Advisories · Weakness
CWE-784.
Every Advisory and CVE whose sources give the weakness CWE-784, newest first.
- CVSS 8.7 High
Weintek cMT3092X Reliance on Cookies without Validation and Integrity Checking in a Security Decision
- Weintek cMT3092X firmware
- Weintek EasyWeb
- CWE-784
- CVSS 8.1 High
CubeCart: Pre-Authenticated Password Reset Link Poisoning via HTTP Host Header
- cubecart v6
- Open redirect
- CWE-20
- CVSS 6.5 Medium
WP 2FA with Telegram <= 3.0 - Two-Factor Authentication Bypass
- dueclic AuthPress
- CWE-784
- CVSS 9.8 CriticalCritical · CVSS 9+
Authentication Bypass in TMT's Lockcell
- TMT Lockcell
- CWE-784
- CVSS 3.9 Low
Landis+Gyr E850 (ZMQ200): All versions of Landis+Gyr E850 (ZMQ200) are vulnerable to CWE-784: Reliance on Cookies…
- Landis+Gyr E850 (ZMQ200)
- CWE-784
- CVSS 7.5 High
Rack allows Percent-encoded cookies to overwrite existing prefixed cookie names
- CWE-20
- CWE-784
<2.1.4 || >=2.2.0, <2.2.3 · fixed in 2.1.4, 2.2.3
GHSA-j6w9-fv6q-3q52 · CVE-2020-8184