CVE-2026-78584 Observable Response Discrepancy in Kibana Leading to Cross-Space Information Disclosure

Observable Response Discrepancy CWE-204 in the Kibana Osquery feature can lead to information disclosure via Query System for Information CAPEC-54. An authenticated user holding Osquery live-query privileges could determine whether a scheduled query identifier exists in a Kibana space they are no...

CVE-2026-78584

CVE-2026-78584 is an Observable Response Discrepancy (CWE-204) in the Kibana Osquery feature that allows an authenticated user with Osquery live-query privileges to determine whether a scheduled query identifier exists in a Kibana space they are not authorized to access. The vulnerability affects...

CVE-2026-81159

Observable Timing Discrepancy vulnerability in Drupal Commerce CyberSource allows Brute Force. This issue affects Commerce CyberSource versions: from 0.0.0 to 1.10.0...

CVE-2026-81159

CVE-2026-81159 affects the Drupal Commerce CyberSource module (versions 0.0.0 through 1.10.0). The root cause is a failure to correctly verify the integrity of data returned by the CyberSource payment provider , specifically in the Secure Acceptance Hosted Checkout gateway integration. An observa...

EUVD-2026-70005

Observable Timing Discrepancy vulnerability in Drupal Commerce CyberSource allows Brute Force. This issue affects Commerce CyberSource versions: from 0.0.0 to 1.10.0...

CVE-2017-12635

CVE-2017-12635 CVE-2017-12635에 대한 사례 연구 및 PoC Apache CouchDB 1.7.0 / 2.x 하거나 수정PUT /users/org.couchdb.user:할 수 있습니다. 각 CouchDB 사용자는 문서 형식으로 저장됩니다. 이러한 문서에는 CouchDB가 올바른 인증 프로세스를 위해 처리하는 여러 필수 필드가 포함됩니다. 우리가 관심을 갖...

CVE-2026-XXXX-atlassian-email-enumeration

CVE-2026-XXXX: Atlassian Central GraphQL — Oráculo de Enumeración de Correo Electrónico Producto Atlassian Central GraphQL Gateway api.atlassian.com/graphql Tipo de vulnerabilidad CWE-204: Discrepancia de Respuesta Observable — Oráculo de Enumeración de Correo Electrónico Severidad MEDIA — CVSS 5...

CVE-2025-46047

CVE-2025-46047 Silverpeas = 6.4.2 ユーザー名列挙 PoC Silverpeas バージョン 6.4.1 および 6.4.2 におけるユーザー名列挙の脆弱性を実証するための Proof-of-Concept スクリプト。 脆弱性の詳細 影響を受けるソフトウェア: Silverpeas 影響を受けるバージョン: 6.4.1、6.4.2（およびそれ以前のバージョンの可能性あり） 修正済みバージョン: 6.4.3 脆弱性の種類: 観測可能な応答の不一致によるユーザー名列挙（CWE-204） ベンダートラッキング ID: Silverpeas Bug 14829...

Dify User Enumeration via Observable Response Discrepancy

Dify is an open-source LLM app development platform. Prior to 1.9.0, responses from the Dify API to existing and non-existent accounts differ, allowing an attacker to enumerate email addresses registered with Dify. Version 1.9.0 fixes the issue. id: CVE-2026-28288 info: name: Dify User Enumeratio...

CVE-2025-65899

CVE-2025-65899: Kalmia CMS v0.2.0 - 観測可能なレスポンスの相違（Observable Response Discrepancy）に対して脆弱 脆弱性概要 CVE ID: CVE-2025-65899 製品: DifuseHQ Kalmia CMS 影響を受けるバージョン: 0.2.0 脆弱性タイプ: Observable Response Discrepancy（観測可能なレスポンスの相違） 必要な権限: なし 影響...

echteeteepee

HTTP/1 Desync 취약점 테스트 도구 이 저장소는 PortSwigger의 James Kettle 이 수행한 획기적인 연구를 기반으로 HTTP/1 요청 스머글링desync 취약점을 탐지하기 위한 방어적 보안 도구를 포함합니다. 연구 출처 이 작업은 다음의 기술에서 직접 영감을 받아 구현되었습니다: "HTTP/1 Must Die" - James Kettle PortSwigger Research 원본 연구: https://portswigger.net/research/http1-must-die 연구자: James Kettle...

linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module

A flaw was found in Linux-PAM's pamuserdb module. This vulnerability, categorized as an Observable Timing Discrepancy CWE-208, allows a local or network-adjacent attacker to recover plaintext passwords. By repeatedly attempting authentication and measuring response-timing differences during...

linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module

A flaw was found in Linux-PAM's pamuserdb module. This vulnerability, categorized as an Observable Timing Discrepancy CWE-208, allows a local or network-adjacent attacker to recover plaintext passwords. By repeatedly attempting authentication and measuring response-timing differences during...

Moderate: Red Hat Security Advisory: pam security update

An update for pam is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availabl...

Moderate: Red Hat Security Advisory: pam security update

An update for pam is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availabl...

linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module

A flaw was found in Linux-PAM's pamuserdb module. This vulnerability, categorized as an Observable Timing Discrepancy CWE-208, allows a local or network-adjacent attacker to recover plaintext passwords. By repeatedly attempting authentication and measuring response-timing differences during...

linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module

A flaw was found in Linux-PAM's pamuserdb module. This vulnerability, categorized as an Observable Timing Discrepancy CWE-208, allows a local or network-adjacent attacker to recover plaintext passwords. By repeatedly attempting authentication and measuring response-timing differences during...

linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module

A flaw was found in Linux-PAM's pamuserdb module. This vulnerability, categorized as an Observable Timing Discrepancy CWE-208, allows a local or network-adjacent attacker to recover plaintext passwords. By repeatedly attempting authentication and measuring response-timing differences during...

Moderate: Red Hat Security Advisory: pam security update

An update for pam is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for eac...

Moderate: Red Hat Security Advisory: pam security update

An update for pam is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System...