The product provides different responses to incoming requests in a way that reveals internal state information to an unauthorized actor outside of the intended control sphere.
157 vulnerabilities with CWE-204
CVE-2026-26744
MEDIUM
FormaLMS < 4.1.18 - Unauthenticated User Enumeration via Password Recovery Response Discrepancy
CVSS 5.3
CVE-2026-25509
MEDIUM
Ci4-cms-erp Ci4ms < 0.28.5.0 - Information Disclosure
CVSS 5.3
CVE-2026-24664
MEDIUM
Open eClass Platform < 4.2 - Unauthenticated Username Enumeration via Login Response Analysis
CVSS 5.3
CVE-2026-24332
MEDIUM
Discord through 2026-01-16 - Information Disclosure via WebSocket API Response
CVSS 4.3
CVE-2026-23511
MEDIUM
ZITADEL <4.9.1, 3.4.6 - Info Disclosure
CVSS 5.3
CVE-2026-21484
MEDIUM
AnythingLLM <e287fab56089cf8fcea9ba579a3ecdeca0daa313 - Info Disclo...
CVSS 5.3
CVE-2025-67807
MEDIUM
Sage DPW <2021_06_000 - Info Disclosure
CVSS 4.7
CVE-2025-67806
LOW
Sage DPW <2021_06_000 - Info Disclosure
CVSS 3.7
CVE-2025-3716
MEDIUM
User enumeration in ESET Protect (on-prem)
CVE-2025-69243
MEDIUM
User enumeration in Raytha CMS
CVSS 5.3
CVE-2025-13460
MEDIUM
IBM Aspera Console Information Disclosure
CVSS 5.3
CVE-2025-12455
HIGH
OpenText Vertica 10.0-12.X - Password Brute Force
CVSS 7.5
CVE-2025-62512
MEDIUM
Piwigo 15.0.0-15.5.0 - Unauthenticated User Enumeration via Password Reset Endpoint
CVSS 5.3
CVE-2025-69413
MEDIUM
Gitea < 1.25.2 - Username Enumeration via API Authentication Response Discrepancy
CVSS 5.3
CVE-2025-67874
MEDIUM
ChurchCRM < 6.5.0 - Plaintext Password Exposure in HTTP Responses
CVSS 6.5
CVE-2025-62181
MEDIUM
Pega Platform <25.1.0 - Info Disclosure
CVSS 5.3
CVE-2025-67500
LOW
Mastodon <4.2.27, <4.3.0-beta.1-4.3.14, <4.4.0-beta.1-4.4.9, <4.5.0...
CVSS 3.7
CVE-2025-40806
MEDIUM
Gridscale X Prepay <V4.2.1 - Info Disclosure
CVSS 5.3
CVE-2025-65899
MEDIUM
Kalmia 0.2.0 - Unauthenticated User Enumeration via Authentication Error Messages
CVSS 5.3
CVE-2025-12994
MEDIUM
Medtronic CareLink Network <December 4, 2025 - Info Disclosure
CVSS 5.3
CVE-2025-66307
MEDIUM
Grav <1.11.0-beta.1 - Info Disclosure
CVSS 6.5
CVE-2025-59116
MEDIUM
Windu CMS 4.1 - User Enumeration via Login Error Message Discrepancy
CVSS 5.3
CVE-2025-25236
MEDIUM
Omnissa Workspace ONE UEM - Info Disclosure
CVSS 5.3
CVE-2025-62236
MEDIUM
Frontier Airlines - Info Disclosure
CVSS 5.3
CVE-2025-34155
MEDIUM
Tibbo AggreGate Network Manager < 6.40.05 - Info Disclosure
Details
Vulnerabilities
157