Known Vulnerabilities for Log-user-session by Open-systems
Listed below are 1 of the newest known vulnerabilities associated with "Log-user-session" by "Open-systems".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-66027 json | Suna before 0.9.102 contains a broken access control vulnerability in the message queue API that allows authenticated attacke... | Not Provided | 2026-07-24 | 2026-07-24 |
| CVE-2026-66009 json | Parse Server versions >= 9.0.0 before 9.10.0-alpha.5 and >= 8.2.2 before 8.6.86 return GraphQL validation error messages that... | Not Provided | 2026-07-24 | 2026-07-24 |
| CVE-2026-64119 json | In the Linux kernel, the following vulnerability has been resolved: l2tp: use list_del_rcu in l2tp_session_unhash An unpriv... | Not Provided | 2026-07-19 | 2026-07-19 |
| CVE-2026-63756 json | SurrealDB versions before 3.1.0 contain a time-of-check/time-of-use race condition in the HTTP /rpc endpoint that allows unau... | Not Provided | 2026-07-20 | 2026-07-21 |
| CVE-2026-63754 json | SurrealDB versions before 3.1.0 contain a denial of service vulnerability where malicious LIVE queries with WHERE clauses tha... | Not Provided | 2026-07-20 | 2026-07-20 |
| CVE-2026-63429 json | HeyForm is an open-source form builder. Prior to version 3.0.0-rc.9, `POST /api/upload` has no authentication guard, no globa... | Not Provided | 2026-07-20 | 2026-07-20 |
| CVE-2026-63094 json | SigNoz through 0.133.0 contains an open redirect vulnerability in the SSO authentication flow that allows unauthenticated att... | Not Provided | 2026-07-17 | 2026-07-21 |
| CVE-2026-63081 json | Perfect Support Ticketing & Document Management System through 1.7 contains a stored cross-site scripting vulnerability that ... | Not Provided | 2026-07-16 | 2026-07-18 |
| CVE-2026-62236 json | grav-plugin-login before 3.8.11 contains a cross-site request forgery (CSRF) vulnerability in the login.regenerate2FASecret f... | Not Provided | 2026-07-17 | 2026-07-17 |
| CVE-2026-60092 json | AVideo (Meet plugin) through commit e8d6119f3cb1b849149906efeb0a41fc024f59f8 contains a stored cross-site scripting vulnerabi... | Not Provided | 2026-07-08 | 2026-07-08 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Open-systems | Log-user-session | 0.8 | |||
| Application | Open-systems | Log-user-session | 0.7 | |||
| Application | Open-systems | Log-user-session | 0.6 | |||
| Application | Open-systems | Log-user-session | 0.5 | |||
| Application | Open-systems | Log-user-session | 0.4 | |||
| Application | Open-systems | Log-user-session | 0.3 | |||
| Application | Open-systems | Log-user-session | 0.2 | |||
| Application | Open-systems | Log-user-session | 0.1 |