Search Vulnerabilities

SenseLive X3050 Insufficient session expiration

OpenClaw < 2026.3.31 - Incomplete WebSocket Session Termination in device.token.rotate

IBM Guardium Data Protection is affected by multiple vulnerabilities

Insufficient Session Expiration in GitLab

Quay: red hat quay: authentication bypass allows privileged actions without valid credentials

pyLoad has Stale Session Privilege After Role/Permission Change (Privilege Revocation Bypass)

DSF: Missing Session Timeout for OIDC Sessions

blueprintUE: Active Sessions Are Not Invalidated After Password Change or Reset

GoAnywhere MFT SAML Sessions do not redirect to logout URL on session timeout

Improper Token Invalidation in WSO2 Identity Server Allows Access After Account Lock

OAuth2 Proxy: Session cookie not cleared when rendering sign-in page

Vikunja Link Share JWT tokens remain valid for 72 hours after share deletion or permission downgrade

Apache Airflow: Airflow Logout Not Invalidating JWT

Insufficient Session Expiration in parisneo/lollms

Papra Does Not Reject Expired API Keys

runZero Platform session timeout failure

listmonk: Active sessions remain valid after password reset and password change

Multiple vulnerabilities have been addressed in IBM Aspera Shares

CI4MS: Account Deactivation Module Full Persistent Unauthorized Access for All‑Roles via Improper Session Invalidation (Logic Flaw)

CI4MS: Account Deletion Module Full Persistent Unauthorized Access for All‑Roles via Improper Session Invalidation (Logic Flaw)