CVE-2025-1714 Username Enumeration in Gliffy

Lack of Rate Limiting in Sign-up workflow in Perforce Gliffy prior to version 4.14.0-7 on Gliffy online allows attacker to enumerate valid user emails and potentially DOS the server...

CVE-2025-1714

CVE-2025-1714 concerns Perforce Gliffy Online: lack of rate limiting in the sign-up workflow before version 4.14.0-7 enables an attacker to enumerate valid user emails and potentially trigger denial-of-service. The Red Hat and CVE feeds corroborate the same description. Impact is consistent with ...

CVE-2025-1714 Username Enumeration in Gliffy

Lack of Rate Limiting in Sign-up workflow in Perforce Gliffy prior to version 4.14.0-7 on Gliffy online allows attacker to enumerate valid user emails and potentially DOS the server...

Perforce Gliffy 安全漏洞

Perforce Gliffy is a Perforce software for charting via HTML5 cloud-based applications. A security vulnerability exists in Perforce Gliffy versions prior to 4.14.0-7, which stems from a lack of rate limiting in the registration process and could lead to user mailbox enumeration and denial of...

Perforce Gliffy 安全漏洞

Perforce Gliffy is a Perforce software for charting via HTML5 cloud-based applications. A security vulnerability exists in Perforce Gliffy that stems from an authentication flaw in the application reset feature that results in broken authentication...

Perforce Gliffy 安全漏洞

Perforce Gliffy is a Perforce software for charting via HTML5 cloud-based applications. A security vulnerability exists in Perforce Gliffy versions prior to 4.14.0-7 that stems from vulnerability to cross-site request forgery attacks...

Perforce Helix Core 资源管理错误漏洞

Perforce Helix Core is a scalable and secure version control system from Perforce, Inc. A resource management error vulnerability exists in versions of Perforce Helix Core prior to 2024.2 that originates from an unauthenticated remote denial of service via the auto-generation feature...

Perforce Helix Core 资源管理错误漏洞

Perforce Helix Core is a scalable and secure version control system from Perforce, Inc. A resource management error vulnerability exists in versions of Perforce Helix Core prior to 2024.2 that originates from an unauthenticated remote denial of service via a shutdown feature...

Perforce Gliffy 安全漏洞

Perforce Gliffy is a Perforce software for charting via HTML5 cloud-based applications. A security vulnerability exists in Perforce Gliffy versions prior to 4.14.0-6 that stems from an insecure configuration...

Perforce Helix Core 资源管理错误漏洞

Perforce Helix Core is a scalable and secure version control system from Perforce, Inc. A resource management error vulnerability exists in versions of Perforce Helix Core prior to 2024.2 that originates from an unauthenticated remote denial of service via the auto-generation feature...

Perforce Helix Core 安全漏洞

Perforce Helix Core is a scalable and secure version control system from Perforce. A security vulnerability exists in Perforce Helix Core prior to version 2024.1 Patch 2, which stems from the best fit parameter containing a parameter injection vulnerability...

Perforce Helix ALM Security Vulnerability

Perforce Helix ALM is an application lifecycle management software from Perforce. A security vulnerability exists in Perforce Helix ALM versions prior to 2024.2.0 that stems from the presence of local command injection...

Fedora 39 : composer (2024-bb55f8476a)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-bb55f8476a advisory. Version 2.7.7 2024-06-10 Security: Fixed command injection via malicious git branch name GHSA-47f6-5gq3-vx9c / CVE-2024-35241 Security: Fixed multip...

Fedora 40 : composer (2024-9ed24c98cd)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-9ed24c98cd advisory. Version 2.7.7 2024-06-10 Security: Fixed command injection via malicious git branch name GHSA-47f6-5gq3-vx9c / CVE-2024-35241 Security: Fixed multip...

Helix Sync Command Injection Vulnerability

perforce Helix Sync is a simplification tool from perforce. A security vulnerability exists in Helix Sync versions prior to 2024.1 that stems from the presence of local command injection...

Patching Perforce perforations: Critical RCE vulnerability discovered in Perforce Helix Core Server

Microsoft discovered, responsibly disclosed, and helped remediate four vulnerabilities that could be remotely exploited by unauthenticated attackers in Perforce Helix Core Server “Perforce Server”, a source code management platform largely used in the videogame industry and by multiple...

Patching Perforce perforations: Critical RCE vulnerability discovered in Perforce Helix Core Server

Microsoft discovered, responsibly disclosed, and helped remediate four vulnerabilities that could be remotely exploited by unauthenticated attackers in Perforce Helix Core Server “Helix Core Server”, a source code management platform largely used in the videogame industry and by multiple...

Perforce Software Perforce Helix Resource Management Error Vulnerability

Perforce Software Perforce Helix is an application software from Perforce Software, Inc. It provides application lifecycle management for products. A resource management error vulnerability exists in Perforce Software Perforce Helix versions prior to 2023.2, which stems from a vulnerability that...

Perforce Software Perforce Helix Resource Management Error Vulnerability

Perforce Software Perforce Helix is an application software from Perforce Software, Inc. It provides application lifecycle management for products. A resource management error vulnerability exists in Perforce Software Perforce Helix Core prior to version 2023.2, which stems from a feature that ca...

Perforce Software Perforce Helix Resource Management Error Vulnerability

Perforce Software Perforce Helix is an application software from Perforce Software, Inc. It provides application lifecycle management for products. A resource management error vulnerability exists in Perforce Software Perforce Helix Core prior to version 2023.2, which stems from a vulnerability...