https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 19:52:45 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-13178 bdu:2025-13178 https://cve.radiocsirt.org/vuln/bdu:2025-13178 https://cve.radiocsirt.org/vuln/cnvd-2025-24764 cnvd-2025-24764 https://cve.radiocsirt.org/vuln/cnvd-2025-24764 https://cve.radiocsirt.org/vuln/euvd-2026-321156 EUVD-2026-321156 https://cve.radiocsirt.org/vuln/euvd-2026-321156 https://cve.radiocsirt.org/vuln/fkie_cve-2025-34255 <p>D-Link Nuclias Connect firmware versions &lt;= 1.3.1.4 contain an observable response discrepancy vulnerability. The application&#39;s &#39;Forgot Password&#39; endpoint returns distinct JSON responses depending on whether the supplied email address is associated with an existing account. Because the responses differ in the `data.exist` boolean value, an unauthenticated remote attacker can enumerate valid email addresses/accounts on the server. NOTE: D-Link states that a fix is under development.</p> <p>D-Link Nuclias Connect firmware versions &lt;= 1.3.1.4 contain an observable response discrepancy vulnerability. The application&#39;s &#39;Forgot Password&#39; endpoint returns distinct JSON responses depending on whether the supplied email address is associated with an existing account. Because the responses differ in the `data.exist` boolean value, an unauthenticated remote attacker can enumerate valid email addresses/accounts on the server. NOTE: D-Link states that a fix is under development.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-34255 https://cve.radiocsirt.org/vuln/ghsa-fff6-x26h-q5rp <p>D-Link Nuclias Connect firmware versions &lt;= 1.3.1.4 contain an observable response discrepancy vulnerability. The application&#39;s &#39;Forgot Password&#39; endpoint returns distinct JSON responses depending on whether the supplied email address is associated with an existing account. Because the responses differ in the `data.exist` boolean value, an unauthenticated remote attacker can enumerate valid email addresses/accounts on the server. NOTE: D-Link states that a fix is under development.</p> <p>D-Link Nuclias Connect firmware versions &lt;= 1.3.1.4 contain an observable response discrepancy vulnerability. The application&#39;s &#39;Forgot Password&#39; endpoint returns distinct JSON responses depending on whether the supplied email address is associated with an existing account. Because the responses differ in the `data.exist` boolean value, an unauthenticated remote attacker can enumerate valid email addresses/accounts on the server. NOTE: D-Link states that a fix is under development.</p> https://cve.radiocsirt.org/vuln/ghsa-fff6-x26h-q5rp