https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 06 Nov 2026 03:23:25 +0000 https://db.gcve.eu/vuln/cnvd-2018-19041 cnvd-2018-19041 https://db.gcve.eu/vuln/cnvd-2018-19041 https://db.gcve.eu/vuln/fkie_cve-2018-11554 <p>The forgotten-password feature in index.php/member/reset/reset_email.html in YzmCMS v3.2 through v3.7 has a Response Discrepancy Information Exposure issue and an unexpectedly long lifetime for a verification code, which makes it easier for remote attackers to hijack accounts via a brute-force approach.</p> <p>The forgotten-password feature in index.php/member/reset/reset_email.html in YzmCMS v3.2 through v3.7 has a Response Discrepancy Information Exposure issue and an unexpectedly long lifetime for a verification code, which makes it easier for remote attackers to hijack accounts via a brute-force approach.</p> https://db.gcve.eu/vuln/fkie_cve-2018-11554 https://db.gcve.eu/vuln/ghsa-c8qv-w2h5-xjq7 <p>The forgotten-password feature in index.php/member/reset/reset_email.html in YzmCMS v3.2 through v3.7 has a Response Discrepancy Information Exposure issue and an unexpectedly long lifetime for a verification code, which makes it easier for remote attackers to hijack accounts via a brute-force approach.</p> <p>The forgotten-password feature in index.php/member/reset/reset_email.html in YzmCMS v3.2 through v3.7 has a Response Discrepancy Information Exposure issue and an unexpectedly long lifetime for a verification code, which makes it easier for remote attackers to hijack accounts via a brute-force approach.</p> https://db.gcve.eu/vuln/ghsa-c8qv-w2h5-xjq7 https://db.gcve.eu/vuln/gsd-2018-11554 gsd-2018-11554 https://db.gcve.eu/vuln/gsd-2018-11554