Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2026-123292

Persisting API Tokens and Sessions for Removed or Banned Users in JetBrains Datalore

In JetBrains Datalore before 2026.4 aPI tokens and sessions of removed or banned users remained valid

CVSS 3.1 · 2.7 Low EPSS < 1% KEV · Not listed
Vendors
Jetbrains
Products
Datalore
CVE-2026-123283

SSO-Based Account Takeover in JetBrains Datalore Prior to 2026.4

In JetBrains Datalore before 2026.4 account takeover was possible via SSO sign-in to a pre-registered account

CVSS 3.1 · 6.8 Medium EPSS < 1% KEV · Not listed
Vendors
Jetbrains
Products
Datalore
CVE-2026-120997

Improper session invalidation keeps removed or demoted members' open pages and device consoles working at their old role

Improper Session Invalidation vulnerability in the dashboard pages, device console and local shell channels in nerves-hub nerves_hub_web allows an organization member who is removed or given a lower role to keep acting at their old role through anything they had open at the time. The dashboard reads the member's role once when a page mounts, in the assign_org_to_scope hook of NervesHubWeb.Auth, and the console, local shell and device event stream channels check membership once at join. Removing a member or changing their role tells none of them, so open pages keep carrying out actions and open consoles keep running commands on the device until the page reloads or the socket disconnects. The dashboard also opens consoles over NervesHubWeb.UserSocket with a token that holds only the user's id, is accepted for 24 hours, and is not revoked by signing out, which disconnects only the session's LiveViews. Whoever holds a token taken from a page can open consoles as that user, within the user's current membership, until it expires. This issue affects nerves_hub: from 1.0.0 before 2.5.3.

CVSS 4.0 · 2.3 Low EPSS < 1% KEV · Not listed
Vendors
Nerves-hub
Products
Nerves Hub Web