CVE-2022-37935

HPE OneView for VMware vCenter, in certain circumstances, may disclose the “HPE OneView” Username and Password...

CVE-2022-37935

HPE OneView for VMware vCenter, in certain circumstances, may disclose the “HPE OneView” Username and Password...

CVE-2022-37935: Undefined Security Weakness

HPE OneView for VMware vCenter, in certain circumstances, may disclose the “HPE OneView” Username and Password...

CVE-2021-33948

SQL injection vulnerability in FantasticLBP Hotels Server v1.0 allows attacker to execute arbitrary code via the username parameter...

CVE-2021-33948

SQL injection vulnerability in FantasticLBP Hotels Server v1.0 allows attacker to execute arbitrary code via the username parameter...

CVE-2022-40032

SQL Injection vulnerability in Simple Task Managing System version 1.0 in login.php in 'username' and 'password' parameters, allows attackers to execute arbitrary code and gain sensitive information...

PT-2023-2205 · Hewlett Packard · Hpe Oneview For Vmware Vcenter

Name of the Vulnerable Software and Affected Versions: HPE OneView for VMware vCenter affected versions not specified Description: The issue is related to insufficient protection of registration data, which may lead to the disclosure of the HPE OneView username and password. This could allow an...

PT-2023-13741

Name of the Vulnerable Software and Affected Versions Simple Task Managing System version 1.0 Description The issue allows attackers to execute arbitrary code and gain sensitive information through a SQL Injection vulnerability in the login.php file, specifically in the username and password...

CVE-2021-33948

SQL injection vulnerability in FantasticLBP Hotels Server v1.0 allows attacker to execute arbitrary code via the username parameter...

CVE-2021-33948

SQL injection vulnerability in FantasticLBP Hotels Server v1.0 allows attacker to execute arbitrary code via the username parameter...

PT-2023-12228

Name of the Vulnerable Software and Affected Versions FantasticLBP Hotels Server version 1.0 Description The issue allows an attacker to execute arbitrary code via the username parameter, which is vulnerable to SQL injection. This enables the attacker to potentially access and manipulate sensitiv...

CVE-2022-40032

SQL Injection vulnerability in Simple Task Managing System version 1.0 in login.php in 'username' and 'password' parameters, allows attackers to execute arbitrary code and gain sensitive information...

CVE-2022-40032: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in Simple Task Managing System version 1.0 in login.php in 'username' and 'password' parameters, allows attackers to execute arbitrary code and gain sensitive information...

CVE-2021-33948: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in FantasticLBP Hotels Server v1.0 allows attacker to execute arbitrary code via the username parameter...

FantasticLBP Hotels: SQL Injection Vulnerability in Server Code

FantasticLBP Hotels Server is a backend management system for hotel reservation systems. A security vulnerability exists in FantasticLBP Hotels Server v1.0 that allows an attacker to execute arbitrary code via the username parameter...

SUSE CVE-2023-25566

GSS-NTLMSSP is a mechglue plugin for the GSSAPI library that implements NTLM authentication. Prior to version 1.2.0, a memory leak can be triggered when parsing usernames which can trigger a denial-of-service. The domain portion of a username may be overridden causing an allocated memory area the...

CVE-2022-27891

Palantir Gotham CVE-2022-27891 describes an unauthenticated endpoint that surfaced all active usernames with sessions. Affected: Gotham versions prior to 103.30221005.0. Impact is primarily information disclosure; no exploitation/vector details are provided beyond the endpoint exposure. Remediati...

CVE-2021-34117

SQL Injection vulnerability in SEO Panel 4.9.0 in api/user.api.php in function getUserName in the username parameter, allows attackers to gain sensitive information...

CVE-2022-45543

Cross site scripting XSS vulnerability in DiscuzX 3.4 allows attackers to execute arbitrary code via the datetline, title, tpp, or username parameters via the audit search...

jenkins: Observable timing discrepancy allows determining username validity

In Jenkins 2.355 and earlier, LTS 2.332.3 and earlier, an observable timing discrepancy on the login form allows distinguishing between login attempts with an invalid username, and login attempts with a valid username and wrong password, when using the Jenkins user database security realm...