221 matches found
CVE-2026-4045: Observable Response Discrepancy
A flaw has been found in projectsend up to r1945. This impacts an unknown function of the file includes/Classes/Auth.php. Executing a manipulation of the argument ldapemail can lead to observable response discrepancy. The attack can be executed remotely. A high complexity level is associated with...
CVE-2025-69413: Observable Response Discrepancy
In Gitea before 1.25.2, /api/v1/user has different responses for failed authentication depending on whether a username exists...
CVE-2025-67500: Observable Response Discrepancy
Mastodon is a free, open-source social network server based on ActivityPub. Versions 4.2.27 and prior, 4.3.0-beta.1 through 4.3.14, 4.4.0-beta.1 through 4.4.9, 4.5.0-beta.1 through 4.5.2 have discrepancies in error handling which allow checking whether a given status exists by sending a request...
Observable Response Discrepancy
Overview moodle/moodle is a learning platform. Affected versions of this package are vulnerable to Observable Response Discrepancy in the router. An attacker can determine the existence of specific course IDs by analyzing the different responses returned for valid and invalid IDs. Remediation...
CVE-2025-58586: Observable Response Discrepancy
For failed login attempts, the application returns different error messages depending on whether the login failed due to an incorrect password or a non-existing username. This allows an attacker to guess usernames until they find an existing one...
EUVD-2023-41137
Malicious code in bioql PyPI...
EUVD-2023-29945
Malicious code in bioql PyPI...
EUVD-2023-0914
Malicious code in bioql PyPI...
EUVD-2024-39561
Malicious code in bioql PyPI...
EUVD-2024-51037
Malicious code in bioql PyPI...
EUVD-2024-54477
Malicious code in bioql PyPI...
EUVD-2025-16124
Malicious code in bioql PyPI...
EUVD-2024-52568
Malicious code in bioql PyPI...
EUVD-2024-37323
Malicious code in bioql PyPI...
CVE-2025-9109 Portabilis i-Diario Password Recovery Endpoint email observable response discrepancy
A security flaw has been discovered in Portabilis i-Diario up to 1.5.0. Affected by this vulnerability is an unknown functionality of the file /password/email of the component Password Recovery Endpoint. The manipulation results in observable response discrepancy. It is possible to launch the...
CVE-2025-9109 Portabilis i-Diario Password Recovery Endpoint email observable response discrepancy
A security flaw has been discovered in Portabilis i-Diario up to 1.5.0. Affected by this vulnerability is an unknown functionality of the file /password/email of the component Password Recovery Endpoint. The manipulation results in observable response discrepancy. It is possible to launch the...
CVE-2025-9109 Portabilis i-Diario Password Recovery Endpoint email observable response discrepancy
A security flaw has been discovered in Portabilis i-Diario up to 1.5.0. Affected by this vulnerability is an unknown functionality of the file /password/email of the component Password Recovery Endpoint. The manipulation results in observable response discrepancy. It is possible to launch the...
CVE-2025-46390
CWE-204: Observable Response Discrepancy...
