agentprime: CWE-614

CVE-2026-78188: WebDyne versions from 2.014 before 3.022 for Perl issue session cookies without the Secure, HttpOnly and SameSite attributes

Sat, 31 Oct 2026 14:33:37 GMT

Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-115519: Sensitive cookies without 'Secure' and 'HttpOnly' attributes in KNIME Business Hub

Thu, 22 Oct 2026 18:18:33 GMT

CVSS 2.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-56599: HCL BigFix Service Management is affected by multiple security vulnerabilities.

Thu, 01 Oct 2026 15:00:00 GMT

CVSS 2.2 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-66249: HCL iControl is affected by a Missing Secure Attribute vulnerability

Thu, 01 Oct 2026 13:29:21 GMT

CVSS 3.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-65655: Temporal UI Server may set OAuth credential cookies without Secure behind a TLS-terminating reverse proxy

Tue, 11 Aug 2026 19:29:39 GMT

CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-15656: IBM MAS uses axios-1.15.2, protobufjs-8.0.1 and undici-7.26 which is vulnerable to multiple CVEs, and contains vulnerabilities related to missing Secure attribute on mas-redirect-uri cookie and weak…

Wed, 05 Aug 2026 16:05:53 GMT

CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-56581: HCL MyCloud was affected with Cookie Attribute Path Not Set

Tue, 21 Jul 2026 17:37:26 GMT

CVSS 2.6 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-23572: HCLSoftware Aftermarket EPC: HCL Aftermarket EPC is vulnerable to attack as cookie appears to contain a session token…

Fri, 17 Jul 2026 13:51:11 GMT

CVSS 4.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-57948: Pinpoint - Insecure Session Cookie Attributes in pinpointJwt

Mon, 29 Jun 2026 17:19:11 GMT

CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-53661: boruta-server sent sensitive session cookies without the Secure attribute

Thu, 11 Jun 2026 12:58:08 GMT

CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-11956: TwiN gatus OIDC Session Cookie oidc.go setSessionCookie missing secure attribute

Thu, 11 Jun 2026 11:30:12 GMT

CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

nebula-mesh: Session and OIDC state cookies lack the Secure attribute

Wed, 10 Jun 2026 18:49:22 GMT

github.com/juev/nebula-mesh <0.3.2, fixed in 0.3.2. CVSS 4.6 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-46398: HAX CMS Missing Secure Flag on Cookie

Fri, 05 Jun 2026 19:13:47 GMT

CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-52608: HCL iControl was affected by Missing Cookie Attributes vulnerability.

Thu, 04 Jun 2026 11:49:16 GMT

CVSS 3.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.

Apache Airflow's `JWTRefreshMiddleware` set the JWT auth cookie without the `Secure` flag, so deployments running the Airflow API server behind an HTTPS-terminating reverse proxy (e.g. nginx / Envo...

Mon, 01 Jun 2026 09:16:18 GMT

apache-airflow >=3.0.0, <3.2.2, fixed in 3.2.2. CVSS 5.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Apache Shiro sends sensitive cookies in HTTPS session without 'Secure' attribute

Tue, 26 May 2026 13:30:50 GMT

org.apache.shiro:shiro-web >=1.0.0-incubating, <2.2.0 || >=3.0.0-alpha-1, <3.0.0-alpha-2, fixed in 2.2.0, 3.0.0-alpha-2. CVSS 5.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

NocoDB: Refresh Token Cookie Set Without `secure` and `sameSite` Flags

Thu, 21 May 2026 20:35:24 GMT

nocodb <=0.301.3, no fixed version yet. CVSS 5.4 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-22617: Eaton IPP Software: Eaton Intelligent Power Protector (IPP) uses an insecure cookie configuration…

Thu, 16 Apr 2026 05:02:07 GMT

CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-4820: IBM Maximo Application Suite was vulnerable to because Cookie ltpatoken2_ was not set with secure flag

Wed, 01 Apr 2026 20:54:09 GMT

CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

@grackle-ai/server has a Missing Secure Flag on Session Cookie

Wed, 25 Mar 2026 17:32:39 GMT

@grackle-ai/server <0.70.5, fixed in 0.70.5. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-32745: JetBrains Datalore: In JetBrains Datalore before 2026.1 session hijacking was possible due to missing secure…

Fri, 13 Mar 2026 15:50:04 GMT

CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-1697: Use of unsecure cookies for GraphicalData web service and WebClient web app

Thu, 26 Feb 2026 07:57:46 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-58317: Kentico Xperience <= 13.0.164 Cookie Security Configuration

Thu, 18 Dec 2025 19:53:37 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-36249: IBM Jazz for Service Management is vulnerable to "filter" cookie not sent over SSL

Fri, 31 Oct 2025 13:05:32 GMT

CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-52614: HCL Unica Platform is affected by a Cookie without HTTPOnly Flag Set vulnerability

Sun, 12 Oct 2025 07:52:47 GMT

CVSS 3.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-52632: HCL AION is susceptible to Missing Secure Attribute in Encrypted Session (SSL) Cookie vulnerability

Fri, 10 Oct 2025 10:06:04 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-36011: IBM Jazz for Service Management information disclosure

Tue, 09 Sep 2025 19:32:16 GMT

CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-8037: Nameless cookies shadow secure cookies

Tue, 22 Jul 2025 20:49:25 GMT

CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-53757: Insecure Cookie Flags Vulnerability in Digisol DG-GR6821AC Router

Wed, 16 Jul 2025 11:25:05 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-27450: CVE-2025-27450

Thu, 03 Jul 2025 11:26:33 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-36026: IBM Datacap information disclosure

Sat, 28 Jun 2025 00:49:54 GMT

CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-10718: Cookie without Secure attribute in phpipam/phpipam

Thu, 20 Mar 2025 10:10:07 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-24897: Misskey CSRF vulnerability due to insecure configuration of authentication cookie attributes

Tue, 11 Feb 2025 15:20:29 GMT

CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.

General OpenMRS Security Advisory, January 2025: Penetration Testing Results and Patches

Thu, 30 Jan 2025 17:50:52 GMT

org.openmrs.module:addresshierarchy <2.19.0, fixed in 2.19.0. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2025-24390: Missing Cookie Flags

Mon, 27 Jan 2025 05:59:20 GMT

CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-28770: IBM Security Directory Integrator information disclosure

Mon, 27 Jan 2025 01:12:44 GMT

CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-28771: IBM Security Directory Integrator information disclosure

Mon, 27 Jan 2025 01:12:15 GMT

CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-0479: Security Misconfiguration Vulnerability in CP Plus Router

Mon, 20 Jan 2025 11:37:13 GMT

CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-55897: IBM PowerHA SystemMirror for i information disclosure

Fri, 03 Jan 2025 22:28:38 GMT

CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-30142: HCL BigFix Compliance is affected by a missing secure flag on a cookie

Thu, 07 Nov 2024 08:58:42 GMT

CVSS 3.8 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-43180: IBM Concert information disclosure

Fri, 13 Sep 2024 01:24:07 GMT

CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

Taipy has a Session Cookie without Secure and HTTPOnly flags

Tue, 27 Aug 2024 19:50:59 GMT

taipy <4.0.0, fixed in 4.0.0. CVSS 6.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

usememos/memos missing Secure cookie attribute in github.com/usememos/memos

Wed, 21 Aug 2024 16:03:59 GMT

github.com/usememos/memos <0.9.0, fixed in 0.9.0. CVSS 4.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Insecure cookies in Openshift Origin in github.com/openshift/origin

Wed, 21 Aug 2024 15:11:33 GMT

github.com/openshift/origin <1.0.0, fixed in 1.0.0. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2024-41684: Cookie Without Secure Flag Set Vulnerability

Fri, 26 Jul 2024 11:34:53 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-39734: IBM Datacap Navigator information disclosure

Sun, 14 Jul 2024 12:38:03 GMT

CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2023-33860: IBM Security ReaQta information disclosure

Wed, 10 Jul 2024 15:28:42 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-35211: Siemens SINEC Traffic Analyzer: A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All…

Tue, 11 Jun 2024 11:15:53 GMT

CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-2493: Session Hijacking Vulnerability in Hitachi Ops Center Analyzer

Tue, 23 Apr 2024 05:35:57 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2023-46179: IBM Secure Proxy information disclosure

Fri, 15 Mar 2024 15:08:07 GMT

CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.