CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

OSV•added 2018/12/20 3:29 p.m.•23 views

CVE-2018-1000814

aio-libs aiohttp-session version 2.6.0 and earlier contains a Other/Unknown vulnerability in EncryptedCookieStorage and NaClCookieStorage that can result in Non-expiring sessions / Infinite lifespan. This attack appear to be exploitable via Recreation of a cookie post-expiry with the same value...

6.5CVSS6.4AI score

SaveExploits0References2

NVD•added 2018/12/20 3:29 p.m.•20 views

CVE-2018-1000814

6.5CVSS6.4AI score0.00965EPSS

SaveExploits1References2

Mend•added 2018/12/20 3:00 p.m.•4 views

CVE-2018-1000814

7.1CVSS0.00965EPSS

SaveExploits1References7

Positive Technologies•added 2018/12/20 12:00 a.m.•3 views

PT-2018-9538

Name of the Vulnerable Software and Affected Versions aio-libs aiohttp-session versions 2.6.0 and earlier Description The issue concerns a problem in EncryptedCookieStorage and NaClCookieStorage, which can lead to non-expiring sessions or infinite lifespan. This can be exploited by recreating a...

7.1CVSS0.00965EPSS

SaveExploits1References10

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by