CWE-203

733 vulnerabilities with CWE-203

CVE-2025-43743 MEDIUM

Liferay Portal 7.4.0-7.4.3.132 & DXP Authenticated User Enumeration via Calendar Access

CVSS 4.3

CVE-2025-43739 MEDIUM

Liferay Portal/DXP Email Content Modification via Calendar Portlet

CVSS 4.3

CVE-2025-9109 LOW

Portabilis i-Diario <1.5.0 - Info Disclosure

CVSS 3.7

CVE-2025-8774 LOW

riscv-boom SonicBOOM <2.2.3 - Info Disclosure

CVSS 2.5

CVE-2025-54999 LOW

OpenBao 0.1.0-2.3.1 - User Enumeration via Userpass Auth Timing Side Channel

CVSS 3.7

CVE-2025-47872 MEDIUM

Product Registration - Info Disclosure

CVSS 5.8

CVE-2025-6011 LOW

HashiCorp Vault < 1.20.1 and 1.16.23 - Timing Side Channel in Userpass Auth Method

CVSS 3.7

CVE-2025-24391 MEDIUM

OTRS 7.0.x 8.0.x 2023.x 2024.x 2025.x - User Enumeration via External Interface Response Discrepancy

CVSS 5.3

CVE-2025-6386 HIGH

parisneo/lollms < 20.1 - Timing Attack via Password Comparison in authenticate_user

CVSS 7.5

CVE-2025-6056 MEDIUM

Ergon Informatik AG's Airlock IAM <8.3.1 - Info Disclosure

CVE-2025-27451 MEDIUM

Endress meac300-fnade4 Firmware <= 0.16.0 - Username Enumeration via Different Error Messages

CVSS 5.3

CVE-2025-40732 HIGH

Daily Expense Manager 1.0 - User Enumeration via /check.php Name Parameter

CVSS 7.5

CVE-2025-52576 MEDIUM

Kanboard < 1.2.46 - Username Enumeration and Brute-Force Protection Bypass via HTTP Header Spoofing

CVSS 5.3

CVE-2025-46570 LOW

vllm < 0.9.0 - Observable Timing Discrepancy in PageAttention Prefill

CVSS 2.6

CVE-2025-46804 LOW

Screen 5.0.0 - Unauthenticated Information Disclosure via Setuid Path Leak

CVSS 3.3

CVE-2025-23182 MEDIUM

UBtech Freepass - Observable Discrepancy

CVSS 4.3

CVE-2025-3939 MEDIUM

Tridium Niagara Framework and Enterprise Security < 4.14.2, < 4.15.1, < 4.10.11 - Observable Response Discrepancy

CVSS 5.3

CVE-2025-46720 LOW

Keystone < 6.5.0 - Unauthorized Information Exposure via Update and Delete Mutation Filters

CVSS 3.1

CVE-2025-32789 LOW

EspoCRM < 9.0.7 - Exposure of Sensitive Information via User Password Hash Sorting

CVSS 3.1

CVE-2025-0361 MEDIUM

Axis Communications - Info Disclosure

CVSS 4.3

CVE-2025-31124 MEDIUM

zitadel < 2.63.9 - Username Enumeration via Normalization Bypass

CVSS 5.3

CVE-2025-30344 MEDIUM

OpenSlides <4.2.5 - Info Disclosure

CVSS 5.3

CVE-2025-1468 HIGH

CODESYS OPC UA Server - Info Disclosure

CVSS 7.5

CVE-2025-29780 MEDIUM

Post-Quantum Secure Feldman's Verifiable Secret Sharing <0.8.0b2 - ...

CVE-2025-27667 CRITICAL

Vasion Print < 20.0.1923 and Virtual Appliance < 22.0.843 - Administrative User Email Enumeration

CVSS 9.8