Lucene search
+L

162 matches found

Cvelist
Cvelist
added 2024/07/30 8:48 a.m.38 views

CVE-2024-38431 Matrix Tafnit v8 - CWE-204: Observable Response Discrepancy

Matrix Tafnit v8 - CWE-204: Observable Response Discrepancy...

5.3CVSS0.0035EPSS
SaveExploits0References1
CVE
CVE
added 2024/07/30 8:48 a.m.78 views

CVE-2024-38431

CVE-2024-38431 relates to Matrix Tafnit v8 and CWE-204: Observable Response Discrepancy. The available documents identify Matrix Tafnit version 8 as affected, with the underlying issue described as an observable response discrepancy. Exploitation status is not documented in the provided sources. ...

7.5CVSS5.4AI score0.0035EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/07/30 8:48 a.m.23 views

CVE-2024-38431 Matrix Tafnit v8 - CWE-204: Observable Response Discrepancy

Matrix Tafnit v8 - CWE-204: Observable Response Discrepancy...

5.3CVSS7AI score0.0035EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/07/30 12:00 a.m.10 views

Matrix Tafnit 安全漏洞

Matrix Tafnit is an enterprise resource planning solution from Matrix. A security vulnerability exists in Matrix Tafnit version v8 that stems from observable response differences...

7.5CVSS6.8AI score0.0035EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/07/30 12:00 a.m.14 views

PT-2024-28000 · Unknown · Matrix Tafnit

Name of the Vulnerable Software and Affected Versions: Matrix Tafnit version 8 Description: The issue is related to Observable Response Discrepancy, identified as CWE-204. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where...

7.5CVSS7AI score0.0035EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2024/06/18 5:44 a.m.60 views

CVE-2024-34024

Observable response discrepancy issue exists in ID Link Manager and FUJITSU Software TIME CREATOR. If this vulnerability is exploited, an unauthenticated remote attacker may determine if a username is valid or not...

0.00359EPSS
SaveExploits0References2
CVE
CVE
added 2024/06/18 5:44 a.m.72 views

CVE-2024-34024

CVE-2024-34024 is a vulnerability in ID Link Manager and FUJITSU Software TIME CREATOR where an unauthenticated attacker can determine whether a username is valid due to an observable response discrepancy. Affected products/versions (per sources) include: ID Link Manager II ≤1.8, ID Link Manager ...

6.3CVSS7.2AI score0.00359EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/06/18 5:44 a.m.23 views

CVE-2024-34024

Observable response discrepancy issue exists in ID Link Manager and FUJITSU Software TIME CREATOR. If this vulnerability is exploited, an unauthenticated remote attacker may determine if a username is valid or not...

7.4AI score0.00359EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/06/17 5:31 p.m.13 views

CVE-2024-6056 nasirkhan Laravel Starter Password Reset forgot-password observable response discrepancy

A vulnerability was found in nasirkhan Laravel Starter up to 11.8.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /forgot-password of the component Password Reset Handler. The manipulation of the argument Email leads to observable response...

6.3CVSS6.9AI score0.0065EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2024/06/17 5:31 p.m.48 views

CVE-2024-6056 nasirkhan Laravel Starter Password Reset forgot-password observable response discrepancy

A vulnerability was found in nasirkhan Laravel Starter up to 11.8.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /forgot-password of the component Password Reset Handler. The manipulation of the argument Email leads to observable response...

6.3CVSS0.0065EPSS
SaveExploits1References4
CVE
CVE
added 2024/06/17 5:31 p.m.70 views

CVE-2024-6056

CVE-2024-6056 affects nasirkhan Laravel Starter up to 11.8.0, targeting the Password Reset Handler’s /forgot-password endpoint. The issue arises from manipulating the Email parameter, producing observable response discrepancies. Attack may be launched remotely; the CVE notes high complexity and d...

6.3CVSS4.3AI score0.0065EPSS
SaveExploits1References4Affected Software1
NVD
NVD
added 2024/05/04 2:16 p.m.24 views

CVE-2023-27283

IBM Aspera Orchestrator 4.0.1 could allow a remote attacker to enumerate usernames due to observable response discrepancies. IBM X-Force ID: 248545...

5.3CVSS5.1AI score0.00471EPSS
SaveExploits0References2
CVE
CVE
added 2024/05/04 1:16 p.m.66 views

CVE-2023-27283

Affected product: IBM Aspera Orchestrator 4.0.1. The issue allows a remote attacker to enumerate usernames due to observable response discrepancies during authentication, as documented in multiple sources (e.g., CNVD, Red Hat advisory, IBM X-Force references). Root cause and exact impact: observa...

5.3CVSS6.4AI score0.00471EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2024/05/04 1:16 p.m.38 views

CVE-2023-27283 IBM Aspera Orchestrator information disclosure

IBM Aspera Orchestrator 4.0.1 could allow a remote attacker to enumerate usernames due to observable response discrepancies. IBM X-Force ID: 248545...

5.3CVSS5.3AI score0.00471EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/03/19 11:35 a.m.35 views

CVE-2024-1145 Observable Response Discrepancy at Alma Devklan Blog

User enumeration vulnerability in Devklan's Alma Blog that affects versions 2.1.10 and earlier. This vulnerability could allow a remote user to retrieve all valid users registered in the application just by looking at the request response...

5.3CVSS5.5AI score0.00487EPSS
SaveExploits0References1
NVD
NVD
added 2024/03/15 7:15 a.m.32 views

CVE-2024-2482

A vulnerability has been found in Surya2Developer Hostel Management Service 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /checkavailability.php of the component HTTP POST Request Handler. The manipulation of the argument oldpassword lea...

3.7CVSS4.3AI score0.00828EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2024/03/15 6:31 a.m.17 views

CVE-2024-2482 Surya2Developer Hostel Management Service HTTP POST Request check_availability.php observable response discrepancy

A vulnerability has been found in Surya2Developer Hostel Management Service 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /checkavailability.php of the component HTTP POST Request Handler. The manipulation of the argument oldpassword lea...

3.7CVSS6.9AI score0.00828EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2024/03/15 6:31 a.m.50 views

CVE-2024-2482 Surya2Developer Hostel Management Service HTTP POST Request check_availability.php observable response discrepancy

A vulnerability has been found in Surya2Developer Hostel Management Service 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /checkavailability.php of the component HTTP POST Request Handler. The manipulation of the argument oldpassword lea...

3.7CVSS4.8AI score0.00828EPSS
SaveExploits1References3
CNVD
CNVD
added 2024/03/14 12:00 a.m.39 views

IBM Common Licensing User Enumeration Vulnerability

IBM Common Licensing is a license management solution from International Business Machines IBM. A user enumeration vulnerability exists in IBM Common Licensing version 9.0, which stems from an observable response discrepancy that can be exploited by a local attacker to enumerate usernames...

4CVSS6.2AI score0.00191EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2024/02/21 4:15 p.m.5 views

CVE-2022-45177

An issue was discovered in LIVEBOX Collaboration vDesk through v031. An Observable Response Discrepancy can occur under the /api/v1/vdeskintegration/user/isenableuser endpoint, the /api/v1/sharedsearch?search=NAME+SURNAME endpoint, and the /login endpoint. The web application provides different...

7.5CVSS5.8AI score0.00539EPSS
SaveExploits0References2
Rows per page
Query Builder