Lucene search
K

4 matches found

CVE
CVE
added 2025/09/03 2:25 p.m.8 views

CVE-2025-9824

The CVE-2025-9824 issue stems from different login response times for existing versus non-existent users in Mautic, enabling user enumeration and potential brute-force attempts. Technical details describe that valid usernames trigger password hashing while invalid ones do not; the fix adds a Timi...

5.9CVSS6.4AI score0.00076EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/08/27 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2024-36611

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Symfony v7.07, a security vulnerability was identified in the FormLoginAuthenticator component, where it failed to adequately handle cases where the username...

7.5CVSS5.8AI score0.00097EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/05/23 8:16 a.m.1 views

CVE-2024-36611

In Symfony v7.07, a security vulnerability was identified in the FormLoginAuthenticator component, where it failed to adequately handle cases where the username or password field of a login request is empty. This flaw could lead to various security risks, including improper authentication logic...

7.5CVSS5.9AI score0.00097EPSS
Exploits0References1
OSV
OSV
added 2024/11/29 7:15 p.m.2 views

DEBIAN-CVE-2024-36611

In Symfony v7.07, a security vulnerability was identified in the FormLoginAuthenticator component, where it failed to adequately handle cases where the username or password field of a login request is empty. This flaw could lead to various security risks, including improper authentication logic...

7.5CVSS5.4AI score0.00097EPSS
Exploits0References1
Rows per page
Query Builder