018-18240 Source advisory...

ro.pippo:pippo-session-cookie (0.7.0) potentially affected by CVE-2018-18240 via ro.pippo:pippo-session (0.7.0)

ro.pippo:pippo-session MAVEN version 0.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on ro.pippo:pippo-session and may be impacted: - ro.pippo:pippo-session-cookie 0.7.0 Source cves: CVE-2018-18240 Source advisory: OSV:GHSA-H892-X453-86WC...

ro.pippo:pippo-session-cookie (0.8.0) potentially affected by CVE-2018-18240 via ro.pippo:pippo-session (0.8.0)

ro.pippo:pippo-session MAVEN version 0.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on ro.pippo:pippo-session and may be impacted: - ro.pippo:pippo-session-cookie 0.8.0 Source cves: CVE-2018-18240 Source advisory: OSV:GHSA-H892-X453-86WC...

ro.pippo:pippo-session-cookie (0.9.1), ro.pippo:pippo-session-ehcache2 (0.9.1) +9 more potentially affected by CVE-2018-18240 via ro.pippo:pippo-session (0.9.1)

ro.pippo:pippo-session MAVEN version 0.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on ro.pippo:pippo-session and may be impacted: - ro.pippo:pippo-session-cookie 0.9.1 - ro.pippo:pippo-session-ehcache2 0.9.1 - ro.pippo:pippo-session-ehcache3 0.9.1...

ro.pippo:pippo-session-cookie (>=1.0.0, <=1.11.0), ro.pippo:pippo-session-ehcache2 (>=1.0.0, <=1.11.0) +9 more potentially affected by CVE-2018-18240 via ro.pippo:pippo-session (>=1.0.0, <=1.11.0)

ro.pippo:pippo-session MAVEN version =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.11.0 Source cves: CVE-2018-18240 Source advisory: OSV:GHSA-H892-X453-86WC...

CVE-2022-25172

An information disclosure vulnerability exists in the web interface session cookie functionality of InHand Networks InRouter302 V3.5.4. The session cookie misses the HttpOnly flag, making it accessible via JavaScript and thus allowing an attacker, able to perform an XSS attack, to steal the sessi...

CVE-2022-25172

An information disclosure vulnerability exists in the web interface session cookie functionality of InHand Networks InRouter302 V3.5.4. The session cookie misses the HttpOnly flag, making it accessible via JavaScript and thus allowing an attacker, able to perform an XSS attack, to steal the sessi...