https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T07:37:20.019903+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2015-01238 cnvd-2015-01238 2026-10-05T07:37:20.100979+00:00 cnvd-2015-01238 https://cve.radiocsirt.org/vuln/euvd-2026-96741 EUVD-2026-96741 2026-10-05T07:37:20.101017+00:00 EUVD-2026-96741 https://cve.radiocsirt.org/vuln/fkie_cve-2014-0154 fkie_cve-2014-0154 2026-10-05T07:37:20.101032+00:00

oVirt Engine before 3.5.0 does not include the HTTPOnly flag in a Set-Cookie header for the session IDs, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie.

 https://cve.radiocsirt.org/vuln/ghsa-3mxr-r8gm-qxvv GHSA-3mxr-r8gm-qxvv 2026-10-05T07:37:20.101062+00:00

oVirt Engine before 3.5.0 does not include the HTTPOnly flag in a Set-Cookie header for the session IDs, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie.

 https://cve.radiocsirt.org/vuln/gsd-2014-0154 gsd-2014-0154 2026-10-05T07:37:20.101078+00:00 gsd-2014-0154 https://cve.radiocsirt.org/vuln/rhsa-2015:0158 RHSA-2015:0158 — Red Hat Security Advisory: Red Hat Enterprise Virtualization Manager 3.5.0 2026-10-05T07:37:20.101089+00:00

CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix ovirt-engine: cross-site request forgery (CSRF) ovirt-engine-webadmin: HttpOnly flag is not included when the session ID is set CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix