phpmyfaq -- multiple vulnerabilities

phpmyfaq developers report: XSS Insufficient session expiration...

phpMyFAQ 代码问题漏洞

phpMyFAQ is a multi-language, fully database-driven FAQ system. An access control error vulnerability exists in versions prior to phpMyFAQ 3.2.2, which stems from the presence of insufficient session expiration. An attacker can exploit this vulnerability to still use old sessions...

PT-2023-27074 · Elenos · Elenos Etg150 Fm Transmitter

Name of the Vulnerable Software and Affected Versions: Elenos ETG150 FM Transmitter version 3.12 Description: The issue is related to insufficient session expiration, allowing attackers to change transmitter configuration and data after a user has logged out. Recommendations: For Elenos ETG150 FM...

CVE-2023-5838

Insufficient Session Expiration in GitHub repository linkstackorg/linkstack prior to v4.2.9...

CVE-2023-5838 Insufficient Session Expiration in linkstackorg/linkstack

Insufficient Session Expiration in GitHub repository linkstackorg/linkstack prior to v4.2.9...

CVE-2023-5838

CVE-2023-5838 describes an issue in LinkStack before version 4.2.9 where sessions are not expired after a password change. The vulnerability affects the LinkStack repository on GitHub (linkstackorg/linkstack) and is caused by insufficient session expiration, leading to potential continued use of ...

CVE-2023-5838 Insufficient Session Expiration in linkstackorg/linkstack

Insufficient Session Expiration in GitHub repository linkstackorg/linkstack prior to v4.2.9...

CVE-2023-5838 Insufficient Session Expiration in linkstackorg/linkstack

Insufficient Session Expiration in GitHub repository linkstackorg/linkstack prior to v4.2.9...

LinkStack Code Issues Vulnerabilities

LinkStack is a unique platform from LinkStack Open Source that provides an efficient solution for managing and sharing links online. A code issue vulnerability exists in versions prior to LinkStack v4.2.9 that stems from an insufficient setting of the session expiration time after a password chan...

IBM Security Verify Privilege Manager Access Control Error Vulnerability

IBM Security Verify Privilege Manager is a security management software from International Business Machines IBM for endpoint privilege management and application control in corporate environments. The software stops unintentional downloads of malware and ransomware from attacking applications by...

CVE-2023-37504 An insufficient session expiration vulnerability affects HCL Compass

HCL Compass is vulnerable to failure to invalidate sessions. The application does not invalidate authenticated sessions when the log out functionality is called. If the session identifier can be discovered, it could be replayed to the application and used to impersonate the user...

CVE-2023-37504 An insufficient session expiration vulnerability affects HCL Compass

HCL Compass is vulnerable to failure to invalidate sessions. The application does not invalidate authenticated sessions when the log out functionality is called. If the session identifier can be discovered, it could be replayed to the application and used to impersonate the user...

CVE-2021-20581

IBM Security Verify Privilege On-Premises 11.5 could allow a user to obtain sensitive information due to insufficient session expiration. IBM X-Force ID: 199324...

CVE-2021-20581

IBM Security Verify Privilege On-Premises 11.5 could allow a user to obtain sensitive information due to insufficient session expiration. IBM X-Force ID: 199324...

Session fixation

IBM Security Verify Privilege On-Premises 11.5 could allow a user to obtain sensitive information due to insufficient session expiration. IBM X-Force ID: 199324...

CVE-2021-20581 IBM Security Verify Privilege information disclosure

IBM Security Verify Privilege On-Premises 11.5 could allow a user to obtain sensitive information due to insufficient session expiration. IBM X-Force ID: 199324...

CVE-2021-20581 IBM Security Verify Privilege information disclosure

IBM Security Verify Privilege On-Premises 11.5 could allow a user to obtain sensitive information due to insufficient session expiration. IBM X-Force ID: 199324...

Fortinet FortiEDR Access Control Error Vulnerability

Fortinet FortiEDR is an endpoint security solution built from the ground up by Fortinet. Fortinet FortiEDR suffers from an Access Control Error vulnerability that stems from insufficient handling of session expiration times, which can be exploited by an attacker to execute unauthorized code or...

CVE-2023-45659 Session is not expiring after password reset in Engelsystem

Engelsystem is a shift planning system for chaos events. If a users' password is compromised and an attacker gained access to a users' account, i.e., logged in and obtained a session, an attackers' session is not terminated if the users' account password is reset. This vulnerability has been fixe...

PT-2023-12035 · Ibm · Ibm Security Verify Privilege On-Premises

Name of the Vulnerable Software and Affected Versions: IBM Security Verify Privilege On-Premises version 11.5 Description: The issue allows a user to obtain sensitive information due to insufficient session expiration. Recommendations: For IBM Security Verify Privilege On-Premises version 11.5,...