CVE-2024-8643

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Session Fixation vulnerability in Oceanic Software ValeApp allows Brute Force, Session Hijacking.

This issue affects ValeApp: before v2.0.0.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-384

Affected software

No affected versions have been published.

Timeline

Published
Sep 27, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-86447.5Cleartext Storage of Sensitive Information in a Cookie vulnerability in Oceanic Software ValeApp allows Protocol Manipulation, : JSON HijackCVE-2024-86455.5SPRT dissector crash in Wireshark 4.2.0 to 4.0.5 and 4.0.0 to 4.0.15 allows denial of service via packet injection or crafted capture fileCVE-2024-86466.1In Eclipse Glassfish versions prior to 7.0.10, a URL redirection vulnerability to untrusted sites existed. This vulnerability is caused by tCVE-2024-86475.4An issue was discovered in GitLab affecting all versions starting 15.2 to 17.4.6, 17.5 prior to 17.5.4, and 17.6 prior to 17.6.2. On self hoCVE-2024-86486.1An issue has been discovered in GitLab CE/EE affecting all versions from 16 before 17.3.7, 17.4 before 17.4.4, and 17.5 before 17.5.2. The vCVE-2024-86505.3An issue was discovered in GitLab CE/EE affecting all versions from 15.0 prior to 17.4.6, 17.5 prior to 17.5.4, and 17.6 prior to 17.6.2 thaCVE-2024-86515.3A vulnerability in NetCat CMS allows an attacker to send a specially crafted http request that can be used to check whether a user exists inCVE-2024-86526.1A vulnerability in NetCat CMS allows an attacker to execute JavaScript code in a user's browser when they visit specific path on the site. TCVE-2024-86536.1A vulnerability in NetCat CMS allows an attacker to execute JavaScript code in a user's browser when they visit specific paths on the site. CVE-2024-86549.8MongoDB Server may access non-initialized region of memory leading to unexpected behaviour when zero arguments are called in internal aggregCVE-2024-86555.3A vulnerability was found in Mercury MNVR816 up to 2.0.1.0.5. It has been classified as problematic. This affects an unknown part of the filCVE-2024-86566.1The WPFactory Helper plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriat
CVE-2024-8643: Critical severity, CVSS 9.8 | Vulnix