Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 24 Oct 2026 14:01:12 +0000 certa-2009-avi-281 — Plusieurs vulnérabilités permettant, entre autres, la réalisation d'injection de code indirecte et de contourner la pol… https://cve.radiocsirt.org/vuln/certa-2009-avi-281 certa-2009-avi-281 https://cve.radiocsirt.org/vuln/certa-2009-avi-281 EUVD-2026-123272 https://cve.radiocsirt.org/vuln/euvd-2026-123272 EUVD-2026-123272 https://cve.radiocsirt.org/vuln/euvd-2026-123272 fkie_cve-2009-2336 https://cve.radiocsirt.org/vuln/fkie_cve-2009-2336 <p>The forgotten mail interface in WordPress and WordPress MU before 2.8.1 exhibits different behavior for a password request depending on whether the user account exists, which allows remote attackers to enumerate valid usernames. NOTE: the vendor reportedly disputes the significance of this issue, indicating that the behavior exists for &#34;user convenience.&#34;</p> <p>The forgotten mail interface in WordPress and WordPress MU before 2.8.1 exhibits different behavior for a password request depending on whether the user account exists, which allows remote attackers to enumerate valid usernames. NOTE: the vendor reportedly disputes the significance of this issue, indicating that the behavior exists for &#34;user convenience.&#34;</p> https://cve.radiocsirt.org/vuln/fkie_cve-2009-2336 GHSA-4cc8-gf3c-3mrc https://cve.radiocsirt.org/vuln/ghsa-4cc8-gf3c-3mrc <p>The forgotten mail interface in WordPress and WordPress MU before 2.8.1 exhibits different behavior for a password request depending on whether the user account exists, which allows remote attackers to enumerate valid usernames. NOTE: the vendor reportedly disputes the significance of this issue, indicating that the behavior exists for &#34;user convenience.&#34;</p> <p>The forgotten mail interface in WordPress and WordPress MU before 2.8.1 exhibits different behavior for a password request depending on whether the user account exists, which allows remote attackers to enumerate valid usernames. NOTE: the vendor reportedly disputes the significance of this issue, indicating that the behavior exists for &#34;user convenience.&#34;</p> https://cve.radiocsirt.org/vuln/ghsa-4cc8-gf3c-3mrc gsd-2009-2336 https://cve.radiocsirt.org/vuln/gsd-2009-2336 gsd-2009-2336 https://cve.radiocsirt.org/vuln/gsd-2009-2336