CVE-2023-22359

User enumeration in Checkmk =2.2.0p4 allows an authenticated attacker to enumerate usernames...

Code injection

User enumeration in Checkmk =2.2.0p4 allows an authenticated attacker to enumerate usernames...

CVE-2023-22359

User enumeration in Checkmk =2.2.0p4 allows an authenticated attacker to enumerate usernames...

UBUNTU-CVE-2023-22359

User enumeration in Checkmk =2.2.0p4 allows an authenticated attacker to enumerate usernames...

CVE-2023-22359 User-enumeration in RestAPI

User enumeration in Checkmk =2.2.0p4 allows an authenticated attacker to enumerate usernames...

CVE-2023-22359

User enumeration in Checkmk =2.2.0p4 allows an authenticated attacker to enumerate usernames...

CVE-2023-22359

CVE-2023-22359 describes a user-enumeration issue in Checkmk versions up to 2.2.0p4. The provided documents consistently frame the vulnerability as an authenticated user enumeration of usernames, without detailing specific exploit steps, affected modules, or exploitability in the wild. No concret...

CVE-2023-22359 User-enumeration in RestAPI

User enumeration in Checkmk =2.2.0p4 allows an authenticated attacker to enumerate usernames...

PT-2023-18454 · Checkmk · Checkmk

Name of the Vulnerable Software and Affected Versions: Checkmk versions prior to 2.2.0p4 Description: The issue allows an authenticated attacker to enumerate usernames through user enumeration. Recommendations: For versions prior to 2.2.0p4, update to a version that contains a fix for this issue...

CVE-2023-22359: Observable Discrepancy

User enumeration in Checkmk =2.2.0p4 allows an authenticated attacker to enumerate usernames...

CVE-2023-2261

The WP Activity Log plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the handleajaxcall function in versions up to, and including, 4.5.0. This makes it possible for authenticated attackers, with subscriber-level access or higher, to obtain a list of...

CVE-2023-2261: Missing Authorization

The WP Activity Log plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the handleajaxcall function in versions up to, and including, 4.5.0. This makes it possible for authenticated attackers, with subscriber-level access or higher, to obtain a list of...

CVE-2021-4337 Multiple XforWooCommerce Add-On Plugins (Various Versions) - Missing Authorization

Sixteen XforWooCommerce Add-On Plugins for WordPress are vulnerable to authorization bypass due to a missing capability check on the wpajaxsvxajaxfactory function in various versions listed below. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to...

CVE-2023-3064

Anonymous user may get the list of existing users managed by the application, that could ease further attacks see CVE-2023-3065 and 3066This issue affects Mobatime mobile application AMXGT100 through 1.3.20...

Sitecore Unauthenticated User Enumeration

Sitecore CMS version 9.x / 10.x may be vulnerable to user enumeration by unauthenticated users through a specific endpoint. No source data...

CVE-2023-31186

Avaya IX Workforce Engagement v15.2.7.1195 - User Enumeration - Observable Response Discrepancy...

CVE-2023-31186

Avaya IX Workforce Engagement v15.2.7.1195 - User Enumeration - Observable Response Discrepancy...

Code injection

Avaya IX Workforce Engagement v15.2.7.1195 - User Enumeration - Observable Response Discrepancy...

Serenity / StartSharp Software File Upload / XSS / User Enumeration / Reusable Tokens

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple Vulnerabilities product: Serenity and StartSharp Software vulnerable version: 6.7.1 fixed version: 6.7.1 or higher CVE number: CVE-2023-31285, CVE-2023-31286,...

CVE-2023-31186

CVE-2023-31186 affects Avaya IX Workforce Engagement, specifically version 15.2.7.1195, where a user enumeration vulnerability is described as an observable response discrepancy. The connected documents (e.g., CNNVD-202305-2542 and NVD entry) corroborate that an attacker could enumerate users via...