CWE-204 · 181 kayıt
Observable Response Discrepancy
Bu sınıftaki CVE’ler
183 kayıt
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
37İzleyin | CVE-2018-25350İstismar yok | userSpice 4.3.24 Username Enumeration via existingUsernameCheck.phpuserspice · userspice · CWE-204 | Kritik9,3 | — | %0,4 | 23 May 2026 |
36İzleyin | CVE-2026-60007İstismar yok | In Eclipse Milo versions 0.6.0 through 1.1.4, username-token processing returns distinguishable errors for invalid RSA PKCS#1 v1.5 padding aeclipse · milo · CWE-204 | Kritik9,1 | — | %0,6 | 4 Ağu 2026 |
36İzleyin | CVE-2026-33419İstismar yok | MinIO: LDAP login brute-force via user enumeration and missing rate limitminio · minio · CWE-204 | Kritik9,1 | — | %0,5 | 24 Mar 2026 |
36İzleyin | CVE-2026-15747İstismar yok | Mojolicious versions from 4.59 before 9.48 for Perl expose a stable representation of the session CSRF token to a BREACH compression oraclesri · mojolicious · CWE-204 | Kritik9,1 | — | %0,3 | 14 Tem 2026 |
35İzleyin | CVE-2025-5485İstismar yok | SinoTrack GPS Receiver Weak Authenticationsinotrack · iot pc platform · CWE-204 | Yüksek8,8 | — | %0,4 | 12 Haz 2025 |
34İzleyin | CVE-2026-69519İstismar yok | Azure Stack HCI Information Disclosure Vulnerabilitymicrosoft · azure stack hci · CWE-204 | Yüksek8,6 | — | %1,0 | 20 Ağu 2026 |
30İzleyin | CVE-2021-20049İstismar yok | A vulnerability in SonicWall SMA100 password change API allows a remote unauthenticated attacker to perform SMA100 username enumeration basesonicwall · sma 100 firmware · CWE-204 | Yüksek7,5 | — | %1,3 | 22 Ara 2021 |
30İzleyin | CVE-2021-34580İstismar yok | Remote user enumeration in mymbCONNECT24, mbCONNECT24 <= 2.9.0mbconnectline · mbconnect24 · CWE-204 | Yüksek7,5 | — | %1,0 | 27 Eki 2021 |
30İzleyin | CVE-2024-24766İstismar yok | CasaOS Username Enumerationicewhale · casaos-userservice · CWE-204 | Yüksek7,5 | — | %0,8 | 6 Mar 2024 |
30İzleyin | CVE-2024-28232İstismar yok | Username Enumeration in CasaOS via bypass of CVE-2024-24766icewhale · casaos-userservice · CWE-204 | Yüksek7,5 | — | %0,6 | 1 Nis 2024 |
30İzleyin | CVE-2025-3092İstismar yok | MB connect line: Observable response discrepancy in mbCONNECT24/mymbCONNECT24helmholz · myrex24 · CWE-204 | Yüksek7,5 | — | %0,5 | 24 Haz 2025 |
30İzleyin | CVE-2026-27462İstismar yok | Combodo iTop: User enumeration via password resetcombodo · itop · CWE-204 | Yüksek7,5 | — | %0,4 | 21 Ağu 2026 |
30İzleyin | CVE-2024-38322İstismar yok | IBM Storage Defender information disclosureibm · storage defender resiliency service · CWE-204 | Yüksek7,5 | — | %0,4 | 28 Haz 2024 |
30İzleyin | CVE-2024-38431İstismar yok | Matrix Tafnit v8 - CWE-204: Observable Response Discrepancymatrix-globalservices · tafnit · CWE-204 | Yüksek7,5 | — | %0,4 | 30 Tem 2024 |
30İzleyin | CVE-2025-23193İstismar yok | Information Disclosure vulnerability in SAP NetWeaver Application Server ABAPsap · sap basis · CWE-204 | Yüksek7,5 | — | %0,3 | 10 Şub 2025 |
30İzleyin | CVE-2024-42343İstismar yok | Loway - CWE-204: Observable Response Discrepancyloway · queuemetrics · CWE-204 | Yüksek7,5 | — | %0,3 | 8 Eyl 2024 |
30İzleyin | CVE-2025-46390İstismar yok | CWE-204: Observable Response Discrepancyemby · mediabrowser · CWE-204 | Yüksek7,5 | — | %0,3 | 6 Ağu 2025 |
30İzleyin | CVE-2026-19080İstismar yok | Username Enumeration in Menulux Software's Menulux Portalmenulux software inc. · menulux portal · CWE-204 | Yüksek7,5 | — | %0,3 | 4 Eyl 2026 |
30İzleyin | CVE-2026-19205İstismar yok | User Enumeration in GastroMenum's GastroMenum Web Panelgastromenum · gastromenum web panel · CWE-204 | Yüksek7,5 | — | %0,2 | 4 Eyl 2026 |
28İzleyin | CVE-2026-4113İstismar yok | An observable response discrepancy vulnerability in the SonicWall SMA1000 series appliances allows a remote attacker to enumerate SSL VPN ussonicwall · sma6210 firmware · CWE-204 | Yüksek7,2 | — | %0,6 | 9 Nis 2026 |
28İzleyin | CVE-2026-86758İstismar yok | Snipe-IT before 8.7.0 License Key Exposure via CSV Exportsnipeitapp · snipe-it · CWE-204 | Yüksek7,1 | — | %0,4 | 9 Eyl 2026 |
27İzleyin | CVE-2022-41697Kavram kanıtı | A user enumeration vulnerability exists in the login functionality of Ghost Foundation Ghost 5.9.4.ghost · ghost · CWE-204 | Orta5,3 | — | %20,0 | 22 Ara 2022 |
27İzleyin | CVE-2025-34255İstismar yok | D-Link Nuclias Connect <= v1.3.1.4 Forgot Password Account Enumerationdlink · nuclias connect · CWE-204 | Orta6,9 | — | %1,0 | 16 Eki 2025 |
27İzleyin | CVE-2025-34254İstismar yok | D-Link Nuclias Connect <= v1.3.1.4 Login Account Enumerationdlink · nuclias connect · CWE-204 | Orta6,9 | — | %1,0 | 16 Eki 2025 |
27İzleyin | CVE-2026-66002İstismar yok | Frappe: User Enumeration via PDDRfrappe · frappe · CWE-204 | Orta6,9 | — | %0,8 | 20 Ağu 2026 |
- CVE-2018-2535037İzleyin
userSpice 4.3.24 Username Enumeration via existingUsernameCheck.php
KritikCVSS 9,3İstismar yokEPSS %0userspice · userspice23 May 2026
- CVE-2026-6000736İzleyin
In Eclipse Milo versions 0.6.0 through 1.1.4, username-token processing returns distinguishable errors for invalid RSA PKCS#1 v1.5 padding a
KritikCVSS 9,1İstismar yokEPSS %1eclipse · milo4 Ağu 2026
- CVE-2026-3341936İzleyin
MinIO: LDAP login brute-force via user enumeration and missing rate limit
KritikCVSS 9,1İstismar yokEPSS %1minio · minio24 Mar 2026
- CVE-2026-1574736İzleyin
Mojolicious versions from 4.59 before 9.48 for Perl expose a stable representation of the session CSRF token to a BREACH compression oracle
KritikCVSS 9,1İstismar yokEPSS %0sri · mojolicious14 Tem 2026
- CVE-2025-548535İzleyin
SinoTrack GPS Receiver Weak Authentication
YüksekCVSS 8,8İstismar yokEPSS %0sinotrack · iot pc platform12 Haz 2025
- CVE-2026-6951934İzleyin
Azure Stack HCI Information Disclosure Vulnerability
YüksekCVSS 8,6İstismar yokEPSS %1microsoft · azure stack hci20 Ağu 2026
- CVE-2021-2004930İzleyin
A vulnerability in SonicWall SMA100 password change API allows a remote unauthenticated attacker to perform SMA100 username enumeration base
YüksekCVSS 7,5İstismar yokEPSS %1sonicwall · sma 100 firmware22 Ara 2021
- CVE-2021-3458030İzleyin
Remote user enumeration in mymbCONNECT24, mbCONNECT24 <= 2.9.0
YüksekCVSS 7,5İstismar yokEPSS %1mbconnectline · mbconnect2427 Eki 2021
- CVE-2024-2476630İzleyin
CasaOS Username Enumeration
YüksekCVSS 7,5İstismar yokEPSS %1icewhale · casaos-userservice6 Mar 2024
- CVE-2024-2823230İzleyin
Username Enumeration in CasaOS via bypass of CVE-2024-24766
YüksekCVSS 7,5İstismar yokEPSS %1icewhale · casaos-userservice1 Nis 2024
- CVE-2025-309230İzleyin
MB connect line: Observable response discrepancy in mbCONNECT24/mymbCONNECT24
YüksekCVSS 7,5İstismar yokEPSS %0helmholz · myrex2424 Haz 2025
- CVE-2026-2746230İzleyin
Combodo iTop: User enumeration via password reset
YüksekCVSS 7,5İstismar yokEPSS %0combodo · itop21 Ağu 2026
- CVE-2024-3832230İzleyin
IBM Storage Defender information disclosure
YüksekCVSS 7,5İstismar yokEPSS %0ibm · storage defender resiliency service28 Haz 2024
- CVE-2024-3843130İzleyin
Matrix Tafnit v8 - CWE-204: Observable Response Discrepancy
YüksekCVSS 7,5İstismar yokEPSS %0matrix-globalservices · tafnit30 Tem 2024
- CVE-2025-2319330İzleyin
Information Disclosure vulnerability in SAP NetWeaver Application Server ABAP
YüksekCVSS 7,5İstismar yokEPSS %0sap · sap basis10 Şub 2025
- CVE-2024-4234330İzleyin
Loway - CWE-204: Observable Response Discrepancy
YüksekCVSS 7,5İstismar yokEPSS %0loway · queuemetrics8 Eyl 2024
- CVE-2025-4639030İzleyin
CWE-204: Observable Response Discrepancy
YüksekCVSS 7,5İstismar yokEPSS %0emby · mediabrowser6 Ağu 2025
- CVE-2026-1908030İzleyin
Username Enumeration in Menulux Software's Menulux Portal
YüksekCVSS 7,5İstismar yokEPSS %0menulux software inc. · menulux portal4 Eyl 2026
- CVE-2026-1920530İzleyin
User Enumeration in GastroMenum's GastroMenum Web Panel
YüksekCVSS 7,5İstismar yokEPSS %0gastromenum · gastromenum web panel4 Eyl 2026
- CVE-2026-411328İzleyin
An observable response discrepancy vulnerability in the SonicWall SMA1000 series appliances allows a remote attacker to enumerate SSL VPN us
YüksekCVSS 7,2İstismar yokEPSS %1sonicwall · sma6210 firmware9 Nis 2026
- CVE-2026-8675828İzleyin
Snipe-IT before 8.7.0 License Key Exposure via CSV Export
YüksekCVSS 7,1İstismar yokEPSS %0snipeitapp · snipe-it9 Eyl 2026
- CVE-2022-4169727İzleyin
A user enumeration vulnerability exists in the login functionality of Ghost Foundation Ghost 5.9.4.
OrtaCVSS 5,3Kavram kanıtıEPSS %20ghost · ghost22 Ara 2022
- CVE-2025-3425527İzleyin
D-Link Nuclias Connect <= v1.3.1.4 Forgot Password Account Enumeration
OrtaCVSS 6,9İstismar yokEPSS %1dlink · nuclias connect16 Eki 2025
- CVE-2025-3425427İzleyin
D-Link Nuclias Connect <= v1.3.1.4 Login Account Enumeration
OrtaCVSS 6,9İstismar yokEPSS %1dlink · nuclias connect16 Eki 2025
- CVE-2026-6600227İzleyin
Frappe: User Enumeration via PDDR
OrtaCVSS 6,9İstismar yokEPSS %1frappe · frappe20 Ağu 2026