NetIQ Sentinel Server Information Disclosure Vulnerability

NetIQ Sentinel Server is a security information and event management tool. NetIQ Sentinel Server 8.0 prior to version 8.0.1 has a security vulnerability that can lead to information disclosure account enumeration...

Design/Logic Flaw

A vulnerability was discovered in NetIQ Sentinel Server 8.0 before 8.0.1 that may allow leakage of information account enumeration...

CVE-2017-5184

A vulnerability was discovered in NetIQ Sentinel Server 8.0 before 8.0.1 that may allow leakage of information account enumeration...

CVE-2017-5184

A vulnerability was discovered in NetIQ Sentinel Server 8.0 before 8.0.1 that may allow leakage of information account enumeration...

CVE-2017-5184

NetIQ Sentinel Server 8.0 prior to 8.0.1 is affected by CVE-2017-5184, which may allow information disclosure (account enumeration) over the network. The OpenVAS entry corroborates leakage of information and notes a remediation path of upgrading to Sentinel 8.0.1. As per the NVD entry, the base i...

CVE-2017-5537

The password reset form in Weblate before 2.10.1 provides different error messages depending on whether the email address is associated with an account, which allows remote attackers to enumerate user accounts via a series of requests...

CVE-2017-5537

The password reset form in Weblate before 2.10.1 provides different error messages depending on whether the email address is associated with an account, which allows remote attackers to enumerate user accounts via a series of requests...

Apple OS X Kerberos 5 PAM Module User Account Enumeration Vulnerability

Apple OS X is a proprietary operating system developed by Apple for Mac computers.Kerberos 5 also known as krb5 PAM is one of the network authentication protocol components. A user account enumeration vulnerability exists in the Kerberos 5 PAM module in Apple OS X versions prior to 10.12, which c...

CVE-2016-4745

The Kerberos 5 aka krb5 PAM module in Apple OS X before 10.12 does not use constant-time operations for determining username validity, which makes it easier for remote attackers to enumerate user accounts via a timing side-channel attack...

CVE-2016-5797

Tollgrade LightHouse SMS before 5.1 patch 3 provides different error messages for failed authentication attempts depending on whether the username exists, which allows remote attackers to enumerate account names via a series of attempts...

CVE-2016-5797

CVE-2016-5797 affects Tollgrade LightHouse SMS Software prior to Version 5.1 Patch 3. The issue is information exposure through error messages that reveal whether a username exists, enabling remote account-name enumeration. Affected component is the web-based LightHouse SMS software; the root cau...

DNS Analysis Tool: Bluto

The target domain is queried for MX and NS records. Sub-domains are passively gathered via NetCraft. The target domain NS records are each queried for potential Zone Transfers. If none of them gives up their spinach, Bluto will attempt to identify if SubDomain Wild Cards are being used. If they a...

CVE-2016-3649

Symantec Endpoint Protection Manager SEPM 12.1 before RU6 MP5 allows remote authenticated administrators to enumerate administrator accounts via modified GET requests...

Cisco WebEx Meeting Center User Account Enumeration Vulnerability

Cisco WebEx Meeting Center is a set of WebEx meeting solutions in the United States Cisco Cisco company's network of online meeting products. The product invites others to join the meeting via e-mail or instant messaging IM, and supports online product demonstrations, information sharing, and mor...

Amazon Linux AMI : pam (ALAS-2015-589)

It was discovered that the unixrunhelperbinary function of PAM's unixpam module could write to a blocking pipe, possibly causing the function to become unresponsive. An attacker able to supply large passwords to the unixpam module could use this flaw to enumerate valid user accounts, or cause a...

Medium: pam

Issue Overview: It was discovered that the unixrunhelperbinary function of PAM's unixpam module could write to a blocking pipe, possibly causing the function to become unresponsive. An attacker able to supply large passwords to the unixpam module could use this flaw to enumerate valid user...

Legal Robot: - Guessing registered users in legalrobot.com

Security researcher described a method to enumerate emails from the password reset page using brute force techniques. The response messages allowed a user to determine if an account existed. Furthermore, no rate limiting was applied...

Persistent Systems Radia Client Automation Remote Elevation of Privilege Vulnerability

Persistent Systems Radia Client Automation is a solution with superior manageability designed specifically for particularly complex and ever-changing enterprise client infrastructures. Persistent Systems Radia Client Automation fails to properly restrict access to certain requests, allowing remot...

SMB Account Enumeration

Binary data 7166.pasl...

CVE-2014-8035

The web framework in Cisco WebEx Meetings Server produces different returned messages for URL requests depending on whether a username exists, which allows remote attackers to enumerate user accounts via a series of requests, aka Bug ID CSCuj40247...