CVE-2026-72699: Observable Discrepancy

The Grav Login plugin getgrav/grav-plugin-login before 3.9.1 is vulnerable to email address enumeration. The register method in classes/Login.php throws a distinct exception EMAILNOTAVAILABLE when a submitted email address already belongs to an existing account, while allowing registration to...

EUVD-2026-43588

SAP HANA Database user self service tools allows an unauthenticated user to send specially crafted requests that produce distinguishable responses, enabling enumeration of valid user accounts and email addresses. Successful exploitation could allow the attacker to enumerate valid user accounts,...

CVE-2024-22646

An email address enumeration vulnerability exists in the password reset function of SEO Panel version 4.10.0. This allows an attacker to guess which emails exist on the system...

CVE-2024-22646: Generation of Error Message Containing Sensitive Information

An email address enumeration vulnerability exists in the password reset function of SEO Panel version 4.10.0. This allows an attacker to guess which emails exist on the system...

CVE-2024-22646

The provided sources corroborate CVE-2024-22646 affecting SEO Panel version 4.10.0, describing an email address enumeration vulnerability in the password reset function that lets an attacker determine which emails exist on the system. The CVSS data in the NVD entry indicates a Network attack vect...

CVE-2020-28208

An email address enumeration vulnerability exists in the password reset function of Rocket.Chat through 3.9.1...

CVE-2020-28208

Rocket.Chat up to version 3.9.1 is affected by an information-disclosure vulnerability in the password-reset function that allows an attacker to enumerate registered email addresses. The root cause is information exposure via the reset workflow, enabling potential access to sensitive information....

CVE-2020-28208: Observable Discrepancy

An email address enumeration vulnerability exists in the password reset function of Rocket.Chat through 3.9.1...

Rocket.Chat Security Vulnerability

Rocket.Chat is an open source team chat software. A security vulnerability exists in Rocket.Chat 3.7.1, which can be exploited by an attacker to perform e-mail address enumeration...

CVE-2017-15110: Exposure of Sensitive Information to an Unauthorized Actor

In Moodle 3.x, students can find out email addresses of other students in the same course. Using search on the Participants page, students could search email addresses of all participants regardless of email visibility. This allows enumerating and guessing emails of other students...