Все уязвимости

Apache Airflow: JWT cookie missing Secure flag in JWTRefreshMiddleware behind HTTPS-terminating proxy

WebDyne versions from 2.014 before 3.022 for Perl issue session cookies without the Secure, HttpOnly and SameSite attributes

Sensitive cookies without 'Secure' and 'HttpOnly' attributes in KNIME Business Hub

Eaton Intelligent Power Protector (IPP) uses an insecure cookie configuration, which could allow a n

IBM Maximo Application Suite was vulnerable to because Cookie ltpatoken2_ was not set with secure flag

HCL BigFix Service Management is affected by multiple security vulnerabilities.

HCL iControl is affected by a Missing Secure Attribute vulnerability

Temporal UI Server may set OAuth credential cookies without Secure behind a TLS-terminating reverse proxy

IBM MAS uses axios-1.15.2, protobufjs-8.0.1 and undici-7.26 which is vulnerable to multiple CVEs, and contains vulnerabilities related to missing Secure attribute on mas-redirect-uri cookie and weak HMAC Session Secret

Nameless cookies shadow secure cookies

nebula-mesh: Session and OIDC state cookies lack the Secure attribute

HCL MyCloud was affected with Cookie Attribute Path Not Set

NocoDB: Refresh Token Cookie Set Without `Secure` and `SameSite` Flags

HCL Aftermarket EPC is vulnerable to attack as cookie appears to contain a session token, which may

Pinpoint - Insecure Session Cookie Attributes in pinpointJwt

boruta-server sent sensitive session cookies without the Secure attribute

TwiN gatus OIDC Session Cookie oidc.go setSessionCookie missing secure attribute

HAX CMS Missing Secure Flag on Cookie

HCL iControl was affected by Missing Cookie Attributes vulnerability.

Apache Shiro: Shiro's native session and rememberMe cookies do not have secure flag set by default

Use of unsecure cookies for GraphicalData web service and WebClient web app

In JetBrains Datalore before 2026.1 session hijacking was possible due to missing secure attribute f

Kentico Xperience <= 13.0.164 Cookie Security Configuration

IBM Jazz for Service Management is vulnerable to "filter" cookie not sent over SSL

HCL Unica Platform is affected by a Cookie without HTTPOnly Flag Set vulnerability

HCL AION is susceptible to Missing Secure Attribute in Encrypted Session (SSL) Cookie vulnerability

IBM Jazz for Service Management information disclosure

IBM Datacap information disclosure

Insecure Cookie Flags Vulnerability in Digisol DG-GR6821AC Router

CVE-2025-27450