CVE-2020-15220

Combodo iTop is a web based IT Service Management tool. In iTop before versions 2.7.2 and 3.0.0, two cookies are created for the same session, which leads to a possibility to steal user session. This is fixed in versions 2.7.2 and 3.0.0...

CVE-2020-9992

This issue was addressed by encrypting communications over the network to devices running iOS 14, iPadOS 14, tvOS 14, and watchOS 7. This issue is fixed in iOS 14.0 and iPadOS 14.0, Xcode 12.0. An attacker in a privileged network position may be able to execute arbitrary code on a paired device...

Security Bulletin: IBM has announced a release for IBM Security Identity Governance and Intelligence in response to a security vulnerability (CVE-2020-4243)

Summary IBM has announced a release for IBM Security Identity Governance and Intelligence IGI in response to security vulnerability. The vulnerability concerns session not invalidated after Logout in IBM Security Access Request. Vulnerability Details CVEID: CVE-2020-4243 DESCRIPTION: IBM Security...

Design/Logic Flaw

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of OPC Foundation UA .NET Standard 1.04.358.30. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of sessions. The issue results fr...

UBUNTU-CVE-2020-11825

In Dolibarr 10.0.6, forms are protected with a CSRF token against CSRF attacks. The problem is any CSRF token in any user's session can be used in another user's session. CSRF tokens should not be valid in this situation...

CVE-2020-4253

IBM Content Navigator 3.0CD does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 175559...

The vulnerability of the microprogramming software of the Intel Baseboard Management Controller (BMC) related to session management errors allows a perpetrator to disclose sensitive information or cause service failures.

The vulnerability of the microprogrammed software of the Intel Baseboard Management Controller BMC relates to session management errors. Exploiting this vulnerability can allow attackers to disclose sensitive information or cause system failures...

CVE-2019-16133

An issue was discovered in eteams OA v4.0.34. Because the session is not strictly checked, the account names and passwords of all employees in the company can be obtained by an ordinary account. Specifically, the attacker sends a jsessionid value for URIs under app/profile/summary/...

UBUNTU-CVE-2019-11733

When a master password is set, it is required to be entered again before stored passwords can be accessed in the 'Saved Logins' dialog. It was found that locally stored passwords can be copied to the clipboard thorough the 'copy password' context menu item without re-entering the master password ...

The vulnerability of the mod_session module in the Apache HTTP Server, related to the lack of consideration for the lifetime of a session, allows attackers to compromise the integrity of protected data.

The vulnerability of the modsession module in the Apache HTTP Server is related to the lack of time-out checking before session data is decoded. Exploiting this vulnerability allows an attacker to compromise the integrity of protected data...

The vulnerability of the SYNO.PhotoStation.Auth component of the Photo Station storage management tool allows a hacker to gain unauthorized access to protected data.

The vulnerability of the SYNO.PhotoStation.Auth component in the Photo Station storage management tool is related to session management errors. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected data by using the PHPSESSID parameter...

ThinkSNS V4.6 Session suffers from information leakage vulnerability

ThinkSNS is an open source social system under Wise Software Beijing Co. ThinkSNS V4.6 Session suffers from an information disclosure vulnerability. Attackers can use this vulnerability to obtain sensitive information such as database username and password...

NUUO CMS Remote Code Execution Vulnerability

NUUO CMS is a set of centralized software management platform from NUUO. The platform is used to centrally manage devices such as NVRs hard disk recorders and IP cameras, and provides functions such as user management and alarm management. A security vulnerability exists in the session...

Huawei Backup App Session Vulnerability

Huawei Backup App is a cell phone file backup tool. A session vulnerability exists in Huawei Backup App, which allows a local attacker to reset the password of the backup encrypted area to access the backup files and restore or copy them...

Huawei Backup App v6.30.52.12.L - Session Vulnerability

Document Title: =============== Huawei Backup App v6.30.52.12.L - Session Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1815 Video: https://www.vulnerability-lab.com/getcontent.php?id=1987 Release Date: ============= 2018-07-30...

Huawei Backup App v6.30.52.12.L - Session Vulnerability

Document Title: =============== Huawei Backup App v6.30.52.12.L - Session Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1815 Video: https://www.vulnerability-lab.com/getcontent.php?id=1987 Release Date: ============= 2018-07-29...

CVE-2017-1000136

Mahara 1.8 before 1.8.6 and 1.9 before 1.9.4 and 1.10 before 1.10.1 and 15.04 before 15.04.0 are vulnerable to old sessions not being invalidated after a password change...

IWEBSOUL CMS 1.0 SQL Injection Vulnerability

IWEBSOUL CMS version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass. Title: ======= IWEBSOUL CMS - Multiple SQL Injection Vulnerabilities & Authentication Bypass Introduction: ============== Intrepid Websoul Private Limited - iWebsoul is a rapidly...

NetApp Clustered Data ONTAP HTTPS Session Vulnerability

NetApp Clustered Data ONTAP is a set of storage operating system for clustered mode from American NetApp. The system supports users to enhance the performance of enterprise applications and improve data center flexibility and so on. NetApp Clustered Data ONTAP suffers from an HTTPS session...

Unitrends Backup Privilege Access Control Vulnerability

Unitrends Backup UB is a set of data protection software from the American company Unitrends. The software provides data backup, data recovery and deduplication functions. A security vulnerability exists in session logic in versions of UB prior to 10.0.0. A remote attacker can exploit this...