Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 16:54:13 +0000 cnvd-2015-01238 https://cve.radiocsirt.org/vuln/cnvd-2015-01238 cnvd-2015-01238 https://cve.radiocsirt.org/vuln/cnvd-2015-01238 EUVD-2026-96741 https://cve.radiocsirt.org/vuln/euvd-2026-96741 EUVD-2026-96741 https://cve.radiocsirt.org/vuln/euvd-2026-96741 fkie_cve-2014-0154 https://cve.radiocsirt.org/vuln/fkie_cve-2014-0154 <p>oVirt Engine before 3.5.0 does not include the HTTPOnly flag in a Set-Cookie header for the session IDs, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie.</p> <p>oVirt Engine before 3.5.0 does not include the HTTPOnly flag in a Set-Cookie header for the session IDs, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2014-0154 GHSA-3mxr-r8gm-qxvv https://cve.radiocsirt.org/vuln/ghsa-3mxr-r8gm-qxvv <p>oVirt Engine before 3.5.0 does not include the HTTPOnly flag in a Set-Cookie header for the session IDs, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie.</p> <p>oVirt Engine before 3.5.0 does not include the HTTPOnly flag in a Set-Cookie header for the session IDs, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie.</p> https://cve.radiocsirt.org/vuln/ghsa-3mxr-r8gm-qxvv gsd-2014-0154 https://cve.radiocsirt.org/vuln/gsd-2014-0154 gsd-2014-0154 https://cve.radiocsirt.org/vuln/gsd-2014-0154 RHSA-2015:0158 — Red Hat Security Advisory: Red Hat Enterprise Virtualization Manager 3.5.0 https://cve.radiocsirt.org/vuln/rhsa-2015:0158 <p>CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix ovirt-engine: cross-site request forgery (CSRF) ovirt-engine-webadmin: HttpOnly flag is not included when the session ID is set CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix</p> <p>CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix ovirt-engine: cross-site request forgery (CSRF) ovirt-engine-webadmin: HttpOnly flag is not included when the session ID is set CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix</p> https://cve.radiocsirt.org/vuln/rhsa-2015:0158