Lucene search
+L

2976 matches found

NVD
NVD
•added 2025/03/26 11:15 a.m.•26 views

CVE-2025-2596

Session logout could be overwritten in Checkmk GmbH's Checkmk versions 2.3.0p30, 2.2.0p41, and 2.1.0p49 EOL...

5.3CVSS0.00207EPSS
SaveExploits0References1
Mend
Mend
•added 2025/03/26 10:51 a.m.•6 views

CVE-2025-2596

Session logout could be overwritten in Checkmk GmbH's Checkmk versions 2.3.0p30, 2.2.0p41, and 2.1.0p49 EOL...

5.3CVSS0.00207EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2025/03/26 10:51 a.m.•19 views

CVE-2025-2596 Session logout can be overwritten by long lasting request

Session logout could be overwritten in Checkmk GmbH's Checkmk versions 2.3.0p30, 2.2.0p41, and 2.1.0p49 EOL...

2.3CVSS5.9AI score
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/03/26 10:51 a.m.•13 views

CVE-2025-2596 Session logout can be overwritten by long lasting request

Session logout could be overwritten in Checkmk GmbH's Checkmk versions 2.3.0p30, 2.2.0p41, and 2.1.0p49 EOL...

2.3CVSS7.1AI score0.00207EPSS
SaveExploits0References1
CVE
CVE
•added 2025/03/26 10:51 a.m.•102 views

CVE-2025-2596

CVE-2025-2596 concerns Checkmk software from Checkmk GmbH where session logout can be overwritten by a long-lasting request. Affected versions are <2.3.0p30,

5.3CVSS7.1AI score0.00207EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2025/03/26 10:51 a.m.•38 views

CVE-2025-2596 Session logout can be overwritten by long lasting request

Session logout could be overwritten in Checkmk GmbH's Checkmk versions 2.3.0p30, 2.2.0p41, and 2.1.0p49 EOL...

2.3CVSS0.00207EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
•added 2025/03/26 3:29 a.m.•49 views

Security Bulletin: IBM Robotic Process Automation for Cloud Pak is vulnerable to broken access control. A user is not correctly redirected to the platform log out screen when logging out of IBM RPA for Cloud Pak (CVE-2022-43844)

Summary IBM Robotic Process Automation for Cloud Pak is vulnerable to broken access control. A user is not correctly redirected to the platform log out screen when logging out of IBM RPA for Cloud Pak. This bulletin identifies the security fixes to apply to address this vulnerability. Vulnerabili...

8.8CVSS8.6AI score0.00706EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
•added 2025/03/26 12:00 a.m.•6 views

PT-2025-12874

Name of the Vulnerable Software and Affected Versions Checkmk versions prior to 2.3.0p30 Checkmk versions prior to 2.2.0p41 Checkmk version 2.1.0p49 Description The issue concerns a problem where session logout could be overwritten. Recommendations For versions prior to 2.3.0p30, update to versio...

5.3CVSS0.00207EPSS
SaveExploits0References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/26 12:00 a.m.•6 views

CVE-2025-2596: Insufficient Session Expiration

Session logout could be overwritten in Checkmk GmbH's Checkmk versions 2.3.0p30, 2.2.0p41, and 2.1.0p49 EOL...

5.3CVSS5.7AI score0.00207EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/03/16 7:12 p.m.•48 views

CVE-2024-12245

Logout functionality contains a blind SQL injection that can be exploited by unauthenticated attackers. Using a time-based blind SQLi technique the attacker can disclose all database contents. Account takeover is a potential outcome depending on the presence or lack thereof entries in certain...

8.7CVSS7.9AI score0.00378EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/03/14 6:11 p.m.•68 views

CVE-2024-12245 Blind SQL Injection in Logout

Logout functionality contains a blind SQL injection that can be exploited by unauthenticated attackers. Using a time-based blind SQLi technique the attacker can disclose all database contents. Account takeover is a potential outcome depending on the presence or lack thereof entries in certain...

8.7CVSS0.00378EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/03/14 6:11 p.m.•13 views

CVE-2024-12245 Blind SQL Injection in Logout

Logout functionality contains a blind SQL injection that can be exploited by unauthenticated attackers. Using a time-based blind SQLi technique the attacker can disclose all database contents. Account takeover is a potential outcome depending on the presence or lack thereof entries in certain...

8.7CVSS8AI score0.00378EPSS
SaveExploits0References1
CVE
CVE
•added 2025/03/14 6:11 p.m.•69 views

CVE-2024-12245

CVE-2024-12245 describes a blind SQL injection flaw in the logout functionality that can be exploited by unauthenticated attackers via time-based techniques to disclose database contents. Several connected records reference this vulnerability with the same core description, noting potential accou...

8.7CVSS8AI score0.00378EPSS
SaveExploits0References1
NVD
NVD
•added 2025/03/14 5:15 p.m.•29 views

CVE-2025-27606

Element Android is an Android Matrix Client provided by Element. Element Android up to version 1.6.32 can, under certain circumstances, fail to logout the user if they input the wrong PIN more than the configured amount of times. An attacker with physical access to a device can exploit this to...

5.1CVSS0.00191EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2025/03/14 4:56 p.m.•25 views

CVE-2025-27606 Element Android PIN autologout bypass

Element Android is an Android Matrix Client provided by Element. Element Android up to version 1.6.32 can, under certain circumstances, fail to logout the user if they input the wrong PIN more than the configured amount of times. An attacker with physical access to a device can exploit this to...

5.1CVSS6.5AI score
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2025/03/14 12:00 a.m.•10 views

PT-2025-11282

Name of the Vulnerable Software and Affected Versions: Element Android versions 1.6.32 and earlier Description: The issue occurs when the user inputs the wrong PIN more than the configured amount of times, causing the application to fail to logout the user under certain circumstances. An attacker...

5.1CVSS0.00191EPSS
SaveExploits0References9
CNNVD
CNNVD
•added 2025/03/14 12:00 a.m.•27 views

Element Android 安全漏洞

Element Android is an Android Matrix client for the open source Element. A security vulnerability exists in Element Android version 1.6.32 and earlier, which stems from a failure to logout a user when entering an incorrect PIN more than a configured number of times, which could lead to an attacke...

5.1CVSS6.6AI score0.00191EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2025/03/14 12:00 a.m.•6 views

PT-2025-11293

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A blind SQL injection exists in the logout functionality, allowing unauthenticated attackers to exploit it. Using a time-based blind SQLi technique, an attacker can disclose all database...

8.7CVSS0.00378EPSS
SaveExploits0References6
osv_cve
osv_cve
•added 2025/02/27 6:15 p.m.•17 views

CVE-2025-1745

A vulnerability has been found in LinZhaoguan pb-cms 2.0 and classified as problematic. This vulnerability affects unknown code of the component Logout. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may...

5.3CVSS4.6AI score0.00291EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2025/02/27 5:31 p.m.•13 views

CVE-2025-1745 LinZhaoguan pb-cms Logout cross-site request forgery

A vulnerability has been found in LinZhaoguan pb-cms 2.0 and classified as problematic. This vulnerability affects unknown code of the component Logout. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may...

5.3CVSS4.8AI score0.00291EPSS
SaveExploits1References4
Rows per page
Query Builder