476 matches found
HPESBNW04396 rev.2 - Aruba EdgeConnect Enterprise Orchestrator, Multiple Vulnerabilities
Potential Security Impact: Remote: Arbitrary Code Execution, Authentication Bypass, Cross-Site Scripting XSS, Escalation of Privilege, SQL Injection, Session Reuse SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba EdgeConnect Enterprise Orchestration Software see details in...
SUSE-SU-2022:3529-1 Security update for sendmail
This update for sendmail fixes the following issues: - Fixed SMTP session reuse leading to STARTTLS not used even if offered bsc1164084...
PT-2022-37523 · Sendmail · Sendmail
Name of the Vulnerable Software and Affected Versions: sendmail affected versions not specified Description: The issue is related to SMTP session reuse, which can lead to STARTTLS not being used even if it is offered. Recommendations: At the moment, there is no information about a newer version...
Wolfssl code issue vulnerabilities
Wolfssl CyaSSL is a small, portable embedded SSL programming library for embedded systems developers from Wolfssl, Inc. in the United States. A security vulnerability exists in Wolfssl versions prior to 5.5.0 that stems from the server crashing due to a segmentation error when a TLS 1.3 client...
Fortinet’s various products have code-related issues and vulnerabilities.
Fortinet FortiOS and others are products of Fortinet, Inc.Fortinet FortiOS is a dedicated security operating system on the FortiGate network security platform.Fortinet FortiProxy is Fortinet FortiSwitchManager is a network switch management tool designed to help organizations manage their...
CVE-2022-24042
A vulnerability has been identified in Desigo DXR2 All versions V01.21.142.5-22, Desigo PXC3 All versions V01.21.142.4-18, Desigo PXC4 All versions V02.20.142.10-10884, Desigo PXC5 All versions V02.20.142.10-10884. The web application returns an AuthToken that does not expire at the defined auto...
envoy: Incorrect configuration handling allows mTLS session re-use without re-validation
A flaw was found in envoy. When certificate validation settings are changed, incorrect configuration handling allows TLS session reuse without revalidation...
envoy: Incorrect configuration handling allows mTLS session re-use without re-validation
A flaw was found in envoy. When certificate validation settings are changed, incorrect configuration handling allows TLS session reuse without revalidation...
Qualcomm chip resource management error vulnerability
A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way to miniaturize circuits mainly semiconductor devices, but also passive components, etc., and from time to time are manufactured on the surface of semiconductor wafers. A resource management error vulnerability exists in Qualcomm chip...
CVE-2022-24582
Accounting Journal Management 1.0 is vulnerable to XSS-PHPSESSID-Hijacking. The parameter manageuser from User lists is vulnerable to XSS-Stored and PHPSESSID attacks. The malicious user can attack the system by using the already session which he has from inside and outside of the network...
CVE-2022-21654
A flaw was found in envoy. When certificate validation settings are changed, incorrect configuration handling allows TLS session reuse without revalidation...
PT-2022-9687
Name of the Vulnerable Software and Affected Versions Ifme versions 1.0.0 to 7.33.2 Description The issue arises from improper session invalidation after a user logs out, allowing an attacker to reuse admin cookies through local or network access, or other potential attacks. Recommendations For...
Incomplete Cleanup
An issue exsits in Gitea through 1.15.7, which could let a malicious user gain privileges due to client side cookies not being deleted and the session remains valid on the server side for reuse...
CVE-2021-45330
An issue exsits in Gitea through 1.15.7, which could let a malicious user gain privileges due to client side cookies not being deleted and the session remains valid on the server side for reuse...
CVE-2021-45330
An issue exsits in Gitea through 1.15.7, which could let a malicious user gain privileges due to client side cookies not being deleted and the session remains valid on the server side for reuse...
CVE-2021-45330
An issue exsits in Gitea through 1.15.7, which could let a malicious user gain privileges due to client side cookies not being deleted and the session remains valid on the server side for reuse...
Code injection
An issue exsits in Gitea through 1.15.7, which could let a malicious user gain privileges due to client side cookies not being deleted and the session remains valid on the server side for reuse...
CVE-2021-45330
Summary: In Gitea up to 1.15.7, a client-side cookie handling issue leaves sessions reusable on the server, enabling a malicious user to gain privileges. The root cause is inadequate deletion/cleanup of cookies that maintain server-side sessions. Impact is described as privilege gain with high CV...
CVE-2021-45330: Incomplete Cleanup
An issue exsits in Gitea through 1.15.7, which could let a malicious user gain privileges due to client side cookies not being deleted and the session remains valid on the server side for reuse...
