CWE-286
CVEs classified under CWE-286, newest first.
4 CVEsRSS
CVE-2025-64725Critical· 9.8Weblate is a web based localization tool
Weblate is a web based localization tool. In versions prior to 5.15, it was possible to accept an invitation opened by a different user. Version 5.15. contains a patch. As a workaround, avoid leaving one's Weblate sessions with an invita…
CVE-2025-59943High· 8.1phpMyFAQ is an open source FAQ web application
phpMyFAQ is an open source FAQ web application. Versions 4.0-nightly-2025-10-03 and below do not enforce uniqueness of email addresses during user registration. This allows multiple distinct accounts to be created with the same email. Be…
CVE-2024-29296Medium· 5.3PoCPortainer CE allows username enumeration through authentication response timing
Portainer CE allows username enumeration through authentication response timing
CVE-2023-3932High· 8.2PoCIncorrect User Management in GitLab
An issue has been discovered in GitLab EE affecting all versions starting from 13.12 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. It was possible for an attacker to run pipe…