3 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-5507
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When restoring a session from cache, a pointer from the serialized session data is used in a free operation without validation. An attacker who can poison the...
SUSE CVE-2020-15105
Django Two-Factor Authentication before 1.12, stores the user's password in clear text in the user session base64-encoded. The password is stored in the session when the user submits their username and password, and is removed once they complete authentication by entering a two-factor...
Denial Of Service (DoS)
varnish is vulnerable to denial of service. The vulnerability exists in multiple functions of cachesession.c due to an assertion failure which allows an attacker to crash the application via malicious input...