5187 matches found
CVE-2022-34536: Session Fixation
Digital Watchdog DW MEGApix IP cameras A7.2.220211029 allows attackers to access the core log file and perform session hijacking via a crafted session token...
Dell Wyse Management Suite < 3.8 Multiple Vulnerabilities (DSA-2022-134)
The version of Dell Wyse Management Suite installed on the remote host is prior to 3.8. It is, therefore, affected by multiple vulnerabilities as referenced in the DSA-2022-134 advisory. - Wyse Management Suite 3.7 and earlier contains a Sensitive Data Exposure vulnerability. A low privileged...
CVE-2022-33927
Dell Wyse Management Suite 3.6.1 and below contains a Session Fixation vulnerability. A unauthenticated attacker could exploit this by taking advantage of a user with multiple active sessions in order to hijack a user's session...
CVE-2022-22681
Session fixation vulnerability in access control management in Synology Photo Station before 6.8.16-3506 allows remote attackers to bypass security constraint via unspecified vectors...
CVE-2022-22681
Session fixation vulnerability in access control management in Synology Photo Station before 6.8.16-3506 allows remote attackers to bypass security constraint via unspecified vectors...
Session fixation
Session fixation vulnerability in access control management in Synology Photo Station before 6.8.16-3506 allows remote attackers to bypass security constraint via unspecified vectors...
CVE-2022-22681
Synology Photo Station (pre-6.8.16-3506) contains a Session Fixation vulnerability in access control management that can allow remote attackers to bypass security constraints. Affected component: Photo Station; root cause: session fixation. Impact is elevated access by bypassing constraints; expl...
CVE-2022-22681
Session fixation vulnerability in access control management in Synology Photo Station before 6.8.16-3506 allows remote attackers to bypass security constraint via unspecified vectors...
PT-2022-15627
Name of the Vulnerable Software and Affected Versions Synology Photo Station versions prior to 6.8.16-3506 Description The issue allows remote attackers to bypass security constraints via unspecified vectors due to a session fixation vulnerability in access control management. Recommendations For...
CVE-2022-22681: Session Fixation
Session fixation vulnerability in access control management in Synology Photo Station before 6.8.16-3506 allows remote attackers to bypass security constraint via unspecified vectors...
CVE-2022-22681
Session fixation vulnerability in access control management in Synology Photo Station before 6.8.16-3506 allows remote attackers to bypass security constraint via unspecified vectors...
Session Fixation
passport is vulnerable to session fixation. A remote unauthenticated attacker is able to gain access to guest sessions because when a user logs in or logs out, the session is regenerated instead of being closed...
CVE-2022-25896 Session Fixation
This affects the package passport before 0.6.0. When a user logs in or logs out, the session is regenerated instead of being closed...
CVE-2022-25896: Session Fixation
This affects the package passport before 0.6.0. When a user logs in or logs out, the session is regenerated instead of being closed...
Session Fixation
silverstripe/hybridsessions is vulnerable to session fixation. The vulnerability exists because the destroy function of DatabaseStore.php does not properly reset the user session after logging out, allowing an attacker to gain privileges via the client-side cookie...
CVE-2022-24444
Silverstripe silverstripe/framework through 4.10 allows Session Fixation...
CVE-2022-24444
Silverstripe silverstripe/framework through 4.10 allows Session Fixation...
Session fixation
Silverstripe silverstripe/framework through 4.10 allows Session Fixation...
CVE-2022-24444
CVE-2022-24444 affects Silverstripe framework versions 4.10 and earlier. The issue is a session-fixation vulnerability involving the hybridsessions module when the session-manager module is not installed and session IDs are saved to disk; unexpired SessionIDs of logged-out users can still be used...
