Weakness Types (CWE) | 9mmPterodactyl

CWE-284 (2634) CWE-79 (1821) CWE-416 (1289) CWE-862 (1175) CWE-89 (1097) CWE-22 (1023) CWE-125 (880) CWE-200 (847) CWE-306 (837) CWE-122 (830) CWE-20 (795) CWE-78 (710) CWE-918 (689) CWE-787 (681) CWE-94 (641) CWE-863 (617) CWE-74 (600) CWE-639 (541) CWE-400 (530) CWE-269 (501) CWE-119 (494) CWE-502 (468) CWE-770 (440) CWE-287 (431) CWE-121 (406) CWE-77 (373) CWE-190 (367) CWE-362 (323) CWE-352 (276) CWE-285 (243)

CWE-614

10 CVEs View on MITRE →

CVE	Severity	CVSS	EPSS	Published	Description	Flags
`CVE-2026-53661`	high	8.8	0.0026	2026-06-11	Boruta is a standalone authorization server that aims to implement OAuth 2.0 and Openid Connect up t
`CVE-2026-57948`	high	7.6	0.0016	2026-06-29	Pinpoint through version 3.1.0 contains an insecure session management vulnerability that allows att
`CVE-2026-22617`	high	7.4	0.0017	2026-04-16	Eaton Intelligent Power Protector (IPP) uses an insecure cookie configuration, which could allow a n
`CVE-2026-11956`	medium	6.3	0.0019	2026-06-11	A vulnerability was determined in TwiN gatus 5.36.0. Impacted is the function setSessionCookie of th
`CVE-2026-48058`	medium	4.6	0.0025	2026-07-28	nebula-mesh is a self-hosted control plane for Slack Nebula mesh virtual private network. Prior to v
`CVE-2026-4820`	medium	4.3	0.0012	2026-04-01	IBM Maximo Application Suite 9.1, 9.0, 8.11, and 8.10 does not set the secure attribute on authoriza
`CVE-2026-15656`	medium	4.3	0.0019	2026-08-05	IBM Maximo Application Suite 9.2, 9.1, and 9.0 does not set the secure attribute on authorization to
`CVE-2026-56581`	low	2.6	0.0015	2026-07-21	HCL MyCloud was affected with Cookie Attribute Path Not Set. It may increase the risk of unauthorize
`CVE-2026-65655`	low	2.3	0.0037	2026-08-11	When OAuth authentication is enabled and browser-facing TLS terminates at a reverse proxy that forwa
`CVE-2026-115519`	low	2.1	0.0019	2026-10-22	Missing security attributes on sensitive cookies in KNIME Business Hub before version 1.19.0 allow a