CWE:
 

Sorry. No results for Bugtraq WLB2

CVEMAP Search Results

CVE
Details
Description
2024-09-09
Waiting for details
CVE-2024-7318
Updating...
 
 
A vulnerability was found in Keycloak. Expired OTP codes are still usable when using FreeOTP when the OTP token period is set to 30 seconds (default). Instead of expiring and deemed unusable around 30 seconds in, the tokens are valid for an additional 30 seconds totaling 1 minute. A one time passcode that is valid longer than its expiration time increases the attack window for malicious actors to abuse the system and compromise accounts. Additionally, it increases the attack surface because at any given time, two OTPs are valid.

 
2024-05-22
Waiting for details
CVE-2024-31893
Updating...
 
 
IBM App Connect Enterprise 12.0.1.0 through 12.0.12.1 could allow an authenticated user to obtain sensitive calendar information using an expired access token. IBM X-Force ID: 288174.

 
Waiting for details
CVE-2024-31895
Updating...
 
 
IBM App Connect Enterprise 12.0.1.0 through 12.0.12.1 could allow an authenticated user to obtain sensitive user information using an expired access token. IBM X-Force ID: 288176.

 
Waiting for details
CVE-2024-31894
Updating...
 
 
IBM App Connect Enterprise 12.0.1.0 through 12.0.12.1 could allow an authenticated user to obtain sensitive user information using an expired access token. IBM X-Force ID: 288175.

 
2023-01-10
Waiting for details
CVE-2022-35401
Updating...
 
 
An authentication bypass vulnerability exists in the get_IFTTTTtoken.cgi functionality of Asus RT-AX82U 3.0.0.4.386_49674-ge182230. A specially-crafted HTTP request can lead to full administrative access to the device. An attacker would need to send a series of HTTP requests to exploit this vulnerability.

 

 

Copyright 2026, cxsecurity.com

 

Back to Top