Lucene search
+L

1553 matches found

Vulnrichment
Vulnrichment
added 2023/11/01 12:00 a.m.14 views

CVE-2023-5889 Insufficient Session Expiration in pkp/pkp-lib

Insufficient Session Expiration in GitHub repository pkp/pkp-lib prior to 3.3.0-16...

4.3CVSS6.8AI score0.0044EPSS
SaveExploits1References2
CVE
CVE
added 2023/11/01 12:00 a.m.58 views

CVE-2023-5889

CVE-2023-5889 affects pkp/pkp-lib in versions prior to 3.3.0-16. The issue is described as insufficient session expiration time (session timeout) in the PKP Web Application Library used by PKP projects. Multiple sources (NVD, Red Hat, OSV, CVE lists, PT Security) corroborate the affected version ...

8.2CVSS5AI score0.0044EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
added 2023/11/01 12:00 a.m.9 views

PKP Web Application Library Code Issue Vulnerability

The PKP Web Application Library is a library shared by PKP's Open Journal System OJS, Open Conference System OCS, Open Monograph Press OMP, Open Preprint System OPS, and Open Harvester System OHS. A code issue vulnerability exists in the PKP Web Application Library prior to version 3.3.0-16, whic...

8.2CVSS7AI score0.0044EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2023/10/31 11:15 p.m.6 views

CVE-2023-39695

Insufficient session expiration in Elenos ETG150 FM Transmitter v3.12 allows attackers to arbitrarily change transmitter configuration and data after logging out...

5.3CVSS5.8AI score0.00402EPSS
SaveExploits1References2
OSV
OSV
added 2023/10/31 11:15 p.m.7 views

CVE-2023-39695

Insufficient session expiration in Elenos ETG150 FM Transmitter v3.12 allows attackers to arbitrarily change transmitter configuration and data after logging out...

5.3CVSS5.8AI score0.00402EPSS
SaveExploits1References1
NVD
NVD
added 2023/10/31 11:15 p.m.21 views

CVE-2023-39695

Insufficient session expiration in Elenos ETG150 FM Transmitter v3.12 allows attackers to arbitrarily change transmitter configuration and data after logging out...

5.3CVSS5.3AI score0.00402EPSS
SaveExploits1References1
OSV
OSV
added 2023/10/31 3:31 a.m.19 views

GHSA-F728-PRHW-2G68 Insufficient Session Expiration in thorsten/phpmyfaq

Insufficient Session Expiration in GitHub repository thorsten/phpmyfaq prior to 3.2.2...

7.6CVSS8.5AI score0.00576EPSS
SaveExploits1References4
NVD
NVD
added 2023/10/31 1:15 a.m.28 views

CVE-2023-5865

Insufficient Session Expiration in GitHub repository thorsten/phpmyfaq prior to 3.2.2...

9.8CVSS8.7AI score0.00576EPSS
SaveExploits1References2
Prion
Prion
added 2023/10/31 1:15 a.m.17 views

Session fixation

Insufficient Session Expiration in GitHub repository thorsten/phpmyfaq prior to 3.2.2...

6.5CVSS6.2AI score0.00576EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2023/10/31 12:00 a.m.31 views

CVE-2023-5865 Insufficient Session Expiration in thorsten/phpmyfaq

Insufficient Session Expiration in GitHub repository thorsten/phpmyfaq prior to 3.2.2...

7.6CVSS9.7AI score0.00576EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2023/10/31 12:00 a.m.13 views

CVE-2023-5865 Insufficient Session Expiration in thorsten/phpmyfaq

Insufficient Session Expiration in GitHub repository thorsten/phpmyfaq prior to 3.2.2...

7.6CVSS6.7AI score0.00576EPSS
SaveExploits1References2
CVE
CVE
added 2023/10/31 12:00 a.m.72 views

CVE-2023-5865

CVE-2023-5865 affects thorsten/phpmyfaq prior to 3.2.2. The root cause is insufficient session expiration, allowing old sessions to remain usable. Impact is high/critical per sources (NVD and CNA metrics note high confidentiality/integrity/availability implications). The vulnerability is mitigate...

9.8CVSS8.5AI score0.00576EPSS
SaveExploits1References2Affected Software1
OSV
OSV
added 2023/10/31 12:00 a.m.15 views

CVE-2023-5865 Insufficient Session Expiration in thorsten/phpmyfaq

Insufficient Session Expiration in GitHub repository thorsten/phpmyfaq prior to 3.2.2...

7.6CVSS7.8AI score
SaveExploits0References4
Cvelist
Cvelist
added 2023/10/31 12:00 a.m.31 views

CVE-2023-39695

Insufficient session expiration in Elenos ETG150 FM Transmitter v3.12 allows attackers to arbitrarily change transmitter configuration and data after logging out...

5.6AI score0.00402EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2023/10/31 12:00 a.m.3 views

PT-2023-32384 · Phpmyfaq · Phpmyfaq

Name of the Vulnerable Software and Affected Versions: phpmyfaq versions prior to 3.2.2 Description: The issue is related to insufficient session expiration. Recommendations: For versions prior to 3.2.2, update to version 3.2.2 or later to resolve the issue...

9.8CVSS7.4AI score0.00576EPSS
SaveExploits1References7
Vulnrichment
Vulnrichment
added 2023/10/31 12:00 a.m.11 views

CVE-2023-39695

Insufficient session expiration in Elenos ETG150 FM Transmitter v3.12 allows attackers to arbitrarily change transmitter configuration and data after logging out...

6.9AI score0.00402EPSS
SaveExploits1References1
CVE
CVE
added 2023/10/31 12:00 a.m.61 views

CVE-2023-39695

CVE-2023-39695 affects Elenos ETG150 FM Transmitter v3.12. The issue is insufficient session expiration, enabling an attacker to arbitrarily change transmitter configuration and data after logout. Affected component is the session handling of the device; impact is unauthorized configuration/data ...

5.3CVSS5.2AI score0.00402EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/10/31 12:00 a.m.14 views

PT-2023-32396 · Pkp-Lib · Pkp-Lib

Name of the Vulnerable Software and Affected Versions: pkp/pkp-lib versions prior to 3.3.0-16 Description: The issue is related to insufficient session expiration in the GitHub repository pkp/pkp-lib. Recommendations: For versions prior to 3.3.0-16, update to version 3.3.0-16 or later to resolve...

8.2CVSS4.5AI score0.0044EPSS
SaveExploits1References7
FreeBSD
FreeBSD
added 2023/10/31 12:00 a.m.21 views

phpmyfaq -- multiple vulnerabilities

phpmyfaq developers report: XSS Insufficient session expiration...

9.8CVSS6.9AI score0.01096EPSS
SaveExploits2References4
CNNVD
CNNVD
added 2023/10/31 12:00 a.m.11 views

phpMyFAQ 代码问题漏洞

phpMyFAQ is a multi-language, fully database-driven FAQ system. An access control error vulnerability exists in versions prior to phpMyFAQ 3.2.2, which stems from the presence of insufficient session expiration. An attacker can exploit this vulnerability to still use old sessions...

9.8CVSS6.7AI score0.00576EPSS
SaveExploits1References3
Rows per page
Query Builder