11744 matches found
CVE-2023-28673
A missing permission check in Jenkins OctoPerf Load Testing Plugin Plugin 4.5.2 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...
Information disclosure
A missing permission check in Jenkins OctoPerf Load Testing Plugin Plugin 4.5.2 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...
ASB-A-257030107
In getNumberFromCallIntent of NewOutgoingCallIntentBroadcaster.java, there is a possible way to enumerate other user's contact phone number due to a confused deputy. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for...
CVE-2023-26071
An issue was discovered in MCUBO ICT through 10.12.4 aka 6.0.2. An Observable Response Discrepancy can occur under the login web page. In particular, the web application provides different responses to incoming requests in a way that reveals internal state information to an unauthorized actor. Th...
CVE-2023-26071
An issue was discovered in MCUBO ICT through 10.12.4 aka 6.0.2. An Observable Response Discrepancy can occur under the login web page. In particular, the web application provides different responses to incoming requests in a way that reveals internal state information to an unauthorized actor. Th...
Code injection
An issue was discovered in MCUBO ICT through 10.12.4 aka 6.0.2. An Observable Response Discrepancy can occur under the login web page. In particular, the web application provides different responses to incoming requests in a way that reveals internal state information to an unauthorized actor. Th...
PT-2023-20467 · Mcubo Ict · Mcubo Ict
Name of the Vulnerable Software and Affected Versions: MCUBO ICT versions 6.0.2 through 10.12.4 Description: An issue in the login web page of the affected software can lead to an Observable Response Discrepancy. This discrepancy occurs because the web application provides different responses to...
MCUBO ICT 安全漏洞
Harpa Italia Mcubo ICT is a modular and simple ICT monitoring solution from Harpa Italia that allows you to control your entire ICT infrastructure in an easy and customizable way. A security vulnerability exists in MCUBO ICT version 10.12.4 and earlier versions. An attacker exploiting this...
CVE-2023-26071
An issue was discovered in MCUBO ICT through 10.12.4 aka 6.0.2. An Observable Response Discrepancy can occur under the login web page. In particular, the web application provides different responses to incoming requests in a way that reveals internal state information to an unauthorized actor. Th...
CVE-2023-26071
An issue was discovered in MCUBO ICT through 10.12.4 aka 6.0.2. An Observable Response Discrepancy can occur under the login web page. In particular, the web application provides different responses to incoming requests in a way that reveals internal state information to an unauthorized actor. Th...
Delay with enumerating resources after logging in to Citrix Workspace App during first login
In an isolated environment where there is no access to external sites ,there is delay when adding account/store in Workspace App...
CVE-2023-26071
Summary (CVE-2023-26071): MCUBO ICT (versions up to 10.12.4 / 6.0.2) is affected by an observable response discrepancy on the login page. The issue allows an unauthenticated attacker to perform user enumeration by receiving different responses to similar requests, revealing internal state informa...
CVE-2022-41354
An access control issue in Argo CD v2.4.12 and below allows unauthenticated attackers to enumerate existing applications...
Design/Logic Flaw
An access control issue in Argo CD v2.4.12 and below allows unauthenticated attackers to enumerate existing applications...
CVE-2022-41354
An access control issue in Argo CD v2.4.12 and below allows unauthenticated attackers to enumerate existing applications...
CVE-2022-41354
An access control issue in Argo CD v2.4.12 and below allows unauthenticated attackers to enumerate existing applications...
Moodle 4.0 < 4.0.7, 4.1 < 4.1.2 IDOR Vulnerability
Moodle is prone to an IDOR Insecure Direct Object Reference vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
GHSA-HH52-G5C4-WPRH Moodle may allow authenticated users to enumerate other user's names via learning plans page
Authenticated users were able to enumerate other users' names via the learning plans page...