https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-27T21:01:00.009735+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-96745 EUVD-2026-96745 2026-10-27T21:01:00.014504+00:00 EUVD-2026-96745 https://cve.radiocsirt.org/vuln/fkie_cve-2014-0174 fkie_cve-2014-0174 2026-10-27T21:01:00.014540+00:00

Cumin (aka MRG Management Console), as used in Red Hat Enterprise MRG 2.5, does not include the HTTPOnly flag in a Set-Cookie header for the session cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie.

 https://cve.radiocsirt.org/vuln/ghsa-p88m-27c7-422h GHSA-p88m-27c7-422h 2026-10-27T21:01:00.014598+00:00

Cumin (aka MRG Management Console), as used in Red Hat Enterprise MRG 2.5, does not include the HTTPOnly flag in a Set-Cookie header for the session cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie.

 https://cve.radiocsirt.org/vuln/gsd-2014-0174 gsd-2014-0174 2026-10-27T21:01:00.014615+00:00 gsd-2014-0174 https://cve.radiocsirt.org/vuln/rhsa-2014:0858 RHSA-2014:0858 — Red Hat Security Advisory: Red Hat Enterprise MRG 2.5 Messaging and Grid security update 2026-10-27T21:01:00.014626+00:00

cumin: DoS via displayed link names containing non-ASCII characters cumin: session cookies lack httponly setting