16297 matches found
PT-2022-10092
Name of the Vulnerable Software and Affected Versions XWiki versions prior to 12.10.5 XWiki versions prior to 13.2RC1 Description It is possible to determine if a user has an account in a wiki related to an email address and which usernames is tied to that email by forging a request to the "Forgo...
CVE-2021-39021
IBM Guardium Data Encryption GDE 5.0.0.2 behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor, which could facilitate username enumeration. IBM X-Force ID: 213856...
CVE-2021-42641
PrinterLogic Web Stack versions 19.1.1.13 SP9 and below are vulnerable to an Insecure Direct Object Reference IDOR vulnerability that allows an unauthenticated attacker to disclose the username and email address of all users...
Design/Logic Flaw
PrinterLogic Web Stack versions 19.1.1.13 SP9 and below are vulnerable to an Insecure Direct Object Reference IDOR vulnerability that allows an unauthenticated attacker to disclose the username and email address of all users...
PT-2022-10845
Name of the Vulnerable Software and Affected Versions IBM Guardium Data Encryption GDE version 5.0.0.2 Description The issue allows an unauthorized actor to potentially enumerate usernames due to the software behaving differently or sending different responses under various circumstances...
CVE-2021-42641: Exposure of Resource to Wrong Sphere
PrinterLogic Web Stack versions 19.1.1.13 SP9 and below are vulnerable to an Insecure Direct Object Reference IDOR vulnerability that allows an unauthenticated attacker to disclose the username and email address of all users...
PT-2022-12353 · Sourcecodester · Simple Cold Storage Management System
Name of the Vulnerable Software and Affected Versions: Sourcecodester Simple Cold Storage Management System version 1.0 Description: An SQL Injection issue exists in the login functionality, specifically through the username field in the login.php file. This allows for potential unauthorized acce...
PT-2022-11647
Name of the Vulnerable Software and Affected Versions PrinterLogic Web Stack versions 19.1.1.13 SP9 and below Description The issue allows an unauthenticated attacker to disclose the plaintext console username and password for a printer due to an Insecure Direct Object Reference IDOR vulnerabilit...
IBM Guardium Data Encryption security vulnerability
IBM Guardium Data Encryption GDE is an application from IBM USA, Inc. IBM Guardium Data Encryption GDE 5.0.0.2 contains a security vulnerability that can be exploited by attackers to cause username enumeration...
CVE-2021-43510
SQL Injection vulnerability exists in Sourcecodester Simple Client Management System 1.0 via the username field in login.php...
CVE-2021-43510: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection vulnerability exists in Sourcecodester Simple Client Management System 1.0 via the username field in login.php...
PT-2022-11863
Name of the Vulnerable Software and Affected Versions Sourcecodester Simple Client Management System version 1.0 Description A SQL Injection issue exists via the username field in the "login.php" file. This allows for potential exploitation. Recommendations For Sourcecodester Simple Client...
CVE-2021-39021
IBM Guardium Data Encryption GDE 5.0.0.2 behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor, which could facilitate username enumeration. IBM X-Force ID: 213856...
TIBCO Security Advisory: February 15, 2022 - TIBCO BusinessConnect Container Edition -2021-43050
TIBCO BusinessConnect Container Edition administrative username and passwords leakage Original release date: February15, 2022 Last revised: --- CVE-2021-43050 Source: TIBCO Software Inc. Products Affected TIBCO BusinessConnect Container Edition versions 1.1.0 and below The following component is...
TIBCO Security Advisory: February 15, 2022 - TIBCO BusinessConnect Container Edition -2021-43049
TIBCO BusinessConnect Container Edition username and password leakage Original release date: February 15, 2022 Last revised: --- CVE-2021-43049 Source: TIBCO Software Inc. Products Affected TIBCO BusinessConnect Container Edition versions 1.1.0 and below The following component is affected:...
Critical: Red Hat Security Advisory: samba security and bug fix update
An update for samba is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...
ALSA-2022:0332 Critical: samba security and bug fix update
Samba is an open-source implementation of the Server Message Block SMB protocol and the related Common Internet File System CIFS protocol, which allow PC-compatible machines to share files, printers, and various information. Security Fixes: samba: Out-of-bounds heap read/write vulnerability in VF...
samba security and bug fix update
An update is available for samba. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Samba is an open-source implementation of the Server Message Block SMB protocol...
RLSA-2022:0332 Critical: samba security and bug fix update
Samba is an open-source implementation of the Server Message Block SMB protocol and the related Common Internet File System CIFS protocol, which allow PC-compatible machines to share files, printers, and various information. Security Fixes: samba: Out-of-bounds heap read/write vulnerability in VF...
Critical: samba security and bug fix update
Samba is an open-source implementation of the Server Message Block SMB protocol and the related Common Internet File System CIFS protocol, which allow PC-compatible machines to share files, printers, and various information. Security Fixes: samba: Out-of-bounds heap read/write vulnerability in VF...