Catalog

Findings

Filter the merged record by severity, source, stack, and weakness type.

SearchSeveritySourceStackWeaknessSort

Known exploited only

UnknownAsyncHttpClient: Cookie Domain attribute is not checked against the public suffix list, so a cookie can be set for co.ukCVE-2026-107280 · CVE.org · FIRST EPSS · GitHub Advisory Database · MavenEPSS 0.3%Oct 8, 2026
Medium5.3The Secure and SameSite attribute are missing in the GraphicalData web services and WebClient web app of PcVue in version 12.0.0 through 16.3.3 included.CVE-2026-1697 · arcinfo · pcvue · NIST NVDFeb 26, 2026