Fallos del tipo CWE-613

394 resultados
CVE-2026-46554LOWNocoDB: Stale Auth Cache After API Token DeletionEPSS 0.2%CVE-2025-2596LOWSession logout can be overwritten by long lasting requestEPSS 0.2%CVE-2025-62174LOWMastodon allows continued access after password reset via CLIEPSS 0.2%CVE-2025-32441MEDIUMRack session gets restored after deletionEPSS 0.2%CVE-2025-63226MEDIUMThe Sencore SMP100 SMP Media Platform (firmware versions V4.2.160, V60.1.4, V60.1.29) is vulnerable to session hijacking due to improper sesEPSS 0.2%CVE-2025-59335HIGHCubeCart Session Not Invalidated After Password ChangeEPSS 0.2%CVE-2026-41356LOWOpenClaw < 2026.3.31 - Incomplete WebSocket Session Termination in device.token.rotateEPSS 0.2%CVE-2026-42421LOWOpenClaw < 2026.4.8 - WebSocket Session Persistence via Shared Gateway Token RotationEPSS 0.2%CVE-2025-36377MEDIUMIBM Security QRadar EDR Software has multiple vulnerabilitiesEPSS 0.2%CVE-2025-36376MEDIUMIBM Security QRadar EDR Software has multiple vulnerabilitiesEPSS 0.2%CVE-2026-27968MEDIUMPackistry accepts expired access tokensEPSS 0.2%CVE-2025-4677HIGHIdle session timeout is not configured for multiple open portsEPSS 0.2%CVE-2026-34454LOWOAuth2 Proxy: Session cookie not cleared when rendering sign-in pageEPSS 0.2%CVE-2026-53824MEDIUMMattermost plugin for OpenClaw < 2026.4.24 - Slash Token Revocation Lag via Monitor Refresh DelayEPSS 0.2%CVE-2026-28396MEDIUMNocoDB: Refresh Tokens Not Revoked on Password ResetEPSS 0.2%CVE-2026-0971MEDIUMGoAnywhere MFT SAML Sessions do not redirect to logout URL on session timeoutEPSS 0.2%CVE-2024-1623HIGHInsufficient session timeout vulnerability in Sagemcom routerEPSS 0.2%CVE-2024-49825MEDIUMIBM Robotic Process Automation session fixationEPSS 0.2%CVE-2021-27751MEDIUMHCL Commerce is affected by an Insufficient Session Expiration vulnerability.EPSS 0.2%CVE-2026-1815MEDIUMSession Hijacking in TEİAŞ's Mobile ApplicationEPSS 0.2%