2 matches found
Code injection
The login function of Mealie v1.0.0beta-2 allows attackers to enumerate existing usernames by timing the server's response time...
5CVSS5.3AI score0.00565EPSS
SaveExploits0References1Affected Software1
CVE-2004-1602
ProFTPD 1.2.x (including 1.2.8 and 1.2.10) is vulnerable to username enumeration via timing differences in responses, enabling remote attackers to identify valid usernames. Root cause: timing-based information disclosure in login handling. Affected products: ProFTPD before 1.2.11. Impact: partial...
5CVSS6.7AI score0.30679EPSS
SaveExploits2References5Affected Software1
20