Vulnerabilities (CVE)

Filtered by CWE-204
Total 63 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-8651 1 Netcat 1 Netcat Content Management System 2024-09-23 N/A 5.3 MEDIUM
A vulnerability in NetCat CMS allows an attacker to send a specially crafted http request that can be used to check whether a user exists in the system, which could be a basis for further attacks. This issue affects NetCat CMS v. 6.4.0.24126.2 and possibly others. Apply patch from vendor https://netcat.ru/ https://netcat.ru/] . Versions 6.4.0.24248 and on have the patch.
CVE-2024-34336 1 Ordat 1 Ordat.erp 2024-09-18 N/A 5.3 MEDIUM
User enumeration vulnerability in ORDAT FOSS-Online before v2.24.01 allows attackers to determine if an account exists in the application by comparing the server responses of the forgot password functionality.
CVE-2024-42343 1 Loway 1 Queuemetrics 2024-09-11 N/A 7.5 HIGH
Loway - CWE-204: Observable Response Discrepancy