Catalog

Findings

Filter the merged record by severity, source, stack, and weakness type.

SearchSeveritySourceStackWeaknessSort

Known exploited only

High7.4Eaton Intelligent Power Protector (IPP) uses an insecure cookie configuration, which could allow a network‑based attacker to intercept the cookie and exploit it throug…CVE-2026-22617 · eaton · intelligent power protector · CVE.org · NIST NVDApr 16, 2026
Medium4.3IBM Maximo Application Suite 9.1, 9.0, 8.11, and 8.10 does not set the secure attribute on authorization tokens or session cookies.CVE-2026-4820 · ibm · maximo application suite · CVE.org · NIST NVD · IBMApr 1, 2026
Medium5.7In JetBrains Datalore before 2026.1 session hijacking was possible due to missing secure attribute for cookie settingsCVE-2026-32745 · jetbrains · datalore · CVE.org · NIST NVDMar 13, 2026
Medium5.3The Secure and SameSite attribute are missing in the GraphicalData web services and WebClient web app of PcVue in version 12.0.0 through 16.3.3 included.CVE-2026-1697 · arcinfo · pcvue · CVE.org · NIST NVDFeb 26, 2026