Lucene search
+L

6 matches found

EUVD
EUVD
•added 2025/10/03 8:07 p.m.•19 views

EUVD-2025-16679

Malicious code in bioql PyPI...

6.5CVSS6.6AI score0.00345EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/06/04 12:14 a.m.•17 views

CVE-2025-27955

Clinical Collaboration Platform 12.2.1.5 has a weak logout system where the session token remains valid after logout and allows a remote attacker to obtain sensitive information and execute arbitrary code...

6.5CVSS7.2AI score0.00345EPSS
SaveExploits0References1
NVD
NVD
•added 2025/06/02 6:15 p.m.•22 views

CVE-2025-27955

Clinical Collaboration Platform 12.2.1.5 has a weak logout system where the session token remains valid after logout and allows a remote attacker to obtain sensitive information and execute arbitrary code...

6.5CVSS0.00345EPSS
SaveExploits0References1
CVE
CVE
•added 2025/06/02 12:00 a.m.•80 views

CVE-2025-27955

The Clinical Collaboration Platform version 12.2.1.5 is affected by a weak logout system where session tokens remain valid even after a user logs out. This flaw, categorized under CWE-1259 , allows a remote attacker to obtain sensitive information and execute arbitrary code . As a temporary worka...

6.5CVSS7AI score0.00345EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2025/06/02 12:00 a.m.•21 views

PT-2025-23549 · Unknown · Clinical Collaboration Platform

Name of the Vulnerable Software and Affected Versions: Clinical Collaboration Platform version 12.2.1.5 Description: The issue is related to a weak logout system in the Clinical Collaboration Platform, where the session token remains valid after a user logs out. This allows a remote attacker to...

6.5CVSS7.2AI score0.00345EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/02/26 12:00 a.m.•8 views

CVE-2021-21308: Improper Authentication

PrestaShop is a fully scalable open source e-commerce solution. In PrestaShop before version 1.7.2 the soft logout system is not complete and an attacker is able to foreign request and executes customer commands. The problem is fixed in 1.7.7.2...

9.1CVSS5.8AI score0.01854EPSS
SaveExploits0References2
Rows per page
Query Builder