Lucene search
K

13 matches found

Positive Technologies
Positive Technologies
added 2026/01/13 12:0 a.m.11 views

PT-2026-2806

Name of the Vulnerable Software and Affected Versions Cal.com versions 3.1.6 through 6.0.6 Description Cal.com, an open-source scheduling software, has a critical flaw in a custom NextAuth JWT callback. This issue allows attackers to gain full authenticated access to any user's account by supplyi...

10CVSS5.8AI score0.004EPSS
Exploits1References15
RedhatCVE
RedhatCVE
added 2025/05/23 4:5 a.m.5 views

CVE-2023-37919

Cal.com is open-source scheduling software. A vulnerability allows active sessions associated with an account to remain active even after enabling 2FA. When activating 2FA on a Cal.com account that is logged in on two or more devices, the account stays logged in on the other devices stays logged ...

6.5CVSS6.7AI score0.00264EPSS
Exploits0
BDU FSTEC
BDU FSTEC
added 2024/03/04 12:0 a.m.2 views

The vulnerability of the LaborOfficeFree software for managing shift schedules and working hours allows a perpetrator to carry out an attack using brute-force methods.

The vulnerability of LaborOfficeFree’s software for scheduling and time management is related to weak password requirements. Exploiting this vulnerability could allow an attacker to execute a brute-force attack...

6.8CVSS6.8AI score0.00151EPSS
Exploits0References3Affected Software1
NVD
NVD
added 2023/07/25 9:15 p.m.17 views

CVE-2023-37919

Cal.com is open-source scheduling software. A vulnerability allows active sessions associated with an account to remain active even after enabling 2FA. When activating 2FA on a Cal.com account that is logged in on two or more devices, the account stays logged in on the other devices stays logged ...

6.5CVSS6.4AI score0.00264EPSS
Exploits0References1
Prion
Prion
added 2023/07/25 9:15 p.m.14 views

Design/Logic Flaw

Cal.com is open-source scheduling software. A vulnerability allows active sessions associated with an account to remain active even after enabling 2FA. When activating 2FA on a Cal.com account that is logged in on two or more devices, the account stays logged in on the other devices stays logged ...

5.5CVSS5.4AI score0.00264EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2023/07/25 8:42 p.m.17 views

CVE-2023-37919 Cal.com not expiring old sessions after enabling 2FA

Cal.com is open-source scheduling software. A vulnerability allows active sessions associated with an account to remain active even after enabling 2FA. When activating 2FA on a Cal.com account that is logged in on two or more devices, the account stays logged in on the other devices stays logged ...

6.5CVSS6.6AI score0.00264EPSS
Exploits0References1
CVE
CVE
added 2023/07/25 8:42 p.m.72 views

CVE-2023-37919

CVE-2023-37919 affects Cal.com open-source scheduling software. The vulnerability allows active sessions to remain valid after enabling 2FA when a user is logged in on multiple devices, causing the other session(s) to stay authenticated without re-verification. Concrete details across connected d...

6.5CVSS5.9AI score0.00264EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/07/25 8:42 p.m.13 views

CVE-2023-37919 Cal.com not expiring old sessions after enabling 2FA

Cal.com is open-source scheduling software. A vulnerability allows active sessions associated with an account to remain active even after enabling 2FA. When activating 2FA on a Cal.com account that is logged in on two or more devices, the account stays logged in on the other devices stays logged ...

6.5CVSS7AI score0.00264EPSS
Exploits0References1
OSV
OSV
added 2023/07/25 8:42 p.m.27 views

CVE-2023-37919 Cal.com not expiring old sessions after enabling 2FA

Cal.com is open-source scheduling software. A vulnerability allows active sessions associated with an account to remain active even after enabling 2FA. When activating 2FA on a Cal.com account that is logged in on two or more devices, the account stays logged in on the other devices stays logged ...

6.5CVSS5.5AI score0.00264EPSS
Exploits0References3
CNVD
CNVD
added 2022/08/19 12:0 a.m.29 views

IBM Workload Scheduler has an unspecified vulnerability

IBM Workload Scheduler is a set of enterprise task scheduling software from IBM Corporation of the United States. The software automates the control of workloads. IBM Workload Scheduler has a security vulnerability. No details of the vulnerability are currently available...

7.1CVSS2AI score0.00185EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2019/07/23 12:0 a.m.4 views

The vulnerability of the DBconn::GetLastError function in the pgagent scheduling software, which allows a hacker to cause a service failure.

The vulnerability of the DBconn::GetLastError function in the pgagent scheduling software from the pgagent package is related to errors during the swapping of the zero pointer 0x0000000000407209. Exploiting this vulnerability could allow an attacker to trigger a service failure through a speciall...

6.2CVSS5.5AI score
Exploits0References1Affected Software2
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.13 views

aSc Timetables 2013 - Stack Buffer Overflow Vulnerability

No description provided by source. !/usr/bin/python Title : ASC Timetables 2013 - Stack Buffer Overflow Vulnerability Researcher : Souhail Hammou Dark-Puzzle Research Team : http://itsecurity.ma Facebook : http://www.facebook.com/dark.puzzle.sec Date : 22/06/2013 Download Website :...

7.1AI score
Exploits0
exploitpack
exploitpack
added 2013/06/24 12:0 a.m.7 views

aSc Timetables 2013 - Local Stack Buffer Overflow

aSc Timetables 2013 - Local Stack Buffer Overflow !/usr/bin/python Title : ASC Timetables 2013 - Stack Buffer Overflow Vulnerability Researcher : Souhail Hammou Dark-Puzzle Research Team : http://itsecurity.ma Facebook : http://www.facebook.com/dark.puzzle.sec Date : 22/06/2013 Download Website :...

0.3AI score
Exploits0
Rows per page
Query Builder