← Back
CWE-565

83 CVEs • Abstraction: Base

Reliance on Cookies without Validation and Integrity Checking

The product relies on the existence or values of cookies when performing security-critical operations, but it does not properly ensure that the setting is valid for the associated user.

JSON object

Loading...

CVEs (83)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2017-6896
1Digisol
1Dg Hr1400 Router Firmware
May 13, 2026
Mar 14, 2017
N/A· v4
8.8 HIGH· v3
6.5 MEDIUM· v2
Privilege escalation vulnerability on the DIGISOL DG-HR1400 1.00.02 wireless router enables an attacker to escalate from user privilege to admin privilege just by modifying the Base64-encoded session cookie value.
CVE-2011-3887
2Apple
Google
3Chrome
Iphone OsSafari
Apr 29, 2026
Oct 25, 2011
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Google Chrome before 15.0.874.102 does not properly handle javascript: URLs, which allows remote attackers to bypass intended access restrictions and read cookies via unspecified vectors.
CVE-2008-5784
1V3chat
1V3 Chat Profiles Dating Script
Apr 23, 2026
Dec 31, 2008
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
V3 Chat - Profiles/Dating Script 3.0.2 allows remote attackers to bypass authentication and gain administrative access by setting the admin cookie to 1.