10843 matches found
CVE-2025-3716
User enumeration in ESET Protect on-prem via Response Timing...
CVE-2026-29909
MRCMS V3.1.2 contains an unauthenticated directory enumeration vulnerability in the file management module. The /admin/file/list.do endpoint lacks authentication controls and proper input validation, allowing remote attackers to enumerate directory contents on the server without any credentials...
EUVD-2026-17178
A flaw in Node.js Permission Model filesystem enforcement leaves fs.realpathSync.native without the required read permission checks, while all comparable filesystem functions correctly enforce them. As a result, code running under --permission with restricted --allow-fs-read can still use...
CVE-2026-21715
A flaw in Node.js Permission Model filesystem enforcement leaves fs.realpathSync.native without the required read permission checks, while all comparable filesystem functions correctly enforce them. As a result, code running under --permission with restricted --allow-fs-read can still use...
CVE-2026-21715
A flaw in Node.js Permission Model filesystem enforcement leaves fs.realpathSync.native without the required read permission checks, while all comparable filesystem functions correctly enforce them. As a result, code running under --permission with restricted --allow-fs-read can still use...
CVE-2026-21715
The CVE-2026-21715 issue affects Node.js in the 20.x, 22.x, 24.x and 25.x streams with the Permission Model. The root cause is that fs.realpathSync.native() bypasses required read-permission checks, allowing code running with --permission and restricted --allow-fs-read to reveal file existence, r...
EUVD-2026-17129
MRCMS V3.1.2 contains an unauthenticated directory enumeration vulnerability in the file management module. The /admin/file/list.do endpoint lacks authentication controls and proper input validation, allowing remote attackers to enumerate directory contents on the server without any credentials...
Incorrect Authorization
Overview wwbn/avideo is an Audio and Video Platform or simply "A Video Platform". Affected versions of this package are vulnerable to Incorrect Authorization the category retrieval logic in objects/categories.json.php and objects/category.php. An attacker can enumerate non-private categories and...
EUVD-2025-209122
User enumeration in ESET Protect on-prem via Response Timing...
CVE-2025-3716
User enumeration in ESET Protect on-prem via Response Timing...
CVE-2025-3716
CVE-2025-3716 affects ESET Protect (on-prem). The issue is user enumeration via response timing, exposing authentication-related information. According to the connected documents, CVSS 4.0 base factors yield a 5.3 (Medium) overall score with Adjacent attack vector, Low attack complexity, and no p...
CVE-2025-3716
User enumeration in ESET Protect on-prem via Response Timing...
CVE-2025-3716 User enumeration in ESET Protect (on-prem)
User enumeration in ESET Protect on-prem via Response Timing...
CVE-2025-3716 User enumeration in ESET Protect (on-prem)
User enumeration in ESET Protect on-prem via Response Timing...
PT-2026-29058
MRCMS V3.1.2 contains an unauthenticated directory enumeration vulnerability in the file management module. The /admin/file/list.do endpoint lacks authentication controls and proper input validation, allowing remote attackers to enumerate directory contents on the server without any credentials...
CVE-2026-29909
MRCMS V3.1.2 contains an unauthenticated directory enumeration vulnerability in the file management module. The /admin/file/list.do endpoint lacks authentication controls and proper input validation, allowing remote attackers to enumerate directory contents on the server without any credentials...
CVE-2026-29909
CVE-2026-29909 affects MRCMS v3.1.2. The /admin/file/list.do endpoint in the file management module is unauthenticated and lacks input validation, enabling remote directory enumeration without credentials. The vulnerability is consistently described across NVD, Red Hat, ENISA EUVD, CVE List, and ...
CVE-2026-29909
MRCMS V3.1.2 contains an unauthenticated directory enumeration vulnerability in the file management module. The /admin/file/list.do endpoint lacks authentication controls and proper input validation, allowing remote attackers to enumerate directory contents on the server without any credentials...
PT-2026-28804
User enumeration in ESET Protect on-prem via Response Timing...
ESET Protect 安全漏洞
ESET Protect is an enterprise-level endpoint security management platform developed by ESET Singapore. ESET Protect has a security vulnerability, which stems from response times that lead to user enumeration...