https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 18:21:38 +0000 https://cve.radiocsirt.org/vuln/cnvd-2015-03258 cnvd-2015-03258 https://cve.radiocsirt.org/vuln/cnvd-2015-03258 https://cve.radiocsirt.org/vuln/euvd-2026-90600 EUVD-2026-90600 https://cve.radiocsirt.org/vuln/euvd-2026-90600 https://cve.radiocsirt.org/vuln/fkie_cve-2015-1848 <p>The pcs daemon (pcsd) in PCS 0.9.137 and earlier does not set the secure flag for a cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session. NOTE: this issue was SPLIT per ADT2 due to different vulnerability types. CVE-2015-3983 is for the issue with not setting the HTTPOnly flag.</p> <p>The pcs daemon (pcsd) in PCS 0.9.137 and earlier does not set the secure flag for a cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session. NOTE: this issue was SPLIT per ADT2 due to different vulnerability types. CVE-2015-3983 is for the issue with not setting the HTTPOnly flag.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2015-1848 https://cve.radiocsirt.org/vuln/ghsa-wqr4-6q63-33fp <p>The pcs daemon (pcsd) in PCS 0.9.137 and earlier does not set the secure flag for a cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session. NOTE: this issue was SPLIT per ADT2 due to different vulnerability types. CVE-2015-3983 is for the issue with not setting the HTTPOnly flag.</p> <p>The pcs daemon (pcsd) in PCS 0.9.137 and earlier does not set the secure flag for a cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session. NOTE: this issue was SPLIT per ADT2 due to different vulnerability types. CVE-2015-3983 is for the issue with not setting the HTTPOnly flag.</p> https://cve.radiocsirt.org/vuln/ghsa-wqr4-6q63-33fp https://cve.radiocsirt.org/vuln/gsd-2015-1848 gsd-2015-1848 https://cve.radiocsirt.org/vuln/gsd-2015-1848 https://cve.radiocsirt.org/vuln/rhsa-2015:0980 <p>pcs: improper web session variable signing pcs: improper web session variable signing</p> <p>pcs: improper web session variable signing pcs: improper web session variable signing</p> https://cve.radiocsirt.org/vuln/rhsa-2015:0980 https://cve.radiocsirt.org/vuln/rhsa-2015:0990 <p>pcs: improper web session variable signing pcs: improper web session variable signing</p> <p>pcs: improper web session variable signing pcs: improper web session variable signing</p> https://cve.radiocsirt.org/vuln/rhsa-2015:0990