3395 matches found
CVE-2017-16687
The user self-service tools of SAP HANA extended application services, classic user self-service, a part of SAP HANA Database versions 1.00 and 2.00, can be misused to enumerate valid and invalid user accounts. An unauthenticated user could use the error messages to determine if a given username ...
WordPress Stop User Enumeration User Enumeration Vulnerability
WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites on PHP and MySQL servers.Stop User Enumeration is one of the plug-ins used to stop user enumeration. A user enumeration vulnerability exists in...
Design/Logic Flaw
Stop User Enumeration 1.3.8 allows user enumeration via the REST API...
CVE-2017-1000226
Stop User Enumeration 1.3.8 allows user enumeration via the REST API...
CVE-2017-1000226
Stop User Enumeration 1.3.8 allows user enumeration via the REST API...
CVE-2017-1000226
The CVE-2017-1000226 entry concerns WordPress Stop User Enumeration plugin version 1.3.8. The available connected data indicate a vulnerability that allows user enumeration via the REST API. The issue is described consistently across sources as stemming from the REST interface exposing username i...
PT-2017-10922
Name of the Vulnerable Software and Affected Versions Stop User Enumeration version 1.3.8 Description The issue allows user enumeration via the REST API. Recommendations For version 1.3.8, consider disabling the REST API until a patch is available to prevent user enumeration...
Samsung SRN-1670D Multiple Vulnerabilities
Samsung SRN cameras are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:samsung:webviewer"; if...
MediaWiki Multiple Vulnerabilities (Nov 2017) - Windows
MediaWiki is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mediawiki:mediawiki"; if...
DALIM SOFTWARE ES Core 5.0 build 7184.1 User Enumeration Weakness
Description The weakness is caused due to the 'Login.jsp' script enumerating the list of valid usernames when some characters are provided via the 'login' parameter. Vendor Dalim Software GmbH - https://www.dalim.com Affected Version ES/ESPRiT 5.0 build 7184.1 build 7163.2 build 7163.0 build 7135...
Infogram: User enumeration via forgot password error message
Hi Team, Vulnerable URL : https://infogram.com/forgot Description: During testing forgot password field whether it's rate limiting is working or not, I noticed forgot password field is vulnerable to user enumeration. When user enter email id which is not available into database it shows an error ...
Infogram: User Enumeration
Vulnerability:- -User enumeration is possible through forgot password feature. steps to reproduce:- -Go to the above selected domain and go to forgot password. -You can submit a mail address and check whether it is existing in your database or not. Remediation:- -It should display like "if that...
SilverStripe CMS User Enumeration Vulnerability
SilverStripe CMS is a New Zealand SilverStripe company's open source programming framework and content management system CMS. The system has support for multiple languages , cross-platform and other features . A security vulnerability exists in the login and password reset forms in SilverStripe C...
Timing Attack Via Discrepancies In Response
silverstripe/cms is vulnerable to timing attacks. There are some discrepancies in the password reset and login form responses which can be misused by the attacker to enumerate the users...
CVE-2017-12849
Response discrepancy in the login and password reset forms in SilverStripe CMS before 3.5.5 and 3.6.x before 3.6.1 allows remote attackers to enumerate users via timing attacks...
CVE-2017-12849
Response discrepancy in the login and password reset forms in SilverStripe CMS before 3.5.5 and 3.6.x before 3.6.1 allows remote attackers to enumerate users via timing attacks...
CVE-2017-12849
Response discrepancy in the login and password reset forms in SilverStripe CMS before 3.5.5 and 3.6.x before 3.6.1 allows remote attackers to enumerate users via timing attacks...
Design/Logic Flaw
Response discrepancy in the login and password reset forms in SilverStripe CMS before 3.5.5 and 3.6.x before 3.6.1 allows remote attackers to enumerate users via timing attacks...
CVE-2017-12849
SilverStripe CMS contains a timing-based user enumeration vulnerability in login and password reset forms. CVE-2017-12849 affects SilverStripe CMS versions prior to 3.5.5 and 3.6.x prior to 3.6.1, enabling remote attackers to determine valid usernames via response timing differences. Multiple con...