CVE-2026-100502 Flame through 2.4.0 Admin Token Insufficient Session Expiration

Flame through 2.4.0 contains an insufficient session expiration vulnerability in the login endpoint that allows attackers with former admin access to obtain tokens with arbitrary lifespans by supplying unvalidated duration parameters. Attackers can mint near-permanent administrator tokens that...

CVE-2025-69414

Plex Media Server PMS through 1.42.2.10156 allows retrieval of a permanent access token via a /myplex/account call with a transient access token...

CVE-2025-24457

In JetBrains YouTrack before 2024.3.55417 permanent tokens could be exposed in logs...

CVE-2025-24457

In JetBrains YouTrack before 2024.3.55417 permanent tokens could be exposed in logs...

CVE-2025-24457

CVE-2025-24457 concerns JetBrains YouTrack prior to 2024.3.55417, where permanent tokens could be exposed in logs. The issue is documented across multiple feeds (Red Hat, CNVD, CNVD-related, NVD, CVE lists, and Nessus plugin) all confirming the same exposure risk. Affected software: YouTrack befo...

CVE-2025-24457

In JetBrains YouTrack before 2024.3.55417 permanent tokens could be exposed in logs...

PT-2025-5363 · Jetbrains · Youtrack

Name of the Vulnerable Software and Affected Versions: JetBrains YouTrack versions prior to 2024.3.55417 Description: The issue is related to the exposure of permanent tokens in logs, potentially allowing an attacker to obtain encrypted user credentials. This could be exploited through the...

CVE-2024-50573

In JetBrains Hub before 2024.3.47707 improper access control allowed users to generate permanent tokens for unauthorized services...

CVE-2024-50573

In JetBrains Hub before 2024.3.47707 improper access control allowed users to generate permanent tokens for unauthorized services...

CVE-2024-50573: Missing Authorization

In JetBrains Hub before 2024.3.47707 improper access control allowed users to generate permanent tokens for unauthorized services...

PT-2023-8909 · Opensc +8 · Opensc +8

Name of the Vulnerable Software and Affected Versions: OpenSC affected versions not specified Description: A flaw was found in OpenSC packages that allows a potential PIN bypass. When a token/card is authenticated by one process, it can perform cryptographic operations in other processes when an...