Lucene search
K

8 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 10:28 p.m.7 views

CVE-2022-23619

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions it's possible to guess if a user has an account on the wiki by using the "Forgot your password" form, even if the wiki is closed to guest users. This problem has been...

7.5CVSS6.7AI score0.00069EPSS
Exploits0References1
Prion
Prion
added 2022/02/09 9:15 p.m.14 views

Design/Logic Flaw

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions it's possible to guess if a user has an account on the wiki by using the "Forgot your password" form, even if the wiki is closed to guest users. This problem has been...

5CVSS7.5AI score0.00069EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2022/02/09 9:10 p.m.27 views

CVE-2022-23619 Information exposure in xwiki-platform

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions it's possible to guess if a user has an account on the wiki by using the "Forgot your password" form, even if the wiki is closed to guest users. This problem has been...

5.3CVSS7.4AI score0.00069EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2022/02/09 9:10 p.m.5 views

CVE-2022-23619 Information exposure in xwiki-platform

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions it's possible to guess if a user has an account on the wiki by using the "Forgot your password" form, even if the wiki is closed to guest users. This problem has been...

5.3CVSS7AI score0.00069EPSS
Exploits0References3
OSV
OSV
added 2021/08/06 9:15 p.m.0 views

DEBIAN-CVE-2021-38155

OpenStack Keystone 10.x through 16.x before 16.0.2, 17.x before 17.0.1, 18.x before 18.0.1, and 19.x before 19.0.1 allows information disclosure during account locking related to PCI DSS features. By guessing the name of an account and failing to authenticate multiple times, any unauthenticated...

7.5CVSS6.4AI score0.01067EPSS
Exploits1References1
exploitpack
exploitpack
added 2000/11/20 12:0 a.m.18 views

BB4 Big Brother Network Monitor 1.5 d2 - bb-hist.sh?HISTFILE File Existence Disclosure

BB4 Big Brother Network Monitor 1.5 d2 - bb-hist.sh?HISTFILE File Existence Disclosure source : https://www.securityfocus.com/bid/1971/info Big Brother Network Monitor is a robust, feature rich network monitoring package produced by BB4 Technologies. A problem exists that can allow remote account...

7.4AI score
Exploits0
Exploit DB
Exploit DB
added 2000/11/20 12:0 a.m.28 views

BB4 Big Brother Network Monitor 1.5 d2 - 'bb-hist.sh?HISTFILE' File Existence Disclosure

source : https://www.securityfocus.com/bid/1971/info Big Brother Network Monitor is a robust, feature rich network monitoring package produced by BB4 Technologies. A problem exists that can allow remote account guessing. The problem occurs in the Common Gateway Interface package included with Big...

7.4AI score
Exploits0
Packet Storm
Packet Storm
added 1999/08/17 12:0 a.m.40 views

ssh-2.0.12.brute.force.txt

Date: Wed, 9 Jun 1999 15:51:54 +0200 From: [email protected] To: [email protected] Subject: ssh advirsory Aleph ... Sorry if it is an old bug ... i have tested a bug in ssh-2.0.12. any remote attacker can guess real account in the machine Details when a ssh client connects to the daemo...

7.4AI score
Exploits0
Rows per page
Query Builder