Fallos del tipo CWE-613

394 resultados
CVE-2023-37570HIGHInsufficient Session Expiration Vulnerability in Emagic Data Center Management SuiteEPSS 0.5%CVE-2023-42768HIGHBIG-IP iControl REST vulnerabilityEPSS 0.5%CVE-2023-4320HIGHSatellite: arithmetic overflow in satelliteEPSS 0.5%CVE-2022-2782CRITICALIn affected versions of Octopus Server it is possible for a session token to be valid indefinitely due to improper validation of the sessionEPSS 0.5%CVE-2024-0260MEDIUMSourceCodester Engineers Online Portal Password Change change_password_teacher.php session expirationEPSS 0.5%CVE-2023-51772HIGHOne Identity Password Manager before 5.13.1 allows Kiosk Escape. This product enables users to reset their Active Directory passwords on theEPSS 0.5%CVE-2024-45386HIGHA vulnerability has been identified in SIMATIC PCS neo V4.0 (All versions), SIMATIC PCS neo V4.1 (All versions < V4.1 Update 2), SIMATIC PCSEPSS 0.5%CVE-2024-21722MEDIUM[20240201] - Core - Insufficient session expiration in MFA management viewsEPSS 0.5%CVE-2024-12667MEDIUMInvoicePlane view session expirationEPSS 0.5%CVE-2023-4190MEDIUMInsufficient Session Expiration in admidio/admidioEPSS 0.5%CVE-2023-5838MEDIUMInsufficient Session Expiration in linkstackorg/linkstackEPSS 0.5%CVE-2024-0008MEDIUMPAN-OS: Insufficient Session Expiration Vulnerability in the Web InterfaceEPSS 0.5%CVE-2026-34570HIGHCI4MS: Account Deletion Module Full Persistent Unauthorized Access for All‑Roles via Improper Session Invalidation (Logic Flaw)EPSS 0.5%CVE-2026-34572HIGHCI4MS: Account Deactivation Module Full Persistent Unauthorized Access for All‑Roles via Improper Session Invalidation (Logic Flaw)EPSS 0.5%CVE-2022-50692MEDIUMSOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Insufficient Session Expiration VulnerabilityEPSS 0.5%CVE-2024-31447MEDIUMShopware has Improper Session Handling in store-apiEPSS 0.5%CVE-2025-53826HIGHFileBrowser Has Insecure JWT Handling Which Allows Session Replay Attacks after LogoutEPSS 0.5%CVE-2024-22389HIGHBIG-IP iControl REST API VulnerabilityEPSS 0.5%CVE-2024-30262MEDIUMContao's remember-me tokens will not be cleared after a password changeEPSS 0.5%CVE-2025-54592HIGHFreshRSS has Incomplete Session Termination on LogoutEPSS 0.5%