Advisories · Weakness
CWE-315.
Every Advisory and CVE whose sources give the weakness CWE-315, newest first.
- CVSS 9.1 CriticalCritical · CVSS 9+
HMS Networks Ewon Flexy with firmware before 15.0s4, Cosy+ with firmware 22.xx before 22.1s6, and Cosy+ with firmware 23.xx before 23.0s3 have weak entropy for authentication cookies, allowing an att…
- CWE-315
- CVSS 6.3 Medium
Exrick xboot getMenuList sensitive information in a cookie
- Exrick xboot
- Information disclosure
- CWE-315
- CVSS 2.3 Low
yangzongzhuan RuoYi-Vue Password login.vue sensitive information in a cookie
- yangzongzhuan RuoYi-Vue
- Information disclosure
- CWE-315
- CVSS 8.1 High
FlatPress CMS v1.3.1 1.3 was discovered to use insecure methods to store authentication data via the cookie's component.
- CWE-315
- CVSS 9.3 CriticalCritical · CVSS 9+
Cleartext Storage of Sensitive Information in Oceanic Software's ValeApp
- Oceanic Software ValeApp
- CWE-315
- CVSS 6.5 Medium
1Panel set-cookie is missing the Secure keyword
- Weak cryptography or TLS
- CWE-315
<1.9.6 · fixed in 1.9.6
GHSA-9xfw-jjq2-7v8h · CVE-2024-24768 - CVSS 3.2 Low
dbt-core's secret env vars written to package-lock.json in plaintext
- CWE-315
>=1.7.0, <1.7.3 · fixed in 1.7.3
GHSA-j4g3-3q8x-jxqp - CVSS 5.5 Medium
In WirelessHART-Gateway versions 3.0.9 a vulnerability allows to read and write sensitive data in a cookie
- Phoenix Contact WHA-GW-F2D2-0-AS- Z2-ETH
- Phoenix Contact WHA-GW-F2D2-0-AS- Z2-ETH.EIP
- CWE-315
-
Cleartext Storage of Sensitive Information in Cookies
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- CWE-315