CVE-2022-31478

The UserTakeOver plugin before 4.0.1 for ILIAS allows an attacker to list all users via the search function...

CVE-2022-31478

The CVE-2022-31478 issue affects the ILIAS UserTakeOver plugin prior to 4.0.1. Multiple sources (NVD, Red Hat, OSV, CVE lists) confirm a vulnerability where an attacker can list all users through the plugin’s search function. The root cause is described as a user listing exposure via the search f...

CVE-2021-31478

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

CVE-2021-31478

OpenText Brava! Desktop 16.6.3.84 is affected by CVE-2021-31478. The flaw resides in PDF parsing and causes a heap-based buffer overflow due to improper validation, enabling remote code execution. Exploitation requires user interaction (visiting a malicious page or opening a malicious file). The ...

CVE-2023-33623

GL.iNet devices prior to firmware 3.216 are affected by CVE-2023-31478, where an unauthenticated API endpoint (/api/router/mesh/status) leaks Wi‑Fi configuration details (SSID and key). The duplicate CVE-2023-33623 is a reservation of CVE-31478. Impact is exposure of credentials and network confi...