4 matches found
CVE-2024-55198
The Celk Sistemas Celk Saude health sector management software, specifically version 3.1.252.1 , is vulnerable to user enumeration due to discrepancies in error messages within the password recovery functionality . A remote attacker can exploit these inconsistent responses to identify valid users...
CVE-2019-18865
Information disclosure via error message discrepancies in authentication functions in Blaauw Remote Kiln Control through v3.00r4 allows an unauthenticated attacker to enumerate valid usernames...
PT-2020-9996
Name of the Vulnerable Software and Affected Versions: Blaauw Remote Kiln Control versions prior to 3.00r4 Description: The issue allows an unauthenticated attacker to enumerate valid usernames through error message discrepancies in authentication functions. Recommendations: For versions prior to...
CVE-2011-4898
wp-admin/setup-config.php in the installation component in WordPress 3.3.1 and earlier generates different error messages for requests lacking a dbname parameter depending on whether the MySQL credentials are valid, which makes it easier for remote attackers to conduct brute-force attacks via a...