4083 matches found
CVE-2025-27661
Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Session Fixation OVE-20230524-0004...
CVE-2025-27661
CVE-2025-27661 affects Vasion Print (formerly PrinterLogic) prior to Virtual Appliance Host 22.0.843 / Application 20.0.1923. The issue is a session fixation vulnerability (OVE-20230524-0004). Affected component: the web/app layer serving printer management; root cause details are not further ela...
CVE-2025-27661
Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Session Fixation OVE-20230524-0004...
Linux Distros Unpatched Vulnerability : CVE-2022-24895
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Symfony is a PHP framework for web and console applications and a set of reusable PHP components. When authenticating users Symfony by default regenerates the...
Linux Distros Unpatched Vulnerability : CVE-2016-0721
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Session fixation vulnerability in pcsd in pcs before 0.9.157. CVE-2016-0721 Note that Nessus relies on the presence of the package as reported by the vendor...
Linux Distros Unpatched Vulnerability : CVE-2019-17563
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When using FORM authentication with Apache Tomcat 9.0.0.M1 to 9.0.29, 8.5.0 to 8.5.49 and 7.0.0 to 7.0.98 there was a narrow window where an attacker could...
Session Fixation
github.com/mattermost/mattermost-server is vulnerable to Session Fixation. The vulnerability is due to improper session invalidation when converting a user to a bot, allows the user to retain their previous session and potentially escalate privileges based on the bot’s assigned permissions...
Linux Distros Unpatched Vulnerability : CVE-2011-4718
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Session fixation vulnerability in the Sessions subsystem in PHP before 5.5.2 allows remote attackers to hijack web sessions by specifying a session ID...
CVE-2024-49344 IBM OpenPages session fixation
IBM OpenPages with Watson 8.3 and 9.0 IBM OpenPages with Watson Assistant chat feature enabled the application establishes a session when a user logs in and uses chat, but the chat session is still left active after logout...
CVE-2024-49344 IBM OpenPages session fixation
IBM OpenPages with Watson 8.3 and 9.0 IBM OpenPages with Watson Assistant chat feature enabled the application establishes a session when a user logs in and uses chat, but the chat session is still left active after logout...
ABB Cylon Aspect 3.08.02 PHP Session Fixation Vulnerability
ABB Cylon Aspect version 3.08.02 is vulnerable to session fixation, allowing an attacker to set a predefined PHPSESSID value. An attacker can leverage an unauthenticated reflected cross site scripting vulnerability in jsonProxy.php to inject a crafted request, forcing the victim to adopt a fixate...
ABB Cylon Aspect 3.08.02 PHP Session Fixation
ABB Cylon Aspect version 3.08.02 is vulnerable to session fixation, allowing an attacker to set a predefined PHPSESSID value. An attacker can leverage an unauthenticated reflected cross site scripting vulnerability in jsonProxy.php to inject a crafted request, forcing the victim to adopt a fixate...
ABB Cylon Aspect 3.08.02 PHP Session Fixation Vulnerability
Summary ASPECT is an award-winning scalable building energy management and control solution designed to allow users seamless access to their building data through standard building protocols including smart devices. Description The ABB Cylon Aspect BMS/BAS controller is vulnerable to session...
CVE-2022-40916
Tiny File Manager v2.4.7 and below is vulnerable to session fixation...
CVE-2025-24503
A malicious actor can fix the session of a PAM user by tricking the user to click on a specially crafted link to the PAM server...
CVE-2024-42207
HCL iAutomate is affected by a session fixation vulnerability. An attacker could hijack a victim's session ID from their authenticated session...
CVE-2022-40916
Tiny File Manager v2.4.7 and below is vulnerable to session fixation...
CVE-2022-40916
Tiny File Manager vulnerability CVE-2022-40916 affects version 2.4.7 and earlier, due to a session-management flaw that enables session fixation. The issue is documented as a high-severity (CVSS 9.8) risk with network attack potential and no user interaction required. Public references indicate a...
PT-2025-5834 · Unknown · Tiny File Manager
Name of the Vulnerable Software and Affected Versions: Tiny File Manager versions 2.4.7 and below Description: The issue concerns session fixation. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incidents where thi...