EUVD-2025-22542

Malicious code in bioql PyPI...

CVE-2025-31952

HCL iAutomate is affected by an insufficient session expiration. This allows tokens to remain valid indefinitely unless manually revoked, increasing the risk of unauthorized access...

PT-2025-30700 · Hcl · Hcl Iautomate

Name of the Vulnerable Software and Affected Versions: HCL iAutomate affected versions not specified Description: HCL iAutomate is affected by insufficient session expiration. This allows session tokens to remain valid indefinitely unless manually revoked, increasing the risk of unauthorized...

CVE-2024-40702

IBM Cognos Controller 11.0.0 through 11.0.1 and IBM Controller 11.1.0 could allow an unauthorized user to obtain valid tokens to gain access to protected resources due to improper certificate validation...

CVE-2021-36758

The CVE concerns 1Password Connect server prior to 1.2, where insufficient validation during Secrets Automation token creation allows privilege escalation by tokens that exceed a user’s access, limited only by the existing authorizations of the Secret Automation where created. Affected component:...