3984 matches found
Design/Logic Flaw
Stop User Enumeration 1.3.8 allows user enumeration via the REST API...
CVE-2017-1000226
Stop User Enumeration 1.3.8 allows user enumeration via the REST API...
CVE-2017-1000226
Stop User Enumeration 1.3.8 allows user enumeration via the REST API...
CVE-2017-1000226
The Stop User Enumeration plugin for WordPress version 1.3.8 contains a logic flaw that allows user enumeration via the REST API . This vulnerability enables unauthorized actors to perform enumeration operations, potentially exposing sensitive information. As a remediation, it is recommended to d...
PT-2017-10922
Name of the Vulnerable Software and Affected Versions Stop User Enumeration version 1.3.8 Description The issue allows user enumeration via the REST API. Recommendations For version 1.3.8, consider disabling the REST API until a patch is available to prevent user enumeration...
CVE-2017-1000226: Exposure of Sensitive Information to an Unauthorized Actor
Stop User Enumeration 1.3.8 allows user enumeration via the REST API...
MediaWiki Multiple Vulnerabilities (Nov 2017) - Windows
MediaWiki is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mediawiki:mediawiki"; if...
Samsung SRN-1670D Multiple Vulnerabilities
Samsung SRN cameras are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:samsung:webviewer"; if...
DALIM SOFTWARE ES Core 5.0 build 7184.1 User Enumeration Weakness
Description The weakness is caused due to the 'Login.jsp' script enumerating the list of valid usernames when some characters are provided via the 'login' parameter. Vendor Dalim Software GmbH - https://www.dalim.com Affected Version ES/ESPRiT 5.0 build 7184.1 build 7163.2 build 7163.0 build 7135...
Infogram: User enumeration via forgot password error message
Hi Team, Vulnerable URL : https://infogram.com/forgot Description: During testing forgot password field whether it's rate limiting is working or not, I noticed forgot password field is vulnerable to user enumeration. When user enter email id which is not available into database it shows an error ...
Infogram: User Enumeration
Vulnerability:- -User enumeration is possible through forgot password feature. steps to reproduce:- -Go to the above selected domain and go to forgot password. -You can submit a mail address and check whether it is existing in your database or not. Remediation:- -It should display like "if that...
SilverStripe CMS User Enumeration Vulnerability
SilverStripe CMS is a New Zealand SilverStripe company's open source programming framework and content management system CMS. The system has support for multiple languages , cross-platform and other features . A security vulnerability exists in the login and password reset forms in SilverStripe C...
Timing Attack Via Discrepancies In Response
silverstripe/cms is vulnerable to timing attacks. There are some discrepancies in the password reset and login form responses which can be misused by the attacker to enumerate the users...
CVE-2017-12849
Response discrepancy in the login and password reset forms in SilverStripe CMS before 3.5.5 and 3.6.x before 3.6.1 allows remote attackers to enumerate users via timing attacks...
Design/Logic Flaw
Response discrepancy in the login and password reset forms in SilverStripe CMS before 3.5.5 and 3.6.x before 3.6.1 allows remote attackers to enumerate users via timing attacks...
CVE-2017-12849
Response discrepancy in the login and password reset forms in SilverStripe CMS before 3.5.5 and 3.6.x before 3.6.1 allows remote attackers to enumerate users via timing attacks...
CVE-2017-12849
Response discrepancy in the login and password reset forms in SilverStripe CMS before 3.5.5 and 3.6.x before 3.6.1 allows remote attackers to enumerate users via timing attacks...
CVE-2017-12849
Response discrepancy in the login and password reset forms in SilverStripe CMS before 3.5.5 and 3.6.x before 3.6.1 allows remote attackers to enumerate users via timing attacks...
CVE-2017-12849
SilverStripe CMS contains a timing-based user enumeration vulnerability in login and password reset forms. CVE-2017-12849 affects SilverStripe CMS versions prior to 3.5.5 and 3.6.x prior to 3.6.1, enabling remote attackers to determine valid usernames via response timing differences. Multiple con...
