3 matches found
PT-2026-61436
In the Linux kernel, the following vulnerability has been resolved: l2tp: use list del rcu in l2tp session unhash An unprivileged local user can pin a host CPU indefinitely in l2tp session get by ifname by issuing L2TP CMD SESSION GET on L2TP ATTR IFNAME concurrently with L2TP CMD SESSION CREATE...
CVE-2021-37333
Laravel Booking System Booking Core 2.0 is vulnerable to Session Management. A password change at sandbox.bookingcore.org/user/profile/change-password does not invalidate a session that is opened in a different browser...
CVE-2020-4555
IBM Financial Transaction Manager 3.0.6 and 3.1.0 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 183328...