CVE-2019-10158

A flaw was found in Infinispan through version 9.4.14.Final. An improper implementation of the session fixation protection in the Spring Session integration can result in incorrect session handling...

Session fixation

A flaw was found in Infinispan through version 9.4.14.Final. An improper implementation of the session fixation protection in the Spring Session integration can result in incorrect session handling...

CVE-2019-11756

A use-after-free flaw was found in Mozilla Network Security Services NSS related to PK11 session handling. An attacker could use this flaw to execute arbitrary code with the permissions of the user running the application compiled with NSS...

The vulnerability of the libflycore library for working with session-based desktop sessions in the Astra Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the libflycore library for working with session-based desktop sessions in the Astra Linux operating system is related to the access to freed memory areas. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2019-6161

An internal product security audit discovered a session handling vulnerability in the web interface of ThinkAgile CP-SB Storage Block BMC in firmware versions prior to 1908.M. This vulnerability allows session IDs to be reused, which could provide unauthorized access to the BMC under certain...

Spoofing

An internal product security audit discovered a session handling vulnerability in the web interface of ThinkAgile CP-SB Storage Block BMC in firmware versions prior to 1908.M. This vulnerability allows session IDs to be reused, which could provide unauthorized access to the BMC under certain...

Session fixation

In Apache HTTP Server 2.4.18-2.4.39, using fuzzed network input, the http/2 session handling could be made to read memory after being freed, during connection shutdown...

CVE-2019-6161

CVE-2019-6161 affects Lenovo/ThinkAgile CP-SB Storage Block BMC. A session-handling vulnerability allows reused session IDs, potentially enabling unauthorized access on firmware versions prior to 1908.M. Affected product: ThinkAgile CP-SB BMC; other BMCs (ThinkSystem XCC, System x IMM2, etc.) are...

CVE-2019-6161

An internal product security audit discovered a session handling vulnerability in the web interface of ThinkAgile CP-SB Storage Block BMC in firmware versions prior to 1908.M. This vulnerability allows session IDs to be reused, which could provide unauthorized access to the BMC under certain...

ThinkAgile CP-SB (Storage Block) BMC Session Handling Vulnerability - Lenovo Support US

No description provided...

ThinkAgile CP-SB (Storage Block) BMC Session Handling Vulnerability - US

Lenovo Security Advisory: LEN-26957 Potential Impact: Unauthorized access Severity: Medium Scope of Impact: Lenovo-specific CVE Identifier: CVE-2019-6161 Summary Description: An internal product security audit discovered a session handling vulnerability in the web interface of ThinkAgile CP-SB...

Null pointer dereference

An exploitable denial-of-service vulnerability exists in the session handling functionality of the NETGEAR N300 WNR2000v5 with Firmware Version V1.0.0.70 HTTP server. An HTTP request with an empty User-Agent string sent to a page requiring authentication can cause a null pointer dereference,...

NETGEAR N300 Denial of Service Vulnerability

The NETGEAR N300 is a wireless router from NETGEAR. A security vulnerability exists in the session handling function in the HTTP server of the NETGEAR N300 WNR2000v5 using firmware version 1.0.0.70. An attacker can exploit the vulnerability to cause the HTTP service to crash with the help of an...

NETGEAR N300 WNR2000v5 unauthenticated HTTP denial-of-service vulnerability

Summary An exploitable denial-of-service vulnerability exists in the session handling functionality of the NETGEAR N300 WNR2000v5 HTTP server. An HTTP request with an empty User-Agent string sent to a page requiring authentication can cause a null pointer dereference, resulting in the HTTP servic...

Unspecified vulnerability in cPanel (CNVD-2019-27409)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions of cPanel prior to 58.0.4, which stems from the fact that the program does not proper...

CVE-2016-10801

cPanel before 58.0.4 has improper session handling for shared users SEC-139...

CVE-2016-10801

cPanel before 58.0.4 has improper session handling for shared users SEC-139...

Design/Logic Flaw

cPanel before 58.0.4 has improper session handling for shared users SEC-139...

CVE-2016-10801

cPanel before 58.0.4 has improper session handling for shared users SEC-139...

CVE-2016-10801

Affected product: cPanel. Vulnerability CVE-2016-10801 exists in versions before 58.0.4 due to improper session handling for shared users (SEC-139). Root cause: flawed session management in the system. Impact described by CVSS3 as high (C/H/I/A) with base score 8.8; CVSS2 as 6.5. Mitigation: upgr...