96 matches found
EUVD-2026-44954
Yamcs is a mission control framework. Prior to 5.12.7, the IAM API endpoints listUsers, getUser, listGroups, and getGroup in yamcs-core did not enforce the required SystemPrivilege.ControlAccess check in yamcs-core/src/main/java/org/yamcs/http/api/IamApi.java, so any authenticated user, even one...
EUVD-2026-12498
Chamilo LMS is a learning management system. Prior to version 1.11.36, Chamilo is vulnerable to user enumeration with valid/invalid username. This issue has been patched in version 1.11.36...
CVE-2026-26744
FormaLMS versions 4.1.18 and below are susceptible to a user enumeration vulnerability within the password recovery functionality. An unauthenticated attacker can access the /lostpwd endpoint and observe differing error messages—such as "El nombre de usuario que has insertado no existe. Por favor...
CVE-2023-25192
AMI MegaRAC SPX devices allow User Enumeration through Redfish. The fixed versions are SPx12-update-7.00 and SPx13-update-5.00...
CVE-2023-49274
Umbraco is an ASP.NET content management system CMS. Starting in version 8.0.0 and prior to versions 8.18.10, 10.8.1, and 12.3.4, a user enumeration attack is possible when SMTP is not set up correctly, but reset password is enabled. Versions 8.18.10, 10.8.1, and 12.3.4 contain a patch for this...
CVE-2023-40765
User enumeration is found in PHPJabbers Event Booking Calendar v4.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users...
CVE-2023-40761
User enumeration is found in PHPJabbers Yacht Listing Script v2.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users...
CVE-2023-40757
User enumeration is found in PHPJabbers Food Delivery Script v3.1. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users...
CVE-2020-24008
Umanni RH 1.0 has a user enumeration vulnerability. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users...
EUVD-2019-9287
Malware in sbrugna...
EUVD-2005-2592
Malware in sbrugna...
EUVD-2020-7386
Malware in sbrugna...
EUVD-2020-16745
Malware in sbrugna...
EUVD-2014-4087
Malware in sbrugna...
EUVD-2018-5305
Malware in sbrugna...
EUVD-2020-27521
Malware in sbrugna...
EUVD-2020-5667
Malware in sbrugna...
EUVD-2021-2593
Malware in sbrugna...