Lucene search
+L

388 matches found

NVD
NVD
added 2023/08/25 10:15 p.m.27 views

CVE-2023-39289

A vulnerability in the Connect Mobility Router component of Mitel MiVoice Connect through 9.6.2208.101 could allow an unauthenticated attacker to conduct an account enumeration attack due to improper configuration. A successful exploit could allow an attacker to access system information...

7.5CVSS7.5AI score0.00494EPSS
SaveExploits0References2
Prion
Prion
added 2023/08/25 10:15 p.m.25 views

Design/Logic Flaw

A vulnerability in the Connect Mobility Router component of Mitel MiVoice Connect through 9.6.2208.101 could allow an unauthenticated attacker to conduct an account enumeration attack due to improper configuration. A successful exploit could allow an attacker to access system information...

5CVSS7.5AI score0.00494EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2023/08/25 12:58 a.m.36 views

CVE-2023-40179 Silverware Games vulnerable to account enumeration via inconsistent responses

Silverware Games is a premium social network where people can play games online. Prior to version 1.3.6, the Password Recovery form would throw an error if the specified email was not found in our database. It would only display the "Enter the code" form if the email is associated with a member o...

5.3CVSS5.6AI score0.00377EPSS
SaveExploits0References1
OSV
OSV
added 2023/08/25 12:58 a.m.7 views

CVE-2023-40179 Silverware Games vulnerable to account enumeration via inconsistent responses

Silverware Games is a premium social network where people can play games online. Prior to version 1.3.6, the Password Recovery form would throw an error if the specified email was not found in our database. It would only display the "Enter the code" form if the email is associated with a member o...

5.3CVSS6.9AI score0.00377EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2023/08/25 12:58 a.m.15 views

CVE-2023-40179 Silverware Games vulnerable to account enumeration via inconsistent responses

Silverware Games is a premium social network where people can play games online. Prior to version 1.3.6, the Password Recovery form would throw an error if the specified email was not found in our database. It would only display the "Enter the code" form if the email is associated with a member o...

5.3CVSS6.8AI score0.00377EPSS
SaveExploits0References1
CVE
CVE
added 2023/08/25 12:00 a.m.77 views

CVE-2023-39289

CVE-2023-39289 affects Mitel MiVoice Connect, specifically the Connect Mobility Router component, with versions up to 9.6.2208.101. The vulnerability allows an unauthenticated attacker to perform an account enumeration attack due to improper configuration, potentially exposing system information....

7.5CVSS7.5AI score0.00494EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2023/08/25 12:00 a.m.9 views

Mitel MiVoice Connect 安全漏洞

Mitel MiVoice Connect is Mitel Canada's software for centralized management of Mitel Networks' call processing and collaboration tools. A security vulnerability exists in Mitel MiVoice Connect, which stems from a misconfiguration, and through which an attacker could successfully conduct an accoun...

7.5CVSS7.3AI score0.00494EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2023/08/25 12:00 a.m.36 views

CVE-2023-39289

A vulnerability in the Connect Mobility Router component of Mitel MiVoice Connect through 9.6.2208.101 could allow an unauthenticated attacker to conduct an account enumeration attack due to improper configuration. A successful exploit could allow an attacker to access system information...

7.7AI score0.00494EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2023/08/25 12:00 a.m.19 views

CVE-2023-39289

A vulnerability in the Connect Mobility Router component of Mitel MiVoice Connect through 9.6.2208.101 could allow an unauthenticated attacker to conduct an account enumeration attack due to improper configuration. A successful exploit could allow an attacker to access system information...

7AI score0.00494EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/08/25 12:00 a.m.8 views

PT-2023-26871 · Mitel · Mitel Mivoice Connect

Name of the Vulnerable Software and Affected Versions: Mitel MiVoice Connect versions through 9.6.2208.101 Description: A vulnerability in the Connect Mobility Router component could allow an unauthenticated attacker to conduct an account enumeration attack due to improper configuration. A...

7.5CVSS7.3AI score0.00494EPSS
SaveExploits0References11
Packet Storm
Packet Storm
added 2023/07/20 12:00 a.m.293 views

Joomla! Booking 2.4.9 Account Enumeration

Exploit Title: Joomla! combooking component 2.4.9 - Information Leak Account enumeration Google Dork: inurl:"index.php?option=combooking" Date: 07/12/2023 Exploit Author: qw3rTyTy Vendor Homepage: http://www.artio.net/ Software Link:...

7.1AI score
SaveExploits0
zdt
zdt
added 2023/07/19 12:00 a.m.275 views

Joomla com_booking component 2.4.9 - Information Leak (Account enumeration) Exploit

Exploit Title: Joomla! combooking component 2.4.9 - Information Leak Account enumeration Google Dork: inurl:"index.php?option=combooking" Exploit Author: qw3rTyTy Vendor Homepage: http://www.artio.net/ Software Link: http://www.artio.net/downloads/joomla/book-it/book-it-2-free/download Version:...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
added 2023/07/19 12:00 a.m.290 views

Joomla! com_booking component 2.4.9 - Information Leak (Account enumeration)

Exploit Title: Joomla! combooking component 2.4.9 - Information Leak Account enumeration Google Dork: inurl:"index.php?option=combooking" Date: 07/12/2023 Exploit Author: qw3rTyTy Vendor Homepage: http://www.artio.net/ Software Link:...

5.3AI score
SaveExploits0
NVD
NVD
added 2023/05/23 10:15 p.m.16 views

CVE-2023-28015

The HCL Domino AppDev Pack IAM service is susceptible to a User Account Enumeration vulnerability. During a failed login attempt a difference in messages could allow an attacker to determine if the user is valid or not. The attacker could use this information to focus a brute force attack on...

5.3CVSS5.1AI score0.0045EPSS
SaveExploits0References1
Prion
Prion
added 2023/05/23 10:15 p.m.24 views

Information disclosure

The HCL Domino AppDev Pack IAM service is susceptible to a User Account Enumeration vulnerability. During a failed login attempt a difference in messages could allow an attacker to determine if the user is valid or not. The attacker could use this information to focus a brute force attack on...

5CVSS5.1AI score0.0045EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/05/23 9:25 p.m.12 views

CVE-2023-28015 HCL Domino AppDev Pack is susceptible to a User Account Enumeration vulnerability

The HCL Domino AppDev Pack IAM service is susceptible to a User Account Enumeration vulnerability. During a failed login attempt a difference in messages could allow an attacker to determine if the user is valid or not. The attacker could use this information to focus a brute force attack on...

5.3CVSS5.4AI score0.0045EPSS
SaveExploits0References1
CVE
CVE
added 2023/05/23 9:25 p.m.80 views

CVE-2023-28015

The CVE-2023-28015 affects HCL Domino AppDev Pack IAM service. Vulnerable component: the login/authentication process; root cause is a difference in failure messages during failed logins that can reveal whether a user exists. Consequence: attacker could leverage this to enumerate valid users and ...

5.3CVSS5.1AI score0.0045EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/05/23 9:25 p.m.25 views

CVE-2023-28015 HCL Domino AppDev Pack is susceptible to a User Account Enumeration vulnerability

The HCL Domino AppDev Pack IAM service is susceptible to a User Account Enumeration vulnerability. During a failed login attempt a difference in messages could allow an attacker to determine if the user is valid or not. The attacker could use this information to focus a brute force attack on...

5.3CVSS5.4AI score0.0045EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/05/23 12:00 a.m.10 views

PT-2023-21481 · Hcl · Hcl Domino Appdev Pack

Name of the Vulnerable Software and Affected Versions: HCL Domino AppDev Pack affected versions not specified Description: The HCL Domino AppDev Pack IAM service is susceptible to a User Account Enumeration issue. During a failed login attempt, a difference in messages could allow an attacker to...

5.3CVSS6.9AI score0.0045EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2023/04/27 3:30 a.m.18 views

User account enumeration in Serenity

An issue was discovered in Serenity Serene and StartSharp before 6.7.0. When a password reset request occurs, the server response leaks the existence of users. If one tries to reset a password of a non-existent user, an error message indicates that this user does not exist...

5.3CVSS6.9AI score0.01011EPSS
SaveExploits1References6Affected Software2
Rows per page
Query Builder