25 matches found
CVE-2026-26744
CVE-2026-26744 FormaLMS（4.1.18 以下）の /lostpwd エンドポイントからアクセス可能なパスワード回復機能に、ユーザー列挙の脆弱性が存在します。このアプリケーションは、有効なユーザー名と無効なユーザー名に対して異なるエラーメッセージを返します（例：存在しないユーザーの場合「The username you've inserted doesn't exist. Please check and retry.」）。これにより、認証されていない攻撃者が、観測可能なレスポンスの差異（CWE-204）を通じて、システムに登録されているユーザー名を特定できます。...
CVE-2026-78584 Observable Response Discrepancy in Kibana Leading to Cross-Space Information Disclosure
Observable Response Discrepancy CWE-204 in the Kibana Osquery feature can lead to information disclosure via Query System for Information CAPEC-54. An authenticated user holding Osquery live-query privileges could determine whether a scheduled query identifier exists in a Kibana space they are no...
CVE-2025-46047
CVE-2025-46047 Silverpeas = 6.4.2 사용자 이름 열거 PoC Silverpeas 버전 6.4.1 및 6.4.2의 사용자 이름 열거 취약점을 시연하는 개념 증명 스크립트입니다. 취약점 세부 정보 영향받는 소프트웨어: Silverpeas 영향받는 버전: 6.4.1, 6.4.2 및 잠재적으로 이전 버전 수정된 버전: 6.4.3 취약점 유형: 관찰 가능한 응답 차이를 통한 사용자 이름 열거 CWE-204 공급업체 추적 ID: Silverpeas Bug 14829 요약: 이 취약점은 비밀번호 찾기 기능...
CVE-2025-1101
A CWE-204 "Observable Response Discrepancy" in the login page in Q-Free MaxTime less than or equal to version 2.11.0 allows an unauthenticated remote attacker to enumerate valid usernames via crafted HTTP requests...
EUVD-2024-37323
Malicious code in bioql PyPI...
EUVD-2024-39561
Malicious code in bioql PyPI...
EUVD-2025-23822
Malicious code in bioql PyPI...
EUVD-2025-2003
Malicious code in bioql PyPI...
CVE-2025-46390
CWE-204: Observable Response Discrepancy...
CVE-2025-1101
A CWE-204 "Observable Response Discrepancy" in the login page in Q-Free MaxTime less than or equal to version 2.11.0 allows an unauthenticated remote attacker to enumerate valid usernames via crafted HTTP requests...
CVE-2024-42343 Loway - CWE-204: Observable Response Discrepancy
Loway - CWE-204: Observable Response Discrepancy...
CVE-2024-42343 Loway - CWE-204: Observable Response Discrepancy
Loway - CWE-204: Observable Response Discrepancy...
CVE-2024-38431
Matrix Tafnit v8 - CWE-204: Observable Response Discrepancy...
CVE-2024-38431
Matrix Tafnit v8 - CWE-204: Observable Response Discrepancy...
CVE-2024-38431 Matrix Tafnit v8 - CWE-204: Observable Response Discrepancy
Matrix Tafnit v8 - CWE-204: Observable Response Discrepancy...
CVE-2024-38431
CVE-2024-38431 relates to Matrix Tafnit v8 and CWE-204: Observable Response Discrepancy. The available documents identify Matrix Tafnit version 8 as affected, with the underlying issue described as an observable response discrepancy. Exploitation status is not documented in the provided sources. ...
CVE-2024-38431 Matrix Tafnit v8 - CWE-204: Observable Response Discrepancy
Matrix Tafnit v8 - CWE-204: Observable Response Discrepancy...
CVE-2023-37217
Tadiran Telecom Aeonix - CWE-204: Observable Response Discrepancy...
CVE-2023-37217
CVE-2023-37217 affects Tadiran Telecom Aeonix. The vulnerability is described as an observable response discrepancy (CWE-204) that can reveal differences in responses; a false comparison vulnerability is noted in external summaries (CNNVD/PT-2023-25835) as the underlying issue. CVSS data indicate...