#cwe-1004

共收录 9 条相关情报。

漏洞预警2026-10-31 发布INFO

WebDyne versions from 2.014 before 3.022 for Perl issue session cookies without the Secure, HttpOnly and SameSite attributes. WebDyne::Session sets its session cookie with only...

CVE-2026-78188

WebDyne versions from 2.014 before 3.022 for Perl issue session cookies without the Secure, HttpOnly and SameSite attrib

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-1004 #cwe-1275 #cwe-614

安全公告2026-10-19 发布INFO

AIOHTTP: Secure attribute not enforced for shared cookie

CVE-2026-111063

### Summary The Secure attribute was not being enforced for the shared cookie. ### Impact It may be possible to send

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #pip #cwe-311 #cwe-1004 #severity:low

漏洞预警2026-09-15 发布INFO

Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, the default configuration initializes the iPlanetDirectoryPro SSO cookie with HttpOnly disable...

CVE-2026-53660

Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, the default configuration initializes

历史摘要 · 未重新核验 · NVD

#cve #cwe-1004 #cwe-1188 #cwe-1275

漏洞预警2026-08-31 发布INFO

A security vulnerability has been detected in sambitraj Student-Management-System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. The impacted element is the function session_st...

CVE-2026-82697

A security vulnerability has been detected in sambitraj Student-Management-System up to 56ba287f2e9031523ccb4244cb6e3fe5

历史摘要 · 未重新核验 · NVD

#cve #cwe-732 #cwe-1004

漏洞预警2026-08-25 发布INFO

HCL Hive is affected by multiple infrastructure and network configuration vulnerabilities, which could lead to unauthorized lateral movement, container breakout, and sensitive d...

CVE-2026-21754

HCL Hive is affected by multiple infrastructure and network configuration vulnerabilities, which could lead to unauthori

历史摘要 · 未重新核验 · NVD

#cve #cwe-1004

安全公告2026-08-14 发布INFO

OpenAM Insecure SSO Cookie Initialization

CVE-2026-53660

## Summary **Description** An Insecure Default Initialization of Resource (CWE-1188) issue in the OpenAM default config

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #maven #cwe-1004 #cwe-1188 #cwe-1275 #severity:high

漏洞预警2026-06-29 发布INFO

Pinpoint through version 3.1.0 contains an insecure session management vulnerability that allows attackers to access the pinpointJwt session cookie due to missing HttpOnly and S...

CVE-2026-57948

Pinpoint through version 3.1.0 contains an insecure session management vulnerability that allows attackers to access the

历史摘要 · 未重新核验 · NVD

#cve #cwe-614 #cwe-1004

漏洞预警2026-06-11 发布INFO

A vulnerability was determined in TwiN gatus 5.36.0. Impacted is the function setSessionCookie of the file security/oidc.go of the component OIDC Session Cookie Handler. Executi...

CVE-2026-11956

A vulnerability was determined in TwiN gatus 5.36.0. Impacted is the function setSessionCookie of the file security/oidc

历史摘要 · 未重新核验 · NVD

#cve #cwe-614 #cwe-1004

漏洞预警2026-05-07 发布INFO

Budibase is an open-source low-code platform. Prior to version 3.35.10, the budibase:auth cookie containing the JWT session token is set with httpOnly: false at packages/backend...

CVE-2026-42239

Budibase is an open-source low-code platform. Prior to version 3.35.10, the budibase:auth cookie containing the JWT sess

历史摘要 · 未重新核验 · NVD

#cve #cwe-1004