https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T20:57:46.637844+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2016-07341 cnvd-2016-07341 2026-10-02T20:57:46.649841+00:00 cnvd-2016-07341 https://cve.radiocsirt.org/vuln/euvd-2026-86478 EUVD-2026-86478 2026-10-02T20:57:46.649881+00:00 EUVD-2026-86478 https://cve.radiocsirt.org/vuln/fkie_cve-2016-7152 fkie_cve-2016-7152 2026-10-02T20:57:46.649896+00:00

The HTTPS protocol does not consider the role of the TCP congestion window in providing information about content length, which makes it easier for remote attackers to obtain cleartext data by leveraging a web-browser configuration in which third-party cookies are sent, aka a "HEIST" attack.

 https://cve.radiocsirt.org/vuln/ghsa-gj46-mfx7-2vwx GHSA-gj46-mfx7-2vwx 2026-10-02T20:57:46.649928+00:00

The HTTPS protocol does not consider the role of the TCP congestion window in providing information about content length, which makes it easier for remote attackers to obtain cleartext data by leveraging a web-browser configuration in which third-party cookies are sent, aka a "HEIST" attack.

 https://cve.radiocsirt.org/vuln/gsd-2016-7152 gsd-2016-7152 2026-10-02T20:57:46.649945+00:00 gsd-2016-7152 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-7152 UBUNTU-CVE-2016-7152 2026-10-02T20:57:46.649956+00:00

Affected: Ubuntu:16.04:LTS: oxide-qt

The HTTPS protocol does not consider the role of the TCP congestion window in providing information about content length, which makes it easier for remote attackers to obtain cleartext data by leveraging a web-browser configuration in which third-party cookies are sent, aka a "HEIST" attack.