Search Vulnerabilities

XRDP is vulnerable to a server timing attack, leading to user enumeration

HCL Aftermarket EPC is vulnerable to attack since It was found that a malicious actor can use brute-force techniques to either guess or confirm val...

An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2

Mojolicious versions from 4.59 before 9.48 for Perl expose a stable representation of the session CSRF token to a BREACH compression oracle

Information Disclosure vulnerability in SAP HANA Extended Application Services classic model (User Self Service)

Rejetto HFS < 3.2.1 Username Enumeration via Login Response Differences

SFTP REALPATH path-existence oracle allowing filesystem enumeration outside configured root

User Enumeration in MCO

Ghost: Member existence leak via magic link sign-in response

Vantage6: Set admin user and password from environment or configuration

FOSSBilling's password reset confirmation endpoint lacks rate limiting

FreeScout: User Account Enumeration via Password Reset Response Differentiation

AVideo CVE-2026-43881 incomplete fix - `objects/mention.json.php:17` is an unauthenticated user enumeration

userSpice 4.3.24 Username Enumeration via existingUsernameCheck.php

Statamic: Email enumeration via forgot password endpoint

Username Enumeration via Email OTP Flow in Multiple WSO2 Products Allows User Account Discovery

Industrial Application Software IAS Canias ERP Login RMI doAction response discrepancy

Cisco Identity Services Engine Observable Response Discrepancy Vulnerability

OpenAEV Vulnerable to Username/Email Enumeration Through Differential HTTP Responses in Password Reset API

ChurchCRM: Username Enumeration via Differential Response in Public Login API