СИТУАЦИОННЫЙ ОБЗОР
Все уязвимости
Поиск по CVE, продуктам и источникам. Условия фильтра сохраняются в ссылке.
Лента уязвимостей
30| УЯЗВИМОСТЬ / ПРОДУКТ | ПРИОРИТЕТ | CVSS | EPSS | СИГНАЛЫ | ОПУБЛИКОВАНА | Карточка |
|---|---|---|---|---|---|---|
| CVE-2026-78188 WebDyne versions from 2.014 before 3.022 for Perl issue session cookies without the Secure, HttpOnly and SameSite attributes Продукт уточняется | Информационный | — | 0,13 % | 31.10.2026 | ||
| CVE-2026-115519 Sensitive cookies without 'Secure' and 'HttpOnly' attributes in KNIME Business Hub KNIME / KNIME Business Hub | Низкий | 2.1 | 0,19 % | 22.10.2026 | ||
| CVE-2026-53660 OpenAM Insecure SSO Cookie Initialization OpenIdentityPlatform / OpenAM · org.openidentityplatform.openam:openam-core | Высокий | 7.4 | 0,41 % | Патч | 15.09.2026 | |
| CVE-2026-39338 ChurchCRM has Blind XSS via Global Search – Administrative Cookie Session Exfiltration ChurchCRM / CRM · churchcrm / churchcrm | Критический | 8.6 | 0,23 % | PoC | 07.04.2026 | |
| CVE-2026-35575 ChurchCRM has Stored XSS in Group Name ChurchCRM / CRM · churchcrm / churchcrm | Высокий | 8.0 | 0,25 % | 07.04.2026 | ||
| CVE-2026-111063 AIOHTTP: Secure attribute not enforced for shared cookie aio-libs / aiohttp · aiohttp | Средний | 6.3 | 0,23 % | 19.10.2026 | ||
| CVE-2026-82697 sambitraj Student-Management-System session_start cookie httponly flag sambitraj / Student-Management-System | Высокий | 6.3 | 0,46 % | PoC | 31.08.2026 | |
| CVE-2026-21754 HCL Hive is affected by multiple security vulnerabilities. HCL Software / Hive | Средний | 5.4 | 0,24 % | 25.08.2026 | ||
| CVE-2026-57948 Pinpoint - Insecure Session Cookie Attributes in pinpointJwt pinpoint-apm / pinpoint | Критический | 7.6 | 0,16 % | PoC | 29.06.2026 | |
| CVE-2026-25733 Rucio WebUI Vulnerable to Stored Cross-site Scripting (XSS) through Custom Rule Function rucio / rucio · rucio-webui | Критический | 7.3 | 0,31 % | PoC | 25.02.2026 | |
| CVE-2026-25136 Rucio WebUI has a Reflected Cross-site Scripting Vulnerability rucio / rucio · rucio-webui | Высокий | 8.1 | 0,31 % | 25.02.2026 | ||
| CVE-2026-25736 Rucio WebUI has a Stored Cross-site Scripting (XSS) Vulnerability in its Custom RSE Attribute rucio / rucio · rucio-webui | Высокий | 6.1 | 0,34 % | PoC | 25.02.2026 | |
| CVE-2026-25734 Rucio WebUI has Stored Cross-site Scripting (XSS) in RSE Metadata rucio / rucio · rucio-webui | Высокий | 6.1 | 0,34 % | PoC | 25.02.2026 | |
| CVE-2026-25735 Rucio WebUI has a Stored Cross-site Scripting (XSS) vulnerability its Identity Name rucio / rucio · rucio-webui | Высокий | 6.1 | 0,34 % | PoC | 25.02.2026 | |
| CVE-2026-11956 TwiN gatus OIDC Session Cookie oidc.go setSessionCookie missing secure attribute TwiN / gatus | Высокий | 6.3 | 0,19 % | PoC | 11.06.2026 | |
| CVE-2026-42239 Budibase auth session cookies are set with httpOnly:false — any XSS can lead to full account takeover Budibase / budibase · @budibase/backend-core | Критический | 8.1 | 0,28 % | PoC | 07.05.2026 | |
| CVE-2026-0696 Session Cookies Missing HttpOnly Attribute ConnectWise / PSA | Средний | 6.5 | 0,39 % | 16.01.2026 | ||
| CVE-2026-22081 Cookie without HTTPOnly Flag Vulnerability in Tenda Wireless Routers Tenda / 300Mbps Wireless Router F3 and N300 Easy Setup Router | Высокий | 8.8 | 0,38 % | 09.01.2026 | ||
| CVE-2025-27223 TRUfusion Enterprise through 7.10.4.0 exposes the encrypted COOKIEID as an authentication mechanism n/a / n/a | Высокий | 7.5 | 2,2 % | 27.10.2025 | ||
| CVE-2025-12031 HTTP Security Misconfiguration - Lacking Secure and HTTPOnly Attribute Azure Access Technology / BLU-IC2 · Azure Access Technology / BLU-IC4 | Средний | 5.3 | 0,21 % | 21.10.2025 | ||
| CVE-2025-42909 Security Misconfiguration vulnerability in SAP Cloud Appliance Library Appliances SAP_SE / SAP Cloud Appliance Library Appliances | Низкий | 3.0 | 0,24 % | 14.10.2025 | ||
| CVE-2025-57424 A stored cross-site scripting (XSS) vulnerability exists in the MyCourts v3 application within the L n/a / n/a | Высокий | 7.3 | 0,27 % | 29.09.2025 | ||
| CVE-2025-53757 Insecure Cookie Flags Vulnerability in Digisol DG-GR6821AC Router Digisol / XPON ONU Wi-Fi Router (DG-GR6821AC) | Высокий | 8.7 | 0,32 % | 16.07.2025 | ||
| CVE-2025-27453 CVE-2025-27453 Endress+Hauser / Endress+Hauser MEAC300-FNADE4 | Средний | 5.3 | 0,43 % | 03.07.2025 | ||
| CVE-2025-49189 Cookie missing HttpOnly flag SICK AG / SICK Media Server | Средний | 5.3 | 0,3 % | 12.06.2025 | ||
| CVE-2025-47289 Stored XSS in CE Phoenix Cart Testimonials Allows Account Takeover if Missing HttpOnly Flag CE-PhoenixCart / PhoenixCart | Высокий | 6.3 | 0,26 % | PoC | 02.06.2025 | |
| CVE-2025-26844 An issue was discovered in Znuny through 7.1.3. A cookie is set without the HttpOnly flag. n/a / n/a | Критический | 9.8 | 0,43 % | 08.05.2025 | ||
| CVE-2025-24318 Dario Health USB-C Blood Glucose Monitoring System Starter Kit Android Application Sensitive Cookie Without 'HttpOnly' Flag Dario Health / Dario Application Database and Internet-based Server Infrastructure | Средний | 5.9 | 0,35 % | 28.02.2025 | ||
| CVE-2025-0479 Security Misconfiguration Vulnerability in CP Plus Router CP Plus / CP-XR-DE21-S Router | Высокий | 8.6 | 0,46 % | 20.01.2025 | ||
| CVE-2024-47833 Session Cookie without Secure and HTTPOnly flags in taipy Avaiga / taipy · avaiga / taipy | Средний | 6.3 | 0,25 % | 09.10.2024 |
Информация справочная. Применимость и автоматические рекомендации проверяйте по первичному бюллетеню.