Fallos del tipo CWE-491

4 resultados

CVE-2025-60425HIGHNagios Fusion v2024R1.2 and v2024R2 does not invalidate already existing session tokens when the two-factor authentication mechanism is enabEPSS 0.9%CVE-2024-39069HIGHAn issue in ifood Order Manager v3.35.5 'Gestor de Peddios.exe' allows attackers to execute arbitrary code via a DLL hijacking attack.EPSS 0.6%CVE-2025-63685CRITICALQuark Cloud Drive v3.23.2 has a DLL Hijacking vulnerability. This vulnerability stems from the insecure loading of system libraries. SpecifiEPSS 0.3%CVE-2025-55622MEDIUMReolink v4.54.0.4.20250526 was discovered to contain a task hijacking vulnerability due to inappropriate taskAffinity settings. NOTE: this iEPSS 0.3%