Lucene search
+L

179 matches found

EUVD
EUVD
added 2025/10/14 6:30 p.m.5 views

EUVD-2024-31245

An insufficient session expiration vulnerability CWE-613 and an incorrect authorization vulnerability CWE-863 in FortiIsolator 2.4.0 through 2.4.4, 2.3 all versions, 2.2.0, 2.1 all versions, 2.0 all versions authentication mechanism may allow remote unauthenticated attacker to deauthenticate logg...

7.4CVSS7AI score0.00365EPSS
SaveExploits0References2
NVD
NVD
added 2025/10/14 4:15 p.m.17 views

CVE-2024-33507

An insufficient session expiration vulnerability CWE-613 and an incorrect authorization vulnerability CWE-863 in FortiIsolator 2.4.0 through 2.4.4, 2.3 all versions, 2.2.0, 2.1 all versions, 2.0 all versions authentication mechanism may allow remote unauthenticated attacker to deauthenticate logg...

9.1CVSS0.00365EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/10/14 12:0 a.m.6 views

PT-2025-41942

Name of the Vulnerable Software and Affected Versions FortiIsolator versions 2.0 through 2.4.4 FortiIsolator version 2.3 all versions FortiIsolator version 2.2.0 FortiIsolator version 2.1 all versions Description FortiIsolator is affected by an insufficient session expiration and an incorrect...

7.4CVSS6.8AI score0.00365EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2018-8963

Malware in sbrugna...

7.5CVSS6.5AI score0.19994EPSS
SaveExploits0References37
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2019-3445

Malware in sbrugna...

5.5CVSS5.7AI score0.00761EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2017-3279

Malware in sbrugna...

8.1CVSS8.1AI score0.0142EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.8 views

EUVD-2022-3920

Malicious code in bioql PyPI...

5.5CVSS5.8AI score0.0032EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2024-15811

Malicious code in bioql PyPI...

8.8CVSS7.3AI score0.00503EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/09/24 4:34 p.m.7 views

CVE-2025-59335

CubeCart is an ecommerce software solution. Prior to version 6.5.11, there is an absence of automatic session expiration following a user's password change. This oversight poses a security risk, as if a user forgets to log out from a location where they accessed their account, an unauthorized use...

7.1CVSS6.8AI score0.0019EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2025/09/22 12:0 a.m.14 views

PT-2025-38742

Name of the Vulnerable Software and Affected Versions CubeCart versions prior to 6.5.11 Description CubeCart is an ecommerce software solution. Prior to version 6.5.11, user sessions do not automatically expire after a password change. This allows an attacker who has already compromised an accoun...

7.1CVSS6.7AI score0.0019EPSS
SaveExploits1References7
RedhatCVE
RedhatCVE
added 2025/09/07 12:45 a.m.11 views

CVE-2025-58352

Weblate is a web based localization tool. Versions lower than 5.13.1 contain a vulnerability that causes long session expiry during the second factor verification. The long session expiry could be used to circumvent rate limiting of the second factor. This issue is fixed in version 5.13.1...

6.5CVSS6.8AI score0.00262EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
added 2025/09/05 11:22 p.m.6 views

SUSE CVE-2025-58352

Weblate is a web based localization tool. Versions lower than 5.13.1 contain a vulnerability that causes long session expiry during the second factor verification. The long session expiry could be used to circumvent rate limiting of the second factor. This issue is fixed in version 5.13.1...

6.5CVSS6.8AI score0.00262EPSS
SaveExploits0References3
NVD
NVD
added 2025/09/05 12:15 a.m.23 views

CVE-2025-58352

Weblate is a web based localization tool. Versions lower than 5.13.1 contain a vulnerability that causes long session expiry during the second factor verification. The long session expiry could be used to circumvent rate limiting of the second factor. This issue is fixed in version 5.13.1...

6.5CVSS0.00262EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/09/05 12:0 a.m.8 views

Weblate 代码问题漏洞

Weblate is a Copyleft open source web-based free software continuous localization system. A code issue vulnerability exists in Weblate versions prior to 5.13.1 that stems from a long session expiration during second factor authentication, which could bypass rate limiting...

6.5CVSS6.6AI score0.00262EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/09/04 11:28 p.m.4 views

CVE-2025-58352 Weblate has long session expiry times during second factor verification

Weblate is a web based localization tool. Versions lower than 5.13.1 contain a vulnerability that causes long session expiry during the second factor verification. The long session expiry could be used to circumvent rate limiting of the second factor. This issue is fixed in version 5.13.1...

2.1CVSS6.2AI score0.00262EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/09/04 11:28 p.m.27 views

CVE-2025-58352 Weblate has long session expiry times during second factor verification

Weblate is a web based localization tool. Versions lower than 5.13.1 contain a vulnerability that causes long session expiry during the second factor verification. The long session expiry could be used to circumvent rate limiting of the second factor. This issue is fixed in version 5.13.1...

2.1CVSS0.00262EPSS
SaveExploits0References3
CVE
CVE
added 2025/09/04 11:28 p.m.27 views

CVE-2025-58352

CVE-2025-58352 (Weblate) affects Weblate versions lower than 5.13.1, where sessions can persist for an unusually long period during second-factor (2FA) verification. The root issue is insufficient session expiration, enabling an attacker to maintain a valid session and potentially bypass rate lim...

6.5CVSS6.3AI score0.00262EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2025/09/04 11:28 p.m.15 views

CVE-2025-58352 Weblate has long session expiry times during second factor verification

Weblate is a web based localization tool. Versions lower than 5.13.1 contain a vulnerability that causes long session expiry during the second factor verification. The long session expiry could be used to circumvent rate limiting of the second factor. This issue is fixed in version 5.13.1...

2.1CVSS6.5AI score0.00262EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
added 2025/09/04 2:6 p.m.12 views

Weblate has a long session expiry when verifying second factor

Impact The verification of the second factor had too long a session expiry. The long session expiry could be used to circumvent rate limiting of the second factor. Patches This issue has been addressed in Weblate 5.13.1 via https://github.com/WeblateOrg/weblate/pull/16002. References Thanks to...

6.5CVSS6.8AI score0.00262EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2025/09/04 2:6 p.m.33 views

GHSA-377J-WJ38-4728 Weblate has a long session expiry when verifying second factor

Impact The verification of the second factor had too long a session expiry. The long session expiry could be used to circumvent rate limiting of the second factor. Patches This issue has been addressed in Weblate 5.13.1 via https://github.com/WeblateOrg/weblate/pull/16002. References Thanks to...

2.1CVSS6.8AI score0.00262EPSS
SaveExploits0References5
Rows per page
Query Builder