Observable Response Discrepancy

Every one of the 217 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Ghost CMS - User EnumerationCVE-2022-41697Ghost Foundation · CVSS 5.3 · 20% likely

   Ghost Foundation

2. Piwigo - User Enumeration via Password ResetCVE-2025-62512Piwigo · CVSS 5.5 · 0.8% likely

   Piwigo

3. AnythingLLM - Username Enumeration via Password RecoveryCVE-2026-21484Mintplex-Labs · CVSS 5.3 · 0.8% likely

   Mintplex-Labs

4. Dify User Enumeration via Observable Response DiscrepancyCVE-2026-28288langgenius · CVSS 5.5 · 0.7% likely

   LangGenius

5. NocoDB - User EnumerationCVE-2026-28358nocodb · CVSS 2.7 · 0.7% likely

   Nocodb

6. The Accellion FTP server prior to version FTA_9_12_220 is vulnerable to cross-site scripting.CVE-2016-9499Accellion · 7.7% likely

   Accellion

7. Cloud Native Computing Foundation Harbor before 1.10.3 and 2.x before 2.0.1 allows resource enumeration because unauthenticated API calls reveal (via the HTTP status code) whether…CVE-2019-19030CVSS 5.3 · 2.0% likely
8. A vulnerability in SonicWall SMA100 password change API allows a remote unauthenticated attacker to perform SMA100 username enumeration based on the server responses. This vulnera…CVE-2021-20049SonicWall · 1.4% likely

   SonicWall

9. Qlik Sense Enterprise Domain User enumerationCVE-2022-0564Qlik Sense · CVSS 5.3 · 1.4% likely
10. Observable Response Discrepancy in Lost Password ServiceCVE-2021-39189pimcore · CVSS 5.3 · 1.4% likely

    Pimcore

11. Observable Response Discrepancy in TYPO3 CMSCVE-2020-11063TYPO3 · CVSS 3.7 · 1.2% likely

    TYPO3

12. Kaiten 57.128.8 allows remote attackers to enumerate user accounts via a crafted POST request, because a login response contains a user_email field only if the user account exists.CVE-2024-39211CVSS 5.3 · 1.1% likely
13. Remote user enumeration in mymbCONNECT24, mbCONNECT24 <= 2.9.0CVE-2021-34580MB connect line · CVSS 7.5 · 1.0% likely

    MB connect line

14. SUMA user enumeration via weak error messageCVE-2022-31248SUSE · CVSS 5.3 · 1.0% likely

    SUSE

15. User enumeration vulnerability in MB connect line and Helmholz productsCVE-2022-22520MB connect line · CVSS 5.3 · 1.0% likely

    MB connect line

16. Azure Stack HCI Information Disclosure VulnerabilityCVE-2026-69519Microsoft · CVSS 8.6 · 1.0% likely

    Microsoft

17. D-Link Nuclias Connect <= v1.3.1.4 Forgot Password Account EnumerationCVE-2025-34255D-Link · CVSS 6.9 · 1.0% likely

    D-Link

18. D-Link Nuclias Connect <= v1.3.1.4 Login Account EnumerationCVE-2025-34254D-Link · CVSS 6.9 · 1.0% likely

    D-Link

19. CODESYS Visualization vulnerable to user enumerationCVE-2022-1989CODESYS · CVSS 5.3 · 0.9% likely

    CODESYS

20. Surya2Developer Hostel Management Service HTTP POST Request check_availability.php observable response discrepancyCVE-2024-2482Surya2Developer · CVSS 3.7 · 0.8% likely
21. Frappe: User Enumeration via PDDRCVE-2026-66002frappe · CVSS 6.9 · 0.8% likely

    Frappe

22. Kirby CMS vulnerable to user enumeration in the brute force protectionCVE-2022-39315getkirby · CVSS 6.5 · 0.8% likely

    Getkirby

23. Observable Response Discrepancy in the SICK ICR890-4 could allow a remote attacker to identify valid usernames for the FTP server from the response given during a failed login att…CVE-2023-35698SICK AG · CVSS 5.3 · 0.8% likely

    SICK AG

24. Observable Response Discrepancy in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows a remote attacker to gain inform…CVE-2023-23449SICK AG · CVSS 5.3 · 0.8% likely

    SICK AG

25. InHand Networks IR615 RouterCVE-2021-38476InHand Networks · CVSS 6.5 · 0.8% likely

    InHand Networks

26. Antabot White-Jotter login observable response discrepancyCVE-2024-13028Antabot · CVSS 3.7 · 0.8% likely

    Antabot

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.