Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Vulnerability List
Found 58 results
CVE IDTitleVendorProductSeverityCVSS ScorePublished AtAI Analysis
CVE-2026-5085 Solstice::Session versions through 1440 for Perl generates session ids insecurely MCRAWFORSolstice::Session 超危 -2026-04-13 06:56:15 Deep Dive
CVE-2026-39324 Rack::Session::Cookie secrets: decrypt failure fallback enables secretless session forgery and Marshal deserialization rackrack-session--2026-04-07 18:13:29 Deep Dive
CVE-2026-5087 PAGI::Middleware::Session::Store::Cookie versions through 0.001003 for Perl generates random bytes insecurely JJNAPIORKPAGI::Middleware::Session::Store::Cookie--2026-03-31 16:03:08 Deep Dive
CVE-2026-3256 HTTP::Session versions through 0.53 for Perl defaults to using insecurely generated session ids KTATHTTP::Session 中危 -2026-03-28 18:52:40 Deep Dive
CVE-2014-125112 Plack::Middleware::Session::Cookie versions through 0.21 for Perl allows remote code execution MIYAGAWAPlack::Middleware::Session::Cookie--2026-03-26 02:04:10 Deep Dive
CVE-2025-40931 Apache::Session::Generate::MD5 versions through 1.94 for Perl create insecure session id CHORNYApache::Session::Generate::MD5 超危 -2026-03-05 01:41:10 Deep Dive
CVE-2025-40926 Plack::Middleware::Session::Simple versions before 0.05 for Perl generates session ids insecurely KAZEBUROPlack::Middleware::Session::Simple 超危 -2026-03-05 01:24:34 Deep Dive
CVE-2025-21589 Session Smart Router, Session Smart Conductor, WAN Assurance Router: API Authentication Bypass vulnerability Juniper NetworksSession Smart Router Critical 9.8 2026-01-27 20:32:13 Deep Dive
CVE-2013-10031 Plack::Middleware::Session versions before 0.17 for Perl may be vulnerable to HMAC comparison timing attacks MIYAGAWAPlack::Middleware::Session--2025-12-09 00:12:36 Deep Dive
CVE-2025-66573 Solstice Pod API Session Key Extraction via API Endpoint mersiveSolstice Pod API Session Key Extraction via API Endpoint--2025-12-04 20:45:14 Deep Dive
CVE-2025-20351 Cisco Desk Phone 9800 Series, IP Phone 7800 and 8800 Series, and Video Phone 8875 with SIP Firmware Cross-Site Scripting Vulnerability CiscoCisco Session Initiation Protocol (SIP) Software Medium 6.1 2025-10-15 16:15:19 Deep Dive
CVE-2025-20350 Cisco Desk Phone 9800 Series, IP Phone 7800 and 8800 Series, and Video Phone 8875 with SIP Firmware Denial of Service Vulnerability CiscoCisco Session Initiation Protocol (SIP) Software High 7.5 2025-10-15 16:15:10 Deep Dive
CVE-2025-20335 Cisco Desk Phone 9800 Series, IP Phone 7800 and 8800 Series, and Video Phone 8875 with SIP Firmware Information Arbitrary File Write Vulnerability CiscoCisco Session Initiation Protocol (SIP) Software Medium 5.3 2025-09-03 17:41:06 Deep Dive
CVE-2025-20336 Cisco Desk Phone 9800 Series, IP Phone 7800 and 8800 Series, and Video Phone 8875 with SIP Firmware Information Disclosure Vulnerability CiscoCisco Session Initiation Protocol (SIP) Software Medium 5.3 2025-09-03 17:41:01 Deep Dive
CVE-2025-49048 WordPress Inspectlet – User Session Recording and Heatmaps plugin <= 2.0 - Cross Site Scripting (XSS) vulnerability inspectletInspectlet &#8211; User Session Recording and Heatmaps Medium 5.9 2025-08-14 10:34:19 Deep Dive
CVE-2025-40924 Catalyst::Plugin::Session before version 0.44 for Perl generates session ids insecurely HAARGCatalyst::Plugin::Session--2025-07-17 13:33:44 Deep Dive
CVE-2025-40923 Plack-Middleware-Session before version 0.35 for Perl generates session ids insecurely MIYAGAWAPlack::Middleware::Session--2025-07-16 13:05:04 Deep Dive
CVE-2025-46336 Rack session gets restored after deletion rackrack-session Medium 4.2 2025-05-08 19:26:02 Deep Dive
CVE-2025-32612 WordPress User Session Synchronizer plugin <= 1.4.0 - CSRF to Stored XSS vulnerability rafasashiUser Session Synchronizer High 7.1 2025-04-09 16:09:29 Deep Dive
CVE-2025-20158 Cisco Video Phone 8875 and Desk Phone 9800 Series Information Disclosure Vulnerability CiscoCisco Session Initiation Protocol (SIP) Software Medium 4.4 2025-02-19 16:06:01 Deep Dive