https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 23:22:46 +0000 https://cve.radiocsirt.org/vuln/cnvd-2015-03264 cnvd-2015-03264 https://cve.radiocsirt.org/vuln/cnvd-2015-03264 https://cve.radiocsirt.org/vuln/euvd-2026-92250 EUVD-2026-92250 https://cve.radiocsirt.org/vuln/euvd-2026-92250 https://cve.radiocsirt.org/vuln/fkie_cve-2015-3983 <p>The pcs daemon (pcsd) in PCS 0.9.137 and earlier does not include the HTTPOnly flag in a Set-Cookie header, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie. NOTE: this issue was SPLIT from CVE-2015-1848 per ADT2 due to different vulnerability types.</p> <p>The pcs daemon (pcsd) in PCS 0.9.137 and earlier does not include the HTTPOnly flag in a Set-Cookie header, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie. NOTE: this issue was SPLIT from CVE-2015-1848 per ADT2 due to different vulnerability types.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2015-3983 https://cve.radiocsirt.org/vuln/ghsa-vp3g-8qhm-pw5j <p>The pcs daemon (pcsd) in PCS 0.9.137 and earlier does not include the HTTPOnly flag in a Set-Cookie header, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie. NOTE: this issue was SPLIT from CVE-2015-1848 per ADT2 due to different vulnerability types.</p> <p>The pcs daemon (pcsd) in PCS 0.9.137 and earlier does not include the HTTPOnly flag in a Set-Cookie header, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie. NOTE: this issue was SPLIT from CVE-2015-1848 per ADT2 due to different vulnerability types.</p> https://cve.radiocsirt.org/vuln/ghsa-vp3g-8qhm-pw5j https://cve.radiocsirt.org/vuln/gsd-2015-3983 gsd-2015-3983 https://cve.radiocsirt.org/vuln/gsd-2015-3983 https://cve.radiocsirt.org/vuln/rhsa-2015:0980 <p>pcs: improper web session variable signing pcs: improper web session variable signing</p> <p>pcs: improper web session variable signing pcs: improper web session variable signing</p> https://cve.radiocsirt.org/vuln/rhsa-2015:0980 https://cve.radiocsirt.org/vuln/rhsa-2015:0990 <p>pcs: improper web session variable signing pcs: improper web session variable signing</p> <p>pcs: improper web session variable signing pcs: improper web session variable signing</p> https://cve.radiocsirt.org/vuln/rhsa-2015:0990