https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 00:55:09 +0000 https://cve.radiocsirt.org/vuln/cnvd-2016-07340 cnvd-2016-07340 https://cve.radiocsirt.org/vuln/cnvd-2016-07340 https://cve.radiocsirt.org/vuln/euvd-2026-86504 EUVD-2026-86504 https://cve.radiocsirt.org/vuln/euvd-2026-86504 https://cve.radiocsirt.org/vuln/fkie_cve-2016-7153 <p>The HTTP/2 protocol does not consider the role of the TCP congestion window in providing information about content length, which makes it easier for remote attackers to obtain cleartext data by leveraging a web-browser configuration in which third-party cookies are sent, aka a &#34;HEIST&#34; attack.</p> <p>The HTTP/2 protocol does not consider the role of the TCP congestion window in providing information about content length, which makes it easier for remote attackers to obtain cleartext data by leveraging a web-browser configuration in which third-party cookies are sent, aka a &#34;HEIST&#34; attack.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2016-7153 https://cve.radiocsirt.org/vuln/ghsa-64x6-q8pq-xjmg <p>The HTTP/2 protocol does not consider the role of the TCP congestion window in providing information about content length, which makes it easier for remote attackers to obtain cleartext data by leveraging a web-browser configuration in which third-party cookies are sent, aka a &#34;HEIST&#34; attack.</p> <p>The HTTP/2 protocol does not consider the role of the TCP congestion window in providing information about content length, which makes it easier for remote attackers to obtain cleartext data by leveraging a web-browser configuration in which third-party cookies are sent, aka a &#34;HEIST&#34; attack.</p> https://cve.radiocsirt.org/vuln/ghsa-64x6-q8pq-xjmg https://cve.radiocsirt.org/vuln/gsd-2016-7153 gsd-2016-7153 https://cve.radiocsirt.org/vuln/gsd-2016-7153 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-7153 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: oxide-qt</p> <p>The HTTP/2 protocol does not consider the role of the TCP congestion window in providing information about content length, which makes it easier for remote attackers to obtain cleartext data by leveraging a web-browser configuration in which third-party cookies are sent, aka a &#34;HEIST&#34; attack.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: oxide-qt</p> <p>The HTTP/2 protocol does not consider the role of the TCP congestion window in providing information about content length, which makes it easier for remote attackers to obtain cleartext data by leveraging a web-browser configuration in which third-party cookies are sent, aka a &#34;HEIST&#34; attack.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-7153