409 matches found
CVE-2025-68621
CVE-2025-68621 тАФ Timing-Angriff auf /api/login/sync in Trilium Notes Schweregrad: HIGH CVSS 7.4 Betroffene Software: TriliumNext/Trilium 0.101.0 Schwachstellentyp: CWE-208 тАУ Beobachtbare Timing-Diskrepanz Observable Timing Discrepancy Behoben in: Trilium 0.101.0 PR 8129 Ver├╢ffentlicht: 2026-02-06...
CVE-2026-11754
Observable discrepancy vulnerability in Seres Software syWEB allows Account Footprinting. This issue affects syWEB: through 27082026. NOTE: The vendor was contacted and it was learned that the product is not supported...
CVE-2026-11754 User Enumeration in Seres Software's syWEB
Observable discrepancy vulnerability in Seres Software syWEB allows Account Footprinting. This issue affects syWEB: through 27082026. NOTE: The vendor was contacted and it was learned that the product is not supported...
EUVD-2026-67135
Observable discrepancy vulnerability in Seres Software syWEB allows Account Footprinting. This issue affects syWEB: through 27082026. NOTE: The vendor was contacted and it was learned that the product is not supported...
CVE-2026-11754
An observable discrepancy vulnerability in Seres Software syWEB (affecting versions through 27082026) allows Account Footprinting , also described as User Enumeration . The CVSS 3.1 score is 5.3 (MEDIUM) with a network attack vector, low complexity, no required privileges, no user interaction, an...
Cortex
Cortex рдЙрд╕ рд╕рд╛рдорд╛рдиреНрдп рд╕рдорд╕реНрдпрд╛ рдХреЛ рд╣рд▓ рдХрд░рдиреЗ рдХрд╛ рдкреНрд░рдпрд╛рд╕ рдХрд░рддрд╛ рд╣реИ рдЬрд┐рд╕рдХрд╛ рд╕рд╛рдордирд╛ SOCs, CSIRTs рдФрд░ рд╕реБрд░рдХреНрд╖рд╛ рд╢реЛрдзрдХрд░реНрддрд╛рдУрдВ рдХреЛ threat intelligence рдЦрддрд░реЗ рдХреА рдЦреБрдлрд┐рдпрд╛ рдЬрд╛рдирдХрд╛рд░реА, рдбрд┐рдЬрд┐рдЯрд▓ рдлреЛрд░реЗрдВрд╕рд┐рдХ рдФрд░ рдШрдЯрдирд╛ рдкреНрд░рддрд┐рдХреНрд░рд┐рдпрд╛ incident response рдХреЗ рджреМрд░рд╛рди рдЕрдХреНрд╕рд░ рдХрд░рдирд╛ рдкрдбрд╝рддрд╛ рд╣реИ: рдЙрдирдХреЗ рджреНрд╡рд╛рд░рд╛ рдПрдХрддреНрд░ рдХрд┐рдП рдЧрдП observables рдХрд╛ рд╡рд┐рд╢реНрд▓реЗрд╖рдг рдХреИрд╕реЗ рдХрд░реЗрдВ , рдмрдбрд╝реЗ...
CVE-2021-45901
CVE-2021-45901 ServiceNow - Benutzernamen-Enumeration PoC-Code enumSNOWUsers.py - SNOW-Benutzer-Enumerator Titel Benutzernamen-Enumeration-Schwachstelle in der ServiceNow-Anwendung gefunden Ver├╢ffentlicht: Version: 1.0 Anbieter: ServiceNow Produkt: ServiceNow https://www.servicenow.com/ Betroffen...
CVE-2026-79287
A flaw was found in chromium-browser. A remote attacker could exploit an observable discrepancy in Forms by crafting a malicious HTML page. This could allow the attacker to obtain sensitive information from the user...
CVE-2026-79242
A flaw was found in Google Chrome. This vulnerability, stemming from an observable discrepancy in HTML processing, could be exploited by a remote attacker. By crafting a malicious HTML page, an attacker could gain access to sensitive information...
CVE-2026-79030
A flaw was found in Chromium's Autofill feature. A remote attacker could exploit an observable discrepancy by crafting a malicious HTML page. This could allow the attacker to obtain sensitive user information...
Linux Distros Unpatched Vulnerability : CVE-2026-79028
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Observable discrepancy in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page...
CVE-2026-18259
Observable Timing Discrepancy vulnerability in Drupal Token Content Access allows Brute Force. This issue affects Token Content Access versions: from 0.0.0 to 3.1.2...
CVE-2026-18259 Token Content Access - Moderately critical - Access bypass - SA-CONTRIB-2026-090
Observable Timing Discrepancy vulnerability in Drupal Token Content Access allows Brute Force. This issue affects Token Content Access versions: from 0.0.0 to 3.1.2...
CVE-2026-18259
Drupal Token Content Access (versions 0.0.0 through 3.1.2 ) contains an observable timing discrepancy in its access token comparison logic. Because the module does not sufficiently protect the token comparison in some cases, a persistent attacker who knows or discovers a URL for protected content...
CVE-2026-79181
Observable discrepancy in Glic in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...
DEBIAN-CVE-2026-79181
Observable discrepancy in Glic in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...
CVE-2026-79030
Observable discrepancy in Autofill in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
DEBIAN-CVE-2026-79030
Observable discrepancy in Autofill in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
DEBIAN-CVE-2026-78955
Observable discrepancy in PerformanceAPIs in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...