64808 matches found
CVE-2026-81826
Affected versions of Flowintel do not revoke existing authenticated sessions when a user’s password is changed. This means that if an attacker already possesses a valid session—for example, from prior access or a stolen session token—the victim changing their password does not terminate that...
CVE-2026-30047
A reachable assertion vulnerability in the /nsmf-pdusession/v1/sm-contexts component of Open5GS v2.7.6 allows attackers to cause a Denial of Service DoS via supplying a crafted DELETE request...
CVE-2026-26456
A null pointer dereference vulnerability exists in the server-side session management logic of ccoap 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5. The issue is caused by a race condition between the request dispatch thread and the session cleanup thread when accessing shared session list nodes withou...
CVE-2025-62342
HCL IntelliOps Event Management IEM is affected by a Session Deletion Vulnerability. It may allow improper handling of user sessions, resulting in sessions not being fully terminated after logout or deletion...
CVE-2025-62343
HCL IntelliOps Event Management IEM is affected by an Admin Session Concurrency Vulnerability. it may allows user sessions to remain active after logout or session deletion...
cve-analysis-exploitation-mitigation
CVE Analysis, Exploitation & Mitigation A hands-on cybersecur...
EUVD-2026-67132
Affected versions of Flowintel do not revoke existing authenticated sessions when a user’s password is changed. This means that if an attacker already possesses a valid session—for example, from prior access or a stolen session token—the victim changing their password does not terminate that...
CVE-2026-81826 Flowintel Fails to Invalidate Active Sessions After Password Change
Affected versions of Flowintel do not revoke existing authenticated sessions when a user’s password is changed. This means that if an attacker already possesses a valid session—for example, from prior access or a stolen session token—the victim changing their password does not terminate that...
CVE-2026-81826 Flowintel Fails to Invalidate Active Sessions After Password Change
Affected versions of Flowintel do not revoke existing authenticated sessions when a user’s password is changed. This means that if an attacker already possesses a valid session—for example, from prior access or a stolen session token—the victim changing their password does not terminate that...
CVE-2026-81826 Flowintel Fails to Invalidate Active Sessions After Password Change
Affected versions of Flowintel do not revoke existing authenticated sessions when a user’s password is changed. This means that if an attacker already possesses a valid session—for example, from prior access or a stolen session token—the victim changing their password does not terminate that...
CVE-2026-81826
Flowintel (versions >=3.3.0 ) fails to revoke existing authenticated sessions when a user's password is changed. An attacker who already holds a valid session token retains access until that session expires naturally, even after the victim changes their password. The fix detects password chang...
CVE-2025-62343
HCL IntelliOps Event Management (IEM) is affected by an Admin Session Concurrency Vulnerability that may allow user sessions to remain active after logout or session deletion. The assigned CVSS 3.1 score is 3.1 (LOW) , reflecting a network attack vector with high complexity and required user inte...
CVE-2025-62343 HCL IntelliOps Event Management is affected by multiple security vulnerabilities.
HCL IntelliOps Event Management IEM is affected by an Admin Session Concurrency Vulnerability. it may allows user sessions to remain active after logout or session deletion...
CVE-2025-62343 HCL IntelliOps Event Management is affected by multiple security vulnerabilities.
HCL IntelliOps Event Management IEM is affected by an Admin Session Concurrency Vulnerability. it may allows user sessions to remain active after logout or session deletion...
EUVD-2025-210806
HCL IntelliOps Event Management IEM is affected by an Admin Session Concurrency Vulnerability. it may allows user sessions to remain active after logout or session deletion...
CVE-2025-62342
HCL IntelliOps Event Management (IEM) is affected by a Session Deletion Vulnerability where user sessions may not be fully terminated after logout or deletion, due to improper session handling. The vulnerability carries a CVSS 3.1 score of 6.4 (Medium) with high impacts to confidentiality and ava...
CVE-2025-62342 HCL IntelliOps Event Management is affected by multiple security vulnerabilities.
HCL IntelliOps Event Management IEM is affected by a Session Deletion Vulnerability. It may allow improper handling of user sessions, resulting in sessions not being fully terminated after logout or deletion...
EUVD-2025-210805
HCL IntelliOps Event Management IEM is affected by a Session Deletion Vulnerability. It may allow improper handling of user sessions, resulting in sessions not being fully terminated after logout or deletion...
CVE-2025-62342 HCL IntelliOps Event Management is affected by multiple security vulnerabilities.
HCL IntelliOps Event Management IEM is affected by a Session Deletion Vulnerability. It may allow improper handling of user sessions, resulting in sessions not being fully terminated after logout or deletion...