Skip to contentCWE-613 vulnerabilities
- engineers online portal project online portal, sourcecodester engineers online portal +1 moreSourceCodester Engineers Online Portal session expirationCVE-2024-03503.1 Low
- engineers online portal project online portal, sourcecodester engineers online portal +1 moreSourceCodester Engineers Online Portal Password Change change_password_teacher.php session expirationCVE-2024-02604.3 Medium
- oneidentity password managerOne Identity Password Manager before 5.13.1 allows Kiosk Escape. This product enables users to...CVE-2023-517728.8 High
- redhat satellite, red hat satellite 6.15 for rhel 8 +1 moreSatellite: arithmetic overflow in satelliteCVE-2023-43207.6 High
- schedmd slurmAn issue was discovered in SchedMD Slurm 23.02.x and 23.11.x. There is Incorrect Access Control...CVE-2023-49935Fix available8.8 High
- zstackZStack Cloud version 3.10.38 and before allows unauthenticated API access to the list of active job UUIDs and the session ID for each of these. This leads to privilege escalation.CVE-2023-463268.8 High
- azukaar cosmos-server, cosmos-cloud cosmos server +1 moreJwttoken in Cosmos server never expires after password changed and logging outCVE-2023-490918.8 High
- yt-dlpGeneric Extractor MITM Vulnerability in yt-dlpCVE-2023-46121Fix available5.0 Medium
- datahub-project datahubSession Expiration Misconfiguration in datahubCVE-2023-476284.2 Medium
- pkp pkp/pkp-lib, web application library +1 moreInsufficient Session Expiration in pkp/pkp-libCVE-2023-58894.3 Medium
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreInsufficient Session Expiration in thorsten/phpmyfaqCVE-2023-5865Fix available7.6 High
- elenos etg150 fm, etg150 firmware +1 moreInsufficient session expiration in Elenos ETG150 FM Transmitter v3.12 allows attackers to...CVE-2023-396955.3 Medium
- linkstack, linkstackorg linkstackorg/linkstack +1 moreInsufficient Session Expiration in linkstackorg/linkstackCVE-2023-58384.1 Medium
- ibm websphere application server libertyIBM WebSphere Application Server session fixationCVE-2023-461584.9 Medium
- hcl software compass, hcltech hcl compass +1 moreAn insufficient session expiration vulnerability affects HCL CompassCVE-2023-375047.1 High
- ibm security verify privilege, security verify privilege on-premises +1 moreIBM Security Verify Privilege information disclosureCVE-2021-205815.3 Medium
- engelsystemSession is not expiring after password reset in EngelsystemCVE-2023-456593.6 Low
- fortinet fortiedrA insufficient session expiration in Fortinet FortiEDR version 5.0.0 through 5.0.1 allows...CVE-2023-333037.7 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +17 more +19 moreBIG-IP iControl REST vulnerabilityCVE-2023-427687.2 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +16 more +18 moreMulti-blade VIPRION Configuration utility session cookie vulnerabilityCVE-2023-405378.1 High
- siemens qms automotiveA vulnerability has been identified in QMS Automotive (All versions < V12.39). The QMS.Mobile...CVE-2023-407323.9 Low
- argoproj argo cd, argo-cd +1 moreArgo CD web terminal session doesn't expireCVE-2023-40025Fix available4.7 Medium
- node-saml, node saml project saml +1 more@node-saml/node-saml's validatePostRequestAsync does not include checkTimestampsValidityErrorCVE-2023-40178Fix available5.3 Medium
- fobybus social-media-skeletonInsufficient Session Expiration in fobybus/social-media-skeletonCVE-2023-401746.8 Medium
- esds emagic data center management suite, esds.co emagic data center management +1 moreInsufficient Session Expiration Vulnerability in Emagic Data Center Management SuiteCVE-2023-375707.2 High
- admidio, admidio admidio/admidio +1 moreInsufficient Session Expiration in admidio/admidioCVE-2023-4190Fix available6.5 Medium
- answer, answerdev answerdev/answer +1 moreInsufficient Session Expiration in answerdev/answerCVE-2023-4126Fix available4.1 Medium
- fossbilling, fossbilling fossbilling/fossbilling +1 moreInsufficient Session Expiration in fossbilling/fossbillingCVE-2023-40053.8 Low
- getkirby kirbyKirby vulnerable to Insufficient Session Expiration after a password changeCVE-2023-38489Fix available7.3 High
- cal cal.comCal.com not expiring old sessions after enabling 2FACVE-2023-379196.5 Medium
- fortinet fortiosAn insufficient session expiration in Fortinet FortiOS 7.0.0 - 7.0.12 and 7.2.0 - 7.2.4 allows an...CVE-2023-280014.1 Medium
- graylog, graylog2 graylog2-server +1 moreUser session is still usable after logout in graylog2-serverCVE-2023-41041Fix available2.6 Low
- ateme flamingo xl firmware, flamingo xs firmware +1 moreAn issue in Ateme Flamingo XL v.3.6.20 and XS v.3.6.5 allows a remote authenticated attacker to...CVE-2023-362528.8 High
- siren investigateIn Siren Investigate before 13.2.2, session keys remain active even after logging out.CVE-2023-358579.8 Critical
- mattermostDeactivated user can retain access using oauth2 apiCVE-2023-27886.2 Medium
- ibm security guardiumIBM Security Guardium session fixationCVE-2023-00416.3 Medium
- nextcloud server, kiteworks security-advisories +1 moreUser session not correctly destroyed on logoutCVE-2023-323187.2 High
- apache inlongApache InLong: Insufficient Session Expiration in InLongCVE-2023-31065Fix available9.1 Critical
- jenkins wso2 oauth, jenkins project wso2 oauth plugin +1 moreJenkins WSO2 Oauth Plugin Session Fixation vulnerabilityCVE-2023-330055.4 Medium
- dhis2 dhis2-core, dhis 2 +1 moreDHIS2 Core unrestricted session cookies with Personal Access TokensCVE-2023-311394.3 Medium
- openprojectOpenProject user sessions not terminated after activation of 2FACVE-2023-31140Fix available4.8 Medium
- ibm cloud pak system software suite, cloud pak system +1 moreIBM Cloud Pak System Software Suite session fixationCVE-2020-49144.2 Medium
- ibm cognos command centerIBM Cognos Command Center information disclosureCVE-2022-387074.0 Medium
- aigital wireless-n repeater mini router firmwareAn issue in the time-based authentication mechanism of Aigital Aigital Wireless-N Repeater...CVE-2023-30403EPSS 14.9%7.5 High
- concretecms concrete cmsConcrete CMS missing secure cookie parametersCVE-2023-28472Fix available5.3 Medium
- schneider electric ecostruxure power monitoring expertA CWE-613: Insufficient Session Expiration vulnerability exists that could allow an attacker...CVE-2023-280036.7 Medium
- online graduate tracer system project graduate tracer system, sourcecodester online graduate tracer system +1 moreSourceCodester Online Graduate Tracer System session expirationCVE-2023-18544.7 Medium
- firefly-iii firefly-iii/firefly-iii, firefly iii +1 moreInsufficient Session Expiration in firefly-iii/firefly-iiiCVE-2023-1788Fix available5.4 Medium
- cloudfoundry cloud foundry, user account and authentication +1 moreThis disclosure regards a vulnerability related to UAA refresh tokens and external identity...CVE-2023-209034.3 Medium
- rapid7 insightvmRapid7 InsightVM Insufficient Session ExpirationCVE-2021-38445.7 Medium
- Show moreLoading…