CWE-384: CWE-384

CVE-2023-53775 is an authentication bypass vulnerability in Screen SFT DAB 1.9.3 that allows attackers to change user passwords without proper authent...

This CVE describes a session fixation vulnerability in Apache Tomcat's rewrite valve that allows attackers to hijack user sessions. Attackers can fixa...

HCL MyXalytics has a session fixation vulnerability where attackers can set a victim's session token via crafted URLs. This allows unauthorized access...

IBM Sterling Connect:Express Adapter for Sterling B2B Integrator versions 5.2.0.00 through 5.2.0.12 fails to properly invalidate session IDs after use...

This CVE describes a session fixation vulnerability in givanz Vvveb CMS version 1.0.6.1 that allows attackers to hijack user sessions by fixing sessio...

A session fixation vulnerability in Blood Bank Management System 1.0 allows attackers to hijack user sessions by setting session IDs before authentica...

This vulnerability allows attackers to fix session IDs in CKAN when server-side session storage is configured, enabling session fixation attacks. Atta...

This vulnerability allows an authenticated remote attacker to hijack active user sessions in the AOS-CX OS web management interface, potentially leadi...

A session fixation vulnerability in Akın Software's QR Menu allows attackers to hijack user sessions by fixing session IDs before authentication. Thi...

This vulnerability in Password Pusher allows session hijacking if an attacker captures a user's session cookie before logout. Attackers can then imper...

HCL iAutomate has a session fixation vulnerability where an attacker can hijack a user's authenticated session by fixing their session ID. This allows...

This vulnerability allows authenticated users to bypass zone isolation in Cloud Foundry UAA by reusing session cookies across different identity zones...

A session fixation vulnerability in NGINX OpenID Connect reference implementation allows attackers to bind a victim's session to an attacker-controlle...

This vulnerability in specific TP-LINK routers allows attackers to hijack TCP sessions by exploiting sequence number leakage in NAT-enabled Wi-Fi netw...

This vulnerability in GLPI allows session hijacking when remote authentication via SSO is used. An attacker on the same machine can steal another user...

This vulnerability in EVerest EV charging software allows attackers to exploit other weaknesses by keeping connections alive despite errors. All EVere...

IBM OpenPages with Watson versions 8.3 and 9.0 have a session management vulnerability where chat sessions remain active after user logout. This allow...

This vulnerability allows attackers to perform session fixation attacks on PHPGurukul Boat Booking System 1.0. By manipulating the session_start funct...

This vulnerability in Umbraco CMS allows session persistence after explicit sign-out, meaning users who log out may still have active server sessions....

A session management vulnerability in macOS Voice Control allows users with Voice Control enabled to potentially transcribe another user's activity. T...

This vulnerability in Tutor (Open edX deployment tool) allows local unauthorized attackers to access sensitive information due to missing cache-contro...

This vulnerability in Tenda wireless routers allows attackers to hijack administrative sessions by intercepting login credentials transmitted as sessi...