#cwe-204

共收录 64 条相关情报。

← 返回所有主题
漏洞预警2026-09-11 发布INFO

Smart Video Intercom System developed by Kingdom Communication Associated has a Sensitive Data Exposure vulnerability. Unauthenticated remote attackers can enumerate valid user ...

CVE-2026-89173

Smart Video Intercom System developed by Kingdom Communication Associated has a Sensitive Data Exposure vulnerability. U

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

Observable response discrepancy vulnerability in DernekPlus Website Template allows Account Footprinting. This issue affects Website Template: through 10092026. NOTE: The vendo...

CVE-2026-9161

Observable response discrepancy vulnerability in DernekPlus Website Template allows Account Footprinting. This issue af

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-04 发布INFO

Observable response discrepancy vulnerability in GastroMenum GastroMenum Web Panel allows Account Footprinting. This issue affects GastroMenum Web Panel: before 31.08.2026.

CVE-2026-19205

Observable response discrepancy vulnerability in GastroMenum GastroMenum Web Panel allows Account Footprinting. This is

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-04 发布INFO

Observable response discrepancy vulnerability in Menulux Software Inc. Menulux Portal allows Account Footprinting. This issue affects Menulux Portal: before 20260903211448.

CVE-2026-19080

Observable response discrepancy vulnerability in Menulux Software Inc. Menulux Portal allows Account Footprinting. This

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-02 发布INFO

Observable Response Discrepancy (CWE-204) in the Kibana Osquery feature can lead to information disclosure via Query System for Information (CAPEC-54). An authenticated user hol...

CVE-2026-78584

Observable Response Discrepancy (CWE-204) in the Kibana Osquery feature can lead to information disclosure via Query Sys

历史摘要 · 未重新核验 · NVD

安全公告2026-09-01 发布INFO

Filament: Password validity disclosure for accounts denied panel access on login page

CVE-2026-84307

When multi-factor authentication is enabled, the login page presents the multi-factor challenge before evaluating `canAc

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-01 发布INFO

Filament is a collection of full-stack components for accelerated Laravel development. From 4.0.0 until 4.12.5 and 5.7.5, packages/panels/src/Auth/Pages/Login.php presents the m...

CVE-2026-84307

Filament is a collection of full-stack components for accelerated Laravel development. From 4.0.0 until 4.12.5 and 5.7.5

历史摘要 · 未重新核验 · NVD

安全公告2026-09-01 发布INFO

Filament: Password validity disclosure for accounts denied panel access on login page

CVE-2026-84307

Filament is a collection of full-stack components for accelerated Laravel development. From 4.0.0 until 4.12.5 and 5.7.5

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-08-25 发布INFO

Rocket.Chat exposes the sendForgotPasswordEmail Meteor method without a DDP rate limit, so an unauthenticated caller may invoke it as often as it likes. The method is reachable ...

CVE-2026-75575

Rocket.Chat exposes the sendForgotPasswordEmail Meteor method without a DDP rate limit, so an unauthenticated caller may

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-21 发布INFO

Combodo iTop is a web based IT service management tool. Prior to 3.2.3, iTop returns different responses for valid/invalid usernames depending on multiple factors in the reset p...

CVE-2026-27462

Combodo iTop is a web based IT service management tool. Prior to 3.2.3, iTop returns different responses for valid/inval

历史摘要 · 未重新核验 · NVD

安全公告2026-08-21 发布INFO

Observable response discrepancy in Azure Stack HCI allows an unauthorized attacker to disclose...

CVE-2026-69519

Observable response discrepancy in Azure Stack HCI allows an unauthorized attacker to disclose information over a networ

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-20 发布INFO

Observable response discrepancy in Azure Stack HCI allows an unauthorized attacker to disclose information over a network.

CVE-2026-69519

Observable response discrepancy in Azure Stack HCI allows an unauthorized attacker to disclose information over a networ

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-20 发布INFO

Frappe is a full-stack web application framework. Prior to 15.115.0 and 16.27.0, the public request-data web form and PersonalDataDownloadRequest class in frappe/website/doctype...

CVE-2026-66002

Frappe is a full-stack web application framework. Prior to 15.115.0 and 16.27.0, the public request-data web form and Pe

历史摘要 · 未重新核验 · NVD

安全公告2026-08-20 发布INFO

Frappe: User Enumeration via PDDR

CVE-2026-66002

Frappe is a full-stack web application framework. Prior to 15.115.0 and 16.27.0, the public request-data web form and Pe

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-08-19 发布INFO

Lemmy is a link aggregator and forum for the fediverse. Prior to 0.19.19 and 1.0.0-beta.1, Lemmy's login endpoint in crates/api/api/src/local_user/login.rs returns different err...

CVE-2026-54739

Lemmy is a link aggregator and forum for the fediverse. Prior to 0.19.19 and 1.0.0-beta.1, Lemmy's login endpoint in cra

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-17 发布LOW

A vulnerability was determined in automad up to 2.0.0-beta.32. This vulnerability affects the function requestPasswordResetToken of the file automad/src/server/Controllers/API/U...

CVE-2026-19965

CVE-2026-19965 是开源内容管理系统 automad 中一个已公开披露的漏洞,影响版本最高至 2.0.0-beta.32。该漏洞位于密码重置端点的 UserController.php 文件中的 requestPasswordR

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-13 发布INFO

Observable response discrepancy in PostgreSQL SCRAM authentication allows an unauthenticated user to test the existence of a user via observing the SCRAM iteration count. This ...

CVE-2026-14672

Observable response discrepancy in PostgreSQL SCRAM authentication allows an unauthenticated user to test the existence

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-12 发布INFO

Budibase is an open-source low-code platform. Prior to 3.39.25, POST /api/global/auth/:tenantId/login incremented the failure counter in packages/worker/src/api/controllers/glob...

CVE-2026-73306

Budibase is an open-source low-code platform. Prior to 3.39.25, POST /api/global/auth/:tenantId/login incremented the fa

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-10 发布INFO

A user enumeration vulnerability in bluewave-labs/Checkmate through 2.1.0 allows an unauthenticated remote attacker to determine whether a given email address is registered. The...

CVE-2026-72588

A user enumeration vulnerability in bluewave-labs/Checkmate through 2.1.0 allows an unauthenticated remote attacker to d

历史摘要 · 未重新核验 · NVD

安全公告2026-08-04 发布INFO

Ghost: Member existence leak via magic link sign-in response

CVE-2026-53947

### Impact A discrepancy in responses from the members signin endpoints made it possible for an unauthenticated attacke

历史摘要 · 未重新核验 · GitHub Advisory