587 matches found
Authentication Bypass
codeigniter4/framework is vulnerable to authentication bypass. The vulnerability exists due to the improper session handling in the library when the session handler is set to DatabaseHandler, MemcachedHandler, or RedisHandler, allowing an attacker to access pages that require another session cook...
Unspecified vulnerability in FusionDIrectory
FusionDIrectory is an application of FusionDIrectory open source. Used to ensure that the user's identity management security. A security vulnerability exists in FusionDIrectory version 1.3, which stems from a failure to properly handle sessions and can be exploited by an attacker to potentially...
DEBIAN-CVE-2022-36179
Fusiondirectory 1.3 suffers from Improper Session Handling...
CVE-2022-36179
Fusiondirectory 1.3 suffers from Improper Session Handling...
CVE-2022-36179
Fusiondirectory 1.3 suffers from Improper Session Handling...
Design/Logic Flaw
Fusiondirectory 1.3 suffers from Improper Session Handling...
UBUNTU-CVE-2022-36179
Fusiondirectory 1.3 suffers from Improper Session Handling...
CVE-2022-36179: Insufficient Session Expiration
Fusiondirectory 1.3 suffers from Improper Session Handling...
CVE-2022-36179
CVE-2022-36179 affects Fusiondirectory 1.3 and is due to Improper Session Handling. The connected advisories indicate a vulnerability in Fusiondirectory 1.3 requiring a package update; Mageia MGASA-2023-0352 notes updated fusiondirectory packages fix the issues, and Debian DLA-3487/DLA-3487-1 ref...
CVE-2022-36179
Fusiondirectory 1.3 suffers from Improper Session Handling...
CVE-2022-36179
Fusiondirectory 1.3 suffers from Improper Session Handling...
CVE-2022-36179
Removed by vendor...
PT-2022-23245 · Unknown · Fusiondirectory
Name of the Vulnerable Software and Affected Versions: Fusiondirectory version 1.3 Description: The issue is related to improper session handling. Recommendations: For Fusiondirectory version 1.3, at the moment, there is no information about a newer version that contains a fix for this issue...
CVE-2022-36179
Fusiondirectory 1.3 suffers from Improper Session Handling...
CVE-2022-27626
A vulnerability regarding concurrent execution using shared resource with improper synchronization 'Race Condition' is found in the session processing functionality of Out-of-Band OOB Management. This allows remote attackers to execute arbitrary commands via unspecified vectors. The following...
PT-2022-18532 · Synology · Synology Diskstation Manager
Name of the Vulnerable Software and Affected Versions: Synology DiskStation Manager DSM versions prior to 7.1.1-42962-2 Description: A race condition vulnerability exists in the session processing functionality of Out-of-Band OOB Management, allowing remote attackers to execute arbitrary commands...
Exposure of Data Element to Wrong Session
Overview johnpbloch/wordpress-core is a web software you can use to create a website or blog. Affected versions of this package are vulnerable to Exposure of Data Element to Wrong Session due to the improper handling of user session states. An attacker can escalate privileges and perform...
Denial Of Service (DoS)
wolfSSL is vulnerable to denial of service. The vulnerability exists when client connects to a wolfSSL server and SSLclear due to improper session handling which allows an attacker to cause an application crash...
Symmetricom SyncServer Unauthenticated Remote Command Execution
This module exploits an unauthenticated command injection vulnerability in /controller/ping.php. The S100 through S350 End of Life models should be vulnerable to unauthenticated exploitation due to a session handling vulnerability. Later models require authentication which is not provided in this...
