CVE-2025-67715

Weblate is a web based localization tool. In versions prior to 5.15, it was possible to retrieve user notification settings or list all users via API. Version 5.15 fixes the issue...

CVE-2024-7266: Incorrect Authorization

Incorrect User Management vulnerability in Naukowa i Akademicka Sieć Komputerowa - Państwowy Instytut Badawczy EZD RP allows logged-in user to list all users in the system, including those from other organizations. This issue affects EZD RP: from 15 before 15.84, from 16 before 16.15, from 17...

NASK-PIB EZD RP 安全漏洞

NASK-PIB EZD RP is an electronic document management system from NASK-PIB Poland for document management and process optimization in the government and public sector. A security vulnerability exists in NASK-PIB EZD RP that stems from the presence of an incorrect user management vulnerability that...

Code injection

The UserTakeOver plugin before 4.0.1 for ILIAS allows an attacker to list all users via the search function...

CVE-2022-31478

The UserTakeOver plugin before 4.0.1 for ILIAS allows an attacker to list all users via the search function...