615 matches found
CVE-2022-36179
Fusiondirectory 1.3 suffers from Improper Session Handling...
UBUNTU-CVE-2022-36179
Fusiondirectory 1.3 suffers from Improper Session Handling...
Design/Logic Flaw
Fusiondirectory 1.3 suffers from Improper Session Handling...
CVE-2022-36179
Fusiondirectory 1.3 suffers from Improper Session Handling...
PT-2022-23245 · Unknown · Fusiondirectory
Name of the Vulnerable Software and Affected Versions: Fusiondirectory version 1.3 Description: The issue is related to improper session handling. Recommendations: For Fusiondirectory version 1.3, at the moment, there is no information about a newer version that contains a fix for this issue...
CVE-2022-36179
Removed by vendor...
CVE-2022-36179: Insufficient Session Expiration
Fusiondirectory 1.3 suffers from Improper Session Handling...
CVE-2022-36179
Fusiondirectory 1.3 suffers from Improper Session Handling...
CVE-2022-36179
Fusiondirectory 1.3 suffers from Improper Session Handling...
CVE-2022-36179
Fusiondirectory 1.3 suffers from Improper Session Handling...
CVE-2022-36179
CVE-2022-36179 affects Fusiondirectory 1.3 and is due to Improper Session Handling. The connected advisories indicate a vulnerability in Fusiondirectory 1.3 requiring a package update; Mageia MGASA-2023-0352 notes updated fusiondirectory packages fix the issues, and Debian DLA-3487/DLA-3487-1 ref...
CVE-2022-27626
A vulnerability regarding concurrent execution using shared resource with improper synchronization 'Race Condition' is found in the session processing functionality of Out-of-Band OOB Management. This allows remote attackers to execute arbitrary commands via unspecified vectors. The following...
PT-2022-18532 · Synology · Synology Diskstation Manager
Name of the Vulnerable Software and Affected Versions: Synology DiskStation Manager DSM versions prior to 7.1.1-42962-2 Description: A race condition vulnerability exists in the session processing functionality of Out-of-Band OOB Management, allowing remote attackers to execute arbitrary commands...
Exposure of Data Element to Wrong Session
Overview johnpbloch/wordpress-core is a web software you can use to create a website or blog. Affected versions of this package are vulnerable to Exposure of Data Element to Wrong Session due to the improper handling of user session states. An attacker can escalate privileges and perform...
Denial Of Service (DoS)
wolfSSL is vulnerable to denial of service. The vulnerability exists when client connects to a wolfSSL server and SSLclear due to improper session handling which allows an attacker to cause an application crash...
Symmetricom SyncServer Unauthenticated Remote Command Execution
This module exploits an unauthenticated command injection vulnerability in /controller/ping.php. The S100 through S350 End of Life models should be vulnerable to unauthenticated exploitation due to a session handling vulnerability. Later models require authentication which is not provided in this...
Improper user session handling in filegator
FileGator prior to version 7.8.0 is vulnerable to session fixation...
freeCap CAPTCHA extension for TYPO3 has vulnerability in the session handling feature
Unspecified vulnerability in the session handling feature in freeCap CAPTCHA srfreecap extension 1.2.0 and earlier for TYPO3 has unknown impact and attack vectors...
GHSA-M8C5-5G3H-JJFG freeCap CAPTCHA extension for TYPO3 has vulnerability in the session handling feature
Unspecified vulnerability in the session handling feature in freeCap CAPTCHA srfreecap extension 1.2.0 and earlier for TYPO3 has unknown impact and attack vectors...