CVE-2026-4913

Improper protection of an alternate path in Ivanti N-ITSM before version 2025.4 allows a remote authenticated attacker to retain access when their account has been disabled...

PT-2022-13677

Name of the Vulnerable Software and Affected Versions Snipe-IT versions prior to 5.3.10 Snipe-IT versions 5.4.1 and 6.0.0-RC-5 Description The issue arises from the fact that old sessions are not blocked by the login enable function, and active sessions are not revoked when a user account is...

CVE-2007-0433: Undefined Security Weakness

Unspecified vulnerability in BEA AquaLogic Enterprise Security 2.0 through 2.0 SP2, 2.1 through 2.1 SP1, and 2.2, when using Active Directory LDAP for authentication, allows remote authenticated users to access the server even after the account has been disabled...