PT-2023-27306 · Unknown · Social Media Skeleton

Name of the Vulnerable Software and Affected Versions: Social media skeleton versions prior to 1.0.5 Description: Insufficient session expiration is a web application security vulnerability that occurs when a web application does not properly manage the lifecycle of a user's session. This issue...

Cisco Unified Communications Manager SQL注入漏洞

Cisco Unified Communications Manager CUCM, Unified CM, CallManager is a call-processing component of a unified communications system from Cisco. The component provides a scalable, distributable and highly available enterprise IP telephony call processing solution. A security vulnerability exists ...

PT-2023-4581 · Cisco · Cisco Unified Communications Manager Im & Presence Service +2

Name of the Vulnerable Software and Affected Versions: Cisco Unified Communications Manager versions prior to the fixed version Cisco Unified CM Session Management Edition versions prior to the fixed version Cisco Unified Communications Manager IM & Presence Service versions prior to the fixed...

CVE-2023-4323

Broadcom RAID Controller web interface is vulnerable to improper session management of active sessions on Gateway setup...

CVE-2023-4323

Broadcom RAID Controller web interface is vulnerable to improper session management of active sessions on Gateway setup...

Input validation

Broadcom RAID Controller web interface is vulnerable to improper session management of active sessions on Gateway setup...

CVE-2023-4323 Broadcom RAID Controller web interface is vulnerable to improper session management of active sessions on Gateway setup

Broadcom RAID Controller web interface is vulnerable to improper session management of active sessions on Gateway setup...

CVE-2023-4323

CVE-2023-4323 affects Broadcom RAID Controller web interface, with the vulnerability in improper session management of active sessions on Gateway setup. The Red Hat and NVD entries corroborate, describing a critical issue (CVSS v3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) that allows network access...

CVE-2023-4323 Broadcom RAID Controller web interface is vulnerable to improper session management of active sessions on Gateway setup

Broadcom RAID Controller web interface is vulnerable to improper session management of active sessions on Gateway setup...

Insufficient Session Expiration

Insufficient session expiration is a web application security vulnerability that occurs when a web application does not properly manage the lifecycle of a user's session. This can allow an attacker to hijack the user's session and gain unauthorized access to the application. The web application m...

PT-2023-28737 · Broadcom · Broadcom Raid Controller

Name of the Vulnerable Software and Affected Versions: Broadcom RAID Controller affected versions not specified Description: The Broadcom RAID Controller web interface is vulnerable to improper session management of active sessions on Gateway setup. Recommendations: At the moment, there is no...

CVE-2023-24477

CVE-2023-24477 affects Nozomi Guardian/CMC; before 22.6.2, due to timing with Chrome, logout does not always fully invalidate the user session. This creates a local, authenticated attacker capability to access the original user session. Connected sources (Siemens/CISA advisories and vendor notes)...

Improper Session Management

gitlab is vulnerable to Improper Session Management. The vulnerability allows an attacker with physical access to a user’s machine may brute force the user’s password via the change password function by stealing the session id from the physical compromise of the account and splitting the attack...

Improper Access Control

gitlab is vulnerable to Improper Access Control. The vulnerability exists because of not managing the sessions properly which allows an attacker with expired password to still access GitLab through git and API through access tokens acquired before password expiration...

Information Disclosure

gitlab is vulnerable to Information Disclosure. This vulnerability occurs when a user logs in to GitLab and then leaves the session open. If the attacker can then obtain the user's session token, they can use it to impersonate the user and access their account...

Improper Session Management

github.com/answerdev/answer is vulnerable to Improper Session Management. The vulnerability exists in UserLogout function at usercontroller.go due to improper cache handling during the admin logout which allows an attacker to use the token to gain unauthorized access to the application even after...

Improper Session Management

github.com/answerdev/answer is vulnerable to Improper Session Management. The vulnerability exists because the session does not expire after a password change, allowing an attacker to reuse the old session credentials or session IDs for authorization...

The vulnerability of the Jenkins OpenShift Login plugin, related to improper session management, allows attackers to bypass security restrictions.

The vulnerability of the Jenkins OpenShift Login plugin is related to improper session management. Exploiting this vulnerability allows a malicious actor to bypass security restrictions from a remote location...

Cisco NX-OS Software Remote Management Memory Leak Denial of Service (CVE-2019-1965)

A vulnerability in the Virtual Shell VSH session management for Cisco NX-OS Software could allow an authenticated, remote attacker to cause a VSH process to fail to delete upon termination. This can lead to a build-up of VSH processes that overtime can deplete system memory. When there is no syst...

PT-2023-26186 · Cal.Com · Cal.Com

Name of the Vulnerable Software and Affected Versions: Cal.com affected versions not specified Description: A vulnerability in Cal.com open-source scheduling software allows active sessions associated with an account to remain active even after enabling 2FA. When 2FA is activated on a Cal.com...