Sensitive Cookie in HTTPS Session Without 'Secure' Attribute

Every one of the 66 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in ledgersmb/ledgersmbCVE-2021-3882ledgersmb · CVSS 5.9 · 1.1% likely
2. ITarian - Session cookie not protected by HttpOnly flagCVE-2022-25151ITarian · CVSS 7.5 · 0.8% likely
3. Synology Router Manager (SRM) before 1.2.4-8081 does not set the Secure flag for the session cookie in an HTTPS session, which makes it easier for remote attackers to capture this…CVE-2020-27651Synology · CVSS 5.8 · 0.8% likely
4. In Openshift Origin 3 the cookies being set in console have no 'secure', 'HttpOnly' attributes.CVE-2015-3207Openshift Origin · 0.8% likely
5. Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in ikus060/rdiffwebCVE-2022-3174ikus060 · CVSS 7.5 · 0.7% likely
6. Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in ikus060/minarcaCVE-2022-3251ikus060 · CVSS 7.5 · 0.7% likely
7. A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.142.5-22), Desigo PXC3 (All versions < V01.21.142.4-18), Desigo PXC4 (All versions < V02.20.142.10-10884)…CVE-2022-24045Siemens · 0.6% likely
8. Macaron csrf csrf.go missing secure attributeCVE-2018-25060Macaron · CVSS 3.7 · 0.6% likely
9. Synology DiskStation Manager (DSM) before 6.2.3-25426-2 does not set the Secure flag for the session cookie in an HTTPS session, which makes it easier for remote attackers to capt…CVE-2020-27650Synology · CVSS 5.8 · 0.6% likely
10. HCL BigFix WebUI Cookie missing attributesCVE-2021-27764HCL Software · CVSS 7.4 · 0.6% likely
11. Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in ikus060/rdiffwebCVE-2022-3250ikus060 · CVSS 4.9 · 0.5% likely
12. Missing HtppOnly and Secure flagsCVE-2020-29024Secomea · CVSS 5.3 · 0.5% likely
13. Missing Secure Flag From SSL CookieCVE-2021-35236SolarWinds · CVSS 3.1 · 0.5% likely
14. Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in pyload/pyloadCVE-2023-0055pyload · CVSS 3.1 · 0.5% likely
15. Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in thorsten/phpmyfaqCVE-2022-4409thorsten · CVSS 6.3 · 0.5% likely
16. Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in usememos/memosCVE-2022-4683usememos · CVSS 4.3 · 0.4% likely
17. SourceCodester Engineers Online Portal missing secure attributeCVE-2024-0349SourceCodester · CVSS 3.7 · 0.4% likely
18. Temporal UI Server may set OAuth credential cookies without Secure behind a TLS-terminating reverse proxyCVE-2026-65655Temporal Technologies, Inc. · CVSS 2.3 · 0.4% likely
19. Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in System Configuration Tool (SCT)CVE-2022-21940Johnson Controls · CVSS 7.5 · 0.4% likely
20. Apache Airflow: JWT cookie missing Secure flag in JWTRefreshMiddleware behind HTTPS-terminating proxyCVE-2026-41017Apache Software Foundation · CVSS 5.9 · 0.4% likely
21. Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in instantsoft/icms2CVE-2023-4654instantsoft · CVSS 2.6 · 0.3% likely
22. Cookie without Secure attribute in phpipam/phpipamCVE-2024-10718phpipam · CVSS 5.3 · 0.3% likely
23. Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in thorsten/phpmyfaqCVE-2023-5866thorsten · CVSS 6.3 · 0.3% likely
24. Insecure Cookie Flags Vulnerability in Digisol DG-GR6821AC RouterCVE-2025-53757Digisol · CVSS 8.7 · 0.3% likely
25. Session Hijacking Vulnerability in Hitachi Ops Center AnalyzerCVE-2024-2493Hitachi · CVSS 7.5 · 0.3% likely
26. CVE-2025-27450Endress+Hauser · CVSS 6.5 · 0.3% likely

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.