CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

5 matches found

RedhatCVE•added 2026/01/09 12:16 p.m.•16 views

CVE-2018-1000814

aio-libs aiohttp-session version 2.6.0 and earlier contains a Other/Unknown vulnerability in EncryptedCookieStorage and NaClCookieStorage that can result in Non-expiring sessions / Infinite lifespan. This attack appear to be exploitable via Recreation of a cookie post-expiry with the same value...

6.5CVSS6.7AI score0.00965EPSS

SaveExploits1References1

Veracode•added 2018/12/21 4:31 a.m.•24 views

Non-expiring Infinite Sessions

aiohttpsession has non-expiring infinite sessions. The cause of the vulnerability is due to lack of inherent data expiration in EncryptedCookieStorage and NaClCookieStorage...

6.5CVSS6.3AI score0.00965EPSS

SaveExploits1References2Affected Software1

OSV•added 2018/12/20 3:29 p.m.•22 views

CVE-2018-1000814

6.5CVSS6.4AI score

SaveExploits0References2

Cvelist•added 2018/12/20 3:00 p.m.•31 views

CVE-2018-1000814

6.3AI score0.00965EPSS

SaveExploits1References2

Rapid7 Vulnerability Database (full)•added 2018/12/20 12:00 a.m.•5 views

CVE-2018-1000814: Insufficient Session Expiration

6.5CVSS5.8AI score0.00965EPSS

SaveExploits1References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by