CVE-2022-30550

An issue was discovered in the auth component in Dovecot 2.2 and 2.3 before 2.3.20. When two passdb configuration entries exist with the same driver and args settings, incorrect usernamefilter and mechanism settings can be applied to passdb definitions. These incorrectly applied settings can lead...

CVE-2022-30550

An issue was discovered in the auth component in Dovecot 2.2 and 2.3 before 2.3.20. When two passdb configuration entries exist with the same driver and args settings, incorrect usernamefilter and mechanism settings can be applied to passdb definitions. These incorrectly applied settings can lead...

PT-2022-20215

Name of the Vulnerable Software and Affected Versions Software affected versions not specified Description The system allows unauthorized viewing of usernames and passwords, enabling access to the system. The issue is accessible via the "http://api/sys username passwd.cmd" API endpoint...

CVE-2022-26656: Undefined Security Weakness

Pexip Infinity before 27.3 allows remote attackers to trigger a software abort, and possibly enumerate usernames, via One Touch Join...

CVE-2022-30982: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Gentics CMS before 5.43.1. There is stored XSS in the profile description and in the username...

PT-2022-17989

Name of the Vulnerable Software and Affected Versions Pexip Infinity versions prior to 27.3 Description The issue allows remote attackers to trigger a software abort and possibly enumerate usernames via One Touch Join. Recommendations For versions prior to 27.3, update to version 27.3 or later to...

Pexip Infinity security vulnerabilities

Pexip Infinity Pexip Video Conferencing Cloud Collaboration Platform is a video conferencing cloud collaboration platform from Pexip, a Norwegian company. Pexip Infinity is vulnerable to an input validation error that could be exploited by an attacker to trigger a software abort via One Touch Joi...

PT-2022-20436

Name of the Vulnerable Software and Affected Versions Gentics CMS versions prior to 5.43.1 Description The issue concerns stored XSS in the profile description and in the username. Recommendations For versions prior to 5.43.1, update to version 5.43.1 or later to resolve the issue...

CVE-2022-32425

The login function of Mealie v1.0.0beta-2 allows attackers to enumerate existing usernames by timing the server's response time...

CVE-2022-32425

The login function of Mealie v1.0.0beta-2 allows attackers to enumerate existing usernames by timing the server's response time...

CVE-2022-32425

The login function of Mealie v1.0.0beta-2 allows attackers to enumerate existing usernames by timing the server's response time...

Code injection

The login function of Mealie v1.0.0beta-2 allows attackers to enumerate existing usernames by timing the server's response time...

CVE-2022-32425

The login function of Mealie v1.0.0beta-2 allows attackers to enumerate existing usernames by timing the server's response time...

CVE-2022-32425

The login function of Mealie v1.0.0beta-2 allows attackers to enumerate existing usernames by timing the server's response time...

CVE-2022-32425

The CVE-2022-32425 entry concerns Mealie (v1.0.0beta-2) where the login function enables username enumeration by measuring response time, indicating an information-disclosure vulnerability. Affected software: Mealie v1.0.0beta-2 (login feature). Root cause: timing-based information leakage during...

CVE-2022-32425: Observable Discrepancy

The login function of Mealie v1.0.0beta-2 allows attackers to enumerate existing usernames by timing the server's response time...

PT-2022-21314

Name of the Vulnerable Software and Affected Versions Mealie version 1.0.0beta-2 Description The issue allows attackers to enumerate existing usernames by timing the server's response time through the login function. Recommendations For Mealie version 1.0.0beta-2, consider restricting access to t...

Mealie security vulnerability

Mealie is a self-hosted recipe manager and meal planner by an individual developer in Hayden, USA. A security vulnerability exists in Mealie v1.0.0beta-2, which stems from a login feature that allows an attacker to enumerate existing usernames by timing the server's response time...

aws-iam-authenticator allow-listed IAM identity may be able to modify their username, escalate privileges before v0.5.9

A security issue was discovered in aws-iam-authenticator where an allow-listed IAM identity may be able to modify their username and escalate privileges...

GHSA-PP3F-98QG-5G75 aws-iam-authenticator allow-listed IAM identity may be able to modify their username, escalate privileges before v0.5.9

A security issue was discovered in aws-iam-authenticator where an allow-listed IAM identity may be able to modify their username and escalate privileges...