https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 14 Oct 2026 18:36:35 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-43249 EUVD-2026-43249 https://cve.radiocsirt.org/vuln/euvd-2026-43249 https://cve.radiocsirt.org/vuln/fkie_cve-2020-15910 <p>SolarWinds N-Central version 12.3 GA and lower does not set the JSESSIONID attribute to HTTPOnly. This makes it possible to influence the cookie with javascript. An attacker could send the user to a prepared webpage or by influencing JavaScript to the extract the JESSIONID. This could then be forwarded to the attacker.</p> <p>SolarWinds N-Central version 12.3 GA and lower does not set the JSESSIONID attribute to HTTPOnly. This makes it possible to influence the cookie with javascript. An attacker could send the user to a prepared webpage or by influencing JavaScript to the extract the JESSIONID. This could then be forwarded to the attacker.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-15910 https://cve.radiocsirt.org/vuln/ghsa-ppw4-rf73-v4fg <p>SolarWinds N-Central version 12.3 GA and lower does not set the JSESSIONID attribute to HTTPOnly. This makes it possible to influence the cookie with javascript. An attacker could send the user to a prepared webpage or by influencing JavaScript to the extract the JESSIONID. This could then be forwarded to the attacker.</p> <p>SolarWinds N-Central version 12.3 GA and lower does not set the JSESSIONID attribute to HTTPOnly. This makes it possible to influence the cookie with javascript. An attacker could send the user to a prepared webpage or by influencing JavaScript to the extract the JESSIONID. This could then be forwarded to the attacker.</p> https://cve.radiocsirt.org/vuln/ghsa-ppw4-rf73-v4fg https://cve.radiocsirt.org/vuln/gsd-2020-15910 gsd-2020-15910 https://cve.radiocsirt.org/vuln/gsd-2020-15910