Known Vulnerabilities for Login Session by Myphpscripts
Listed below are 2 of the newest known vulnerabilities associated with "Login Session" by "Myphpscripts".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-63888 json | In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix CRC overread and double-free in... | Not Provided | 2026-07-19 | 2026-07-20 |
| CVE-2026-63094 json | SigNoz through 0.133.0 contains an open redirect vulnerability in the SSO authentication flow that allows unauthenticated att... | Not Provided | 2026-07-17 | 2026-07-21 |
| CVE-2026-62236 json | grav-plugin-login before 3.8.11 contains a cross-site request forgery (CSRF) vulnerability in the login.regenerate2FASecret f... | Not Provided | 2026-07-17 | 2026-07-17 |
| CVE-2026-61503 json | Rejetto HFS 3.0.0 through 3.2.0 returns observably different responses from its login endpoint depending on whether the submi... | Not Provided | 2026-07-13 | 2026-07-15 |
| CVE-2026-61500 json | Rejetto HFS 3.0.0 through 3.2.0 derives its session-cookie signing key from the non-cryptographic Math.random() generator and... | Not Provided | 2026-07-13 | 2026-07-15 |
| CVE-2026-59713 json | Leantime contains an OIDC login CSRF vulnerability in the verifyState() method that unconditionally returns true without vali... | Not Provided | 2026-07-06 | 2026-07-07 |
| CVE-2026-58652 json | luci-app-travelmate (and the travelmate package) contain a privilege-escalation flaw: a LuCI/rpcd session holding the luci-ap... | Not Provided | 2026-07-02 | 2026-07-02 |
| CVE-2026-58450 json | Invoice Ninja through 5.13.26 contains an open redirect vulnerability in the client portal login that allows unauthenticated ... | Not Provided | 2026-06-30 | 2026-07-14 |
| CVE-2026-57850 json | RustDesk before 1.4.9 does not enforce a session's authorized connection scope on the server side, so a peer granted a limite... | Not Provided | 2026-07-10 | 2026-07-20 |
| CVE-2026-56774 json | Kanboard through 1.2.52, fixed in commit 928c68a, UserViewController::removeSession fails to validate the session id paramete... | Not Provided | 2026-06-25 | 2026-07-14 |