2285 matches found
GHSA-CQ6M-74R4-X77G Cloud Foundry Runtime has Weak Password Recovery Mechanism for Forgotten Password
Cloud Foundry Runtime cf-release before 216, UAA before 2.5.2, and Pivotal Cloud Foundry PCF Elastic Runtime before 1.7.0 allow attackers to have unspecified impact by leveraging failure to expire password reset links...
Shopware Code Problem Vulnerability (CNVD-2022-31768)
Shopware is a German Shopware company's open source e-commerce software. A code issue vulnerability exists in Shopware that stems from the fact that in the affected version, a user session is not logged off if the password is reset via password recovery. An attacker could exploit the vulnerabilit...
pearweb authorization issue vulnerability
pearweb is a PHP extension and application repository. pearweb has a security vulnerability that stems from a weak password recovery mechanism in include/users/passwordmanage.php, and no details of the vulnerability are currently available...
CVE-2022-27157
pearweb 1.32 is suffers from a Weak Password Recovery Mechanism via include/users/passwordmanage.php...
CVE-2022-27157
pearweb 1.32 is suffers from a Weak Password Recovery Mechanism via include/users/passwordmanage.php...
Default credentials
pearweb 1.32 is suffers from a Weak Password Recovery Mechanism via include/users/passwordmanage.php...
CVE-2022-27157
pearweb 1.32 is suffers from a Weak Password Recovery Mechanism via include/users/passwordmanage.php...
CVE-2022-27157
Pearweb
CVE-2022-27157
pearweb 1.32 is suffers from a Weak Password Recovery Mechanism via include/users/passwordmanage.php...
pearweb 授权问题漏洞
pearweb is a PHP extension and application repository. pearweb has a security vulnerability that stems from a weak password recovery mechanism in include/users/passwordmanage.php, and no details of the vulnerability are currently available...
Nsasoft US LLC SpotAuditor Denial of Service Vulnerability
Nsasoft SpotAuditor is an advanced password recovery software from Nsasoft USA Inc. A denial-of-service vulnerability exists in Nsasoft US LLC SpotAuditor version 5.3.5, which is used to recover lost or forgotten passwords for over 40 popular Windows programs and tools. The vulnerability is cause...
CVE-2022-1073 Automatic Question Paper Generator password recovery
A vulnerability was found in Automatic Question Paper Generator 1.0. It has been declared as critical. An attack leads to privilege escalation. The attack can be launched remotely...
GHSA-W267-M9C4-8555 Shopware user session is not logged out if the password is reset via password recovery
Impact User session is not logged out if the password is reset via password recovery Patches Fixed in 6.4.8.1, maintainers recommend updating to the current version 6.4.8.2. You can get the update to 6.4.8.2 regularly via the Auto-Updater or directly via the download overview...
Default credentials
Shopware is an open commerce platform based on the Symfony php Framework and the Vue javascript framework. In affected versions user sessions are not logged out if the password is reset via password recovery. This issue has been resolved in version 6.4.8.1. For older versions of 6.1, 6.2, and 6.3...
CVE-2022-24744
CVE-2022-24744 – Shopware Affected: Shopware (open commerce platform based on Symfony and Vue) where, in affected versions, user sessions remain active after a password reset via the recovery flow. Root cause (as described in security docs): insufficient session expiration management allowing a u...
CVE-2022-24744 Insufficient Session Expiration in shopware
Shopware is an open commerce platform based on the Symfony php Framework and the Vue javascript framework. In affected versions user sessions are not logged out if the password is reset via password recovery. This issue has been resolved in version 6.4.8.1. For older versions of 6.1, 6.2, and 6.3...
Shopware 代码问题漏洞
Shopware is a German Shopware company's open source e-commerce software. A code issue vulnerability exists in Shopware that stems from the fact that in the affected version, a user session is not logged off if the password is reset via password recovery. An attacker could exploit the vulnerabilit...
CVE-2022-0777
Weak Password Recovery Mechanism for Forgotten Password in GitHub repository microweber/microweber prior to 1.3...