CVE-2025-67715

Weblate is a web based localization tool. In versions prior to 5.15, it was possible to retrieve user notification settings or list all users via API. Version 5.15 fixes the issue...

PT-2024-38219

Name of the Vulnerable Software and Affected Versions EZD RP versions 15 through 15.83 EZD RP versions 16 through 16.14 EZD RP versions 17 through 17.1 Description The issue allows a logged-in user to list all users in the system, including those from other organizations. This is due to an...

CVE-2024-7266: Incorrect Authorization

Incorrect User Management vulnerability in Naukowa i Akademicka Sieć Komputerowa - Państwowy Instytut Badawczy EZD RP allows logged-in user to list all users in the system, including those from other organizations. This issue affects EZD RP: from 15 before 15.84, from 16 before 16.15, from 17...

NASK-PIB EZD RP security vulnerabilities

NASK-PIB EZD RP is an electronic document management system from NASK-PIB Poland for document management and process optimization in the government and public sector. A security vulnerability exists in NASK-PIB EZD RP that stems from the presence of an incorrect user management vulnerability that...

Code injection

The UserTakeOver plugin before 4.0.1 for ILIAS allows an attacker to list all users via the search function...

CVE-2022-31478

The UserTakeOver plugin before 4.0.1 for ILIAS allows an attacker to list all users via the search function...

PT-2022-20754

Name of the Vulnerable Software and Affected Versions ILIAS UserTakeOver plugin versions prior to 4.0.1 Description The issue allows an attacker to list all users via the search function. Recommendations For versions prior to 4.0.1, update to version 4.0.1 or later to resolve the issue...