UBUNTU-CVE-2019-15132

Zabbix through 4.4.0alpha1 allows User Enumeration. With login requests, it is possible to enumerate application usernames based on the variability of server responses e.g., the "Login name or password is incorrect" and "No permissions for system access" messages, or just blocking for a number of...

Design/Logic Flaw

An issue was discovered in PublicCMS V4.0.180825. For an invalid login attempt, the response length is different depending on whether the username is valid, which makes it easier to conduct brute-force attacks...

CVE-2016-9499

Accellion FTP server prior to version FTA912220 only returns the username in the server response if the username is invalid. An attacker may use this information to determine valid user accounts and enumerate them...

CVE-2008-7013

NetService.dll in Baidu Hi IM allows remote servers to cause a denial of service client crash via a crafted login response that triggers a divide-by-zero error...

CVE-2008-7013

CVE-2008-7013 affects NetService.dll in Baidu Hi IM. The vulnerability allows remote servers to trigger a divide-by-zero via a crafted login response, causing a client crash (denial of service). The CVSS base score is 5.0 (Medium) with network access and no authentication, resulting in partial av...

DEBIAN-CVE-2009-0041

IAX2 in Asterisk Open Source 1.2.x before 1.2.31, 1.4.x before 1.4.23-rc4, and 1.6.x before 1.6.0.3-rc2; Business Edition A.x.x, B.x.x before B.2.5.7, C.1.x.x before C.1.10.4, and C.2.x.x before C.2.1.2.1; and s800i 1.2.x before 1.3.0 responds differently to a failed login attempt depending on...