Export limit exceeded: 425865 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2024-2045

Session 1.17.5 - LFR via chat attachment

Session version 1.17.5 allows obtaining internal application files and public files from the user's device without the user's consent. This is possible because the application is vulnerable to Local File Read via chat attachments.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Opft
Products
Session
CVE-2022-1955

perl-SNMP_Session: lack of adequate security controls may lead to information disclosure

Session 1.13.0 allows an attacker with physical access to the victim's device to bypass the application's password/pin lock to access user data. This is possible due to lack of adequate security controls to prevent dynamic code manipulation.

CVSS 3.1 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Opft
Products
Session