CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

347 matches found

Rapid7 Vulnerability Database (full)•added 2025/10/16 12:00 a.m.•3 views

CVE-2025-34254: Observable Response Discrepancy

D-Link Nuclias Connect firmware versions = 1.3.1.4 contain an observable response discrepancy vulnerability. The application's 'Login' endpoint returns distinct JSON responses depending on whether the supplied username is associated with an existing account. Because the responses differ in the...

6.9CVSS6.1AI score0.01023EPSS

SaveExploits0References1

Rapid7 Vulnerability Database (full)•added 2025/10/14 12:00 a.m.•2 views

CVE-2025-42903: Observable Response Discrepancy

A vulnerability in SAP Financial Service Claims Management RFC function ICLUSERGETNAMEANDADDRESS allows user enumeration and potential disclosure of personal data through response discrepancies, causing low impact on confidentiality with no impact on integrity or availability...

4.3CVSS5.7AI score0.00335EPSS

SaveExploits0References1

Cvelist•added 2025/10/09 1:56 p.m.•22 views

CVE-2025-36225 IBM Aspera Faspex information disclosure

IBM Aspera 5.0.0 through 5.0.13.1 could disclose sensitive user information from the system to an authenticated user due to an observable discrepancy of returned data...

4.3CVSS0.0023EPSS

SaveExploits0References1

EUVD•added 2025/10/07 12:30 a.m.•20 views

EUVD-2020-5667

Malware in sbrugna...

5.3CVSS6AI score0.01369EPSS

SaveExploits1References3

Rapid7 Vulnerability Database (full)•added 2025/10/06 12:00 a.m.•9 views

CVE-2025-58586: Observable Response Discrepancy

For failed login attempts, the application returns different error messages depending on whether the login failed due to an incorrect password or a non-existing username. This allows an attacker to guess usernames until they find an existing one...

5.3CVSS5.8AI score0.00364EPSS

SaveExploits0References1

EUVD•added 2025/10/03 8:07 p.m.•18 views

EUVD-2023-35502