Lucene search
K

20 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 11:41 a.m.5 views

CVE-2001-1571

The Remote Desktop client in Windows XP sends the most recent user account name in cleartext, which could allow remote attackers to obtain terminal server user account names via sniffing...

5CVSS7AI score0.3026EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2017-12881

Malware in sbrugna...

5.3CVSS5.5AI score0.00734EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2019-4331

Malware in sbrugna...

5.3CVSS5.5AI score0.00244EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2018-8747

Malware in sbrugna...

5.3CVSS5.5AI score0.00167EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-6072

Malicious code in bioql PyPI...

9.8CVSS6.6AI score0.00121EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2021-28731

Malicious code in bioql PyPI...

7.5CVSS6.6AI score0.00311EPSS
Exploits0References3
Snyk
Snyk
added 2025/08/21 6:31 p.m.0 views

Timing Attack

Overview Affected versions of this package are vulnerable to Timing Attack via the password encryptor during the login process. An attacker can determine the existence of user accounts by analyzing differences in server response times to crafted authentication requests. Remediation Upgrade...

6.9CVSS7.2AI score0.00085EPSS
Exploits0References2
NVD
NVD
added 2025/07/04 3:15 a.m.5 views

CVE-2025-6814

The Booking X plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the exportnow function in versions 1.0 to 1.1.2. This makes it possible for unauthenticated attackers to download all plugin data, including user accounts, user meta, and PayPal...

7.5CVSS0.0038EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2025/05/23 2:52 a.m.4 views

CVE-2023-0738

OrangeScrum version 2.0.11 allows an external attacker to obtain arbitrary user accounts from the application. This is possible because the application returns malicious user input in the response with the content-type set to text/html...

6.1CVSS6.8AI score0.00234EPSS
Exploits1References1
CVE
CVE
added 2025/03/19 2:24 p.m.63 views

CVE-2024-42176

HCL MyXalytics is affected by a concurrent login vulnerability affecting versions 6.3 through 6.4. The issue arises when simultaneous active sessions for a single credential may allow an attacker to access a user’s account or sensitive information. The PT-2025-11686 entry provides concrete affect...

8CVSS3.6AI score0.00164EPSS
Exploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2025/03/07 1:59 a.m.9 views

CVE-2025-27646

Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.913 Application 20.0.2253 allows Edit User Account Exposure V-2024-001...

9.8CVSS7.1AI score0.00121EPSS
Exploits1References1
OSV
OSV
added 2025/03/05 6:15 a.m.1 views

CVE-2025-27646

Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.913 Application 20.0.2253 allows Edit User Account Exposure V-2024-001...

9.8CVSS5.8AI score
Exploits0References3
NVD
NVD
added 2025/03/05 6:15 a.m.6 views

CVE-2025-27646

Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.913 Application 20.0.2253 allows Edit User Account Exposure V-2024-001...

9.8CVSS0.00121EPSS
Exploits1References3
Cvelist
Cvelist
added 2025/03/05 12:0 a.m.9 views

CVE-2025-27646

Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.913 Application 20.0.2253 allows Edit User Account Exposure V-2024-001...

0.00121EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2025/03/05 12:0 a.m.5 views

CVE-2025-27646

Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.913 Application 20.0.2253 allows Edit User Account Exposure V-2024-001...

7.2AI score0.00121EPSS
Exploits1References2
CVE
CVE
added 2025/03/05 12:0 a.m.65 views

CVE-2025-27646

CVE-2025-27646 affects Version: Vasion Print (formerly PrinterLogic) prior to Virtual Appliance Host 22.0.913 and Application 20.0.2253. Root cause described as an access-control issue that allows an Edit User Account Exposure, implying potential disclosure of user account information. CVSS v3.1 ...

9.8CVSS7.2AI score0.00121EPSS
Exploits1References3Affected Software2
Positive Technologies
Positive Technologies
added 2023/04/25 12:0 a.m.2 views

PT-2023-21546 · Hewlett Packard · Hpe Oneview

Name of the Vulnerable Software and Affected Versions: HPE OneView affected versions not specified Description: The issue concerns the potential exposure of OneView user accounts through an HPE OneView appliance dump. Recommendations: At the moment, there is no information about a newer version...

5.5CVSS5.3AI score0.00024EPSS
Exploits0References3
IBM Security Bulletins
IBM Security Bulletins
added 2019/01/30 8:35 a.m.33 views

Security Bulletin: IBM Flex System Manager (FSM) and compatible IBM Systems Director agents are affected by vulnerabilities in OpenSSL (CVE-2013-4353, CVE-2013-6450, and CVE-2013-6449)

Summary An interface on the IBM BladeCenter Advanced Management Module AMM may expose user account names and passwords that have been configured on that AMM. Vulnerability Details Abstract The FSM and compatible agents contain a version of openssl that contained the 3 vulnerabilities listed above...

7.5CVSS0.5AI score0.94464EPSS
Exploits87
Lenovo
Lenovo
added 2017/12/01 12:0 a.m.54 views

LXCA User Account Names Exposed To Unauthenticated Users Who Can Access the Web User Interface - lu

Lenovo Security Advisory: LEN-16335 Potential Impact: LXCA user account names may be exposed to unauthenticated users with access to the LXCA web user interface Severity: Medium Scope of Impact: Lenovo Specific CVE Identifier: CVE-2017-3764 Summary Description: A vulnerability was identified in...

5CVSS5.7AI score0.00734EPSS
Exploits0
Exploit DB
Exploit DB
added 2002/02/07 12:0 a.m.42 views

OS/400 - User Account Name Disclosure

source: https://www.securityfocus.com/bid/4059/info AS/400 is a midrange computer platform developed by IBM. It is designed to be highly reliable and efficient, and uses the OS/400 operating system. An information disclosure vulnerability has been reported to exist in OS/400 systems. An...

7.4AI score
Exploits0
Rows per page
Query Builder