CVE-2024-21635

Memos suffers from an issue where Access Tokens remain valid after a user password change, allowing a potential bad actor to continue accessing a compromised account. This affects versions up to and including 0.18.1, as tokens tied to the old password are not revoked automatically. The vulnerabil...

PT-2021-13828

Name of the Vulnerable Software and Affected Versions: pki-core affected versions not specified Description: A flaw was found in pki-core, allowing an attacker who has successfully compromised a key to renew the corresponding certificate over and over again, as long as it is not explicitly revoke...