635 matches found
PT-2014-5199
Name of the Vulnerable Software and Affected Versions Cisco WebEx Meetings Server affected versions not specified Description The issue allows remote attackers to enumerate user accounts by entering crafted URLs and examining the returned messages. Recommendations At the moment, there is no...
CVE-2014-3304: Exposure of Sensitive Information to an Unauthorized Actor
The OutlookAction Class in Cisco WebEx Meetings Server allows remote attackers to enumerate user accounts by entering crafted URLs and examining the returned messages, aka Bug ID CSCuj81722...
Cerberus FTP Server 6.x < 6.0.9.0 / 7.x < 7.0.0.2 SSH FTP Account Enumeration
The version of Cerberus FTP Server on the remote host is version 6.x prior to 6.0.9.0 or version 7.x prior to 7.0.0.2. It is, therefore, affected by an unauthorized information disclosure vulnerability. A remote attacker can enumerate user accounts via an analysis of responses from the SSH FTP...
CVE-2013-5423: Exposure of Sensitive Information to an Unauthorized Actor
IBM Flex System Manager FSM 1.1 through 1.3 before 1.3.2.0 allows remote attackers to enumerate user accounts via unspecified vectors...
PT-2014-2923
Name of the Vulnerable Software and Affected Versions IBM Flex System Manager FSM versions 1.1 through 1.3 before 1.3.2.0 Description The issue allows remote attackers to enumerate user accounts via unspecified vectors. Recommendations For versions 1.1 through 1.3 before 1.3.2.0, update to versio...
PT-2014-5174
Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Domain Manager CDM affected versions not specified Description The issue concerns improper access control implementation in the web framework of Cisco Unified Communications Domain Manager CDM, allowing remote...
CVE-2014-3278: Undefined Security Weakness
The web framework in VOSS in Cisco Unified Communications Domain Manager CDM does not properly implement access control, which allows remote attackers to enumerate accounts by visiting an unspecified BVSMWeb web page, aka Bug IDs CSCun39619 and CSCun45572...
Improper access control
The Administration GUI in the web framework in VOSS in Cisco Unified Communications Domain Manager CDM 9.0.1 and earlier does not properly implement access control, which allows remote attackers to enumerate account names via a crafted URL, aka Bug IDs CSCun39631 and CSCun39643...
CVE-2014-3279: Undefined Security Weakness
The Administration GUI in the web framework in VOSS in Cisco Unified Communications Domain Manager CDM 9.0.1 and earlier does not properly implement access control, which allows remote attackers to enumerate account names via a crafted URL, aka Bug IDs CSCun39631 and CSCun39643...
PT-2014-5175
Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Domain Manager CDM versions 9.0.1 and earlier Description The issue is related to improper access control implementation in the Administration GUI of the web framework in Cisco Unified Communications Domain Manager...
CVE-2013-6020
passwordRequestPOST.jsp in Tyler Technologies TaxWeb 3.13.3.1 sends different HTTP status codes for invalid password-recovery requests depending on whether the user account exists, which allows remote attackers to enumerate account names via a series of requests to the 1 Assessor, 2 Recorder, or ...
CVE-2013-6020: Exposure of Sensitive Information to an Unauthorized Actor
passwordRequestPOST.jsp in Tyler Technologies TaxWeb 3.13.3.1 sends different HTTP status codes for invalid password-recovery requests depending on whether the user account exists, which allows remote attackers to enumerate account names via a series of requests to the 1 Assessor, 2 Recorder, or ...
PT-2013-4114
Name of the Vulnerable Software and Affected Versions IBM InfoSphere Information Server versions prior to 8.5 FP4 IBM InfoSphere Information Server versions 8.7 through FP2 IBM InfoSphere Information Server version 9.1 Description The issue allows remote attackers to enumerate user accounts via a...
CVE-2013-3959: Exposure of Sensitive Information to an Unauthorized Actor
The Web Navigator in Siemens WinCC before 7.2 Update 1, as used in SIMATIC PCS7 8.0 SP1 and earlier and other products, exhibits different behavior for NetBIOS user names depending on whether the user account exists, which allows remote authenticated users to enumerate account names via crafted U...
PT-2013-1049
Name of the Vulnerable Software and Affected Versions Siemens WinCC versions prior to 7.2 Update 1 Description The issue exists due to different behavior for NetBIOS user names in the Web Navigator component of Siemens WinCC, depending on whether a user account exists. This allows remote...
CVE-2013-2264
The SIP channel driver in Asterisk Open Source 1.8.x before 1.8.20.2, 10.x before 10.12.2, and 11.x before 11.2.2; Certified Asterisk 1.8.15 before 1.8.15-cert2; Asterisk Business Edition BE C.3.x before C.3.8.1; and Asterisk Digiumphones 10.x-digiumphones before 10.12.2-digiumphones exhibits...
DEBIAN-CVE-2013-2264
The SIP channel driver in Asterisk Open Source 1.8.x before 1.8.20.2, 10.x before 10.12.2, and 11.x before 11.2.2; Certified Asterisk 1.8.15 before 1.8.15-cert2; Asterisk Business Edition BE C.3.x before C.3.8.1; and Asterisk Digiumphones 10.x-digiumphones before 10.12.2-digiumphones exhibits...
Windows Gather Deleted Files Enumeration and Recovering
This module lists and attempts to recover deleted files from NTFS file systems. Use the FILES option to guide recovery. Leave this option empty to enumerate deleted files in the DRIVE. Set FILES to an extension e.g., "pdf" to recover deleted files with that extension, or set FILES to a comma...
CVE-2013-2264
The SIP channel driver in Asterisk Open Source 1.8.x before 1.8.20.2, 10.x before 10.12.2, and 11.x before 11.2.2; Certified Asterisk 1.8.15 before 1.8.15-cert2; Asterisk Business Edition BE C.3.x before C.3.8.1; and Asterisk Digiumphones 10.x-digiumphones before 10.12.2-digiumphones exhibits...
CVE-2013-2264
The SIP channel driver in Asterisk Open Source 1.8.x before 1.8.20.2, 10.x before 10.12.2, and 11.x before 11.2.2; Certified Asterisk 1.8.15 before 1.8.15-cert2; Asterisk Business Edition BE C.3.x before C.3.8.1; and Asterisk Digiumphones 10.x-digiumphones before 10.12.2-digiumphones exhibits...