The vulnerability of the Client Communication component of the Siemens SINEMA Remote Connect server allows a hacker to obtain encrypted user credentials.

The vulnerability of the Client Communication component in the Siemens SINEMA Remote Connect server is related to insufficient restrictions on authentication attempts. Exploiting this vulnerability could allow a malicious actor to obtain encrypted user credentials remotely...

PT-2024-8789 · Dell · Dell Wyse Management Suite

Name of the Vulnerable Software and Affected Versions: Dell Wyse Management Suite versions WMS 4.4 and prior Description: The issue is related to an Improper Restriction of Excessive Authentication Attempts, which could be exploited by a high privileged attacker with remote access, leading to...

The vulnerability of software solutions for optimizing production processes in Location Intelligence lies in the insufficient limitation on authentication attempts, allowing attackers to carry out attacks using brute-force methods.

The vulnerability of software for optimizing production processes in Location Intelligence is related to insufficient restrictions on authentication attempts. Exploiting this vulnerability allows an attacker to carry out an attack using brute-force methods...

CVE-2024-47088

This vulnerability exists in Apex Softcell LD Geo due to missing restrictions for excessive failed authentication attempts on its API based login. A remote attacker could exploit this vulnerability by conducting a brute force attack on login OTP, which could lead to gain unauthorized access to...

PT-2024-28259 · Horizon Business Services Inc. · Caterease

Name of the Vulnerable Software and Affected Versions: Horizon Business Services Inc. Caterease versions 16.0.1.1663 through 24.0.1.2405 Description: The issue allows a local attacker to perform a Password Brute Forcing attack due to improper restriction of excessive authentication attempts. This...

PT-2024-8749 · Siemens · Sinema Remote Connect Server

Name of the Vulnerable Software and Affected Versions: SINEMA Remote Connect Server versions prior to V3.2 SP1 Description: A vulnerability has been identified in the Client Communication component of the SINEMA Remote Connect Server, where it does not properly implement brute force protection...

CVE-2024-5862

Improper Restriction of Excessive Authentication Attempts vulnerability in Mia Technology Inc. Mia-Med Health Aplication allows Interface Manipulation. This issue affects Mia-Med Health Aplication: before 1.0.14...

WordPress plugin Appointment Hour Booking 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2024-4723 · Unknown · Сервис Обновлений

Name of the Vulnerable Software and Affected Versions: Сервис обновлений affected versions not specified Description: The issue is related to the web request handler of the "Сервис обновлений" software, which lacks authentication attempt restrictions. This can be exploited by a remote attacker to...

PT-2024-22593 · Checkmk · Checkmk

Name of the Vulnerable Software and Affected Versions: Checkmk versions prior to 2.3.0b5 Checkmk versions prior to 2.2.0p26 Checkmk versions prior to 2.1.0p43 Checkmk version 2.0.0 Description: The issue is related to improper restriction of excessive authentication attempts on some authenticatio...

The vulnerability of cloud-based software for creating and using Nextcloud Server’s data storage solution lies in the lack of authentication attempt limits, allowing attackers to bypass passwords.

The vulnerability of cloud-based software for creating and using Nextcloud Server storage solutions is related to the absence of restrictions on authentication attempts. Exploiting this vulnerability can allow a malicious actor to bypass any password restrictions...

The vulnerability of the application interface for WebDAV cloud software for creating and using Nextcloud data storage allows a perpetrator to gain access to confidential information.

The vulnerability of the WebDAV application programming interface of cloud-based software for creating and using Nextcloud data storage solutions is related to insufficient restrictions on authentication attempts. Exploiting this vulnerability could allow a malicious actor to gain access to...

The vulnerability of the Weincloud industrial device management cloud platform lies in its insufficient authentication attempt limit, which allows attackers to execute a brute-force attack.

The vulnerability of the Weincloud industrial device management cloud platform lies in the insufficient limitation on authentication attempts. Exploiting this vulnerability allows a malicious actor to execute a brute-force attack...

The vulnerability of D-Link DSL-224 router microprogramming software, related to insufficient limits on authentication attempts, allows attackers to circumvent security restrictions and gain unauthorized access to protected information.

The vulnerability of D-Link DSL-224 router microprogramming software is related to insufficient restrictions on authentication attempts. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and gain unauthorized access to protected information...

Froxlor 安全漏洞

Froxlor is a suite of lightweight server management software from the Froxlor team. A security vulnerability exists in Froxlor versions prior to 2.0.20 that stems from an improper restriction on excessive authentication attempts...

The vulnerability of microprogramming software in programming-and-software-based monitoring and security infrastructure for IT infrastructure systems arises from the inability to effectively limit authentication attempts. This allows attackers to circumvent existing security restrictions by using brute-force attacks.

The vulnerability of the microprogramming software used in software-hardware environments for monitoring and security protection of IT infrastructure against physical threats in the NetBotz 4 system is related to insufficient restrictions on authentication attempts. Exploiting this vulnerability...

The vulnerability of the OATHAuth extension of the software platform for implementing the MediaWiki hypertext environment allows a hacker to circumvent existing security restrictions through brute-force attacks.

The vulnerability of the OATHAuth extension, a software tool for implementing a hypertext environment like MediaWiki, relates to insufficient restrictions on authentication attempts. Exploiting this vulnerability could allow a malicious actor to circumvent existing security measures through...

The vulnerability of the microprogramming software used in industrial LTE modems of the Moxa OnCell G3150A-LTE, OnCell G3470A-LTE, and WDR-3124A series, as well as the microprogramming software used in wireless access points for industrial systems of the Moxa AWK-3131A, AWK-4131A, AWK-1131A, and AWK-1137C models, stems from insufficient authentication attempts limits. This vulnerability allows attackers to execute a brute-force attack.

The vulnerability of the microprogramming software used in industrial LTE modems of the Moxa OnCell G3150A-LTE, OnCell G3470A-LTE, and WDR-3124A series, as well as the microprogramming software used in wireless access points for industrial systems of the Moxa AWK-3131A, AWK-4131A, AWK-1131A, and...

FortiTester 安全漏洞

FortiTester is a Fortinet professional-based network traffic testing tool from FortiTester, Inc. A security vulnerability exists in FortiTester versions 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, and 7.0.0 through 7.1.0 that stems from an improper restriction of excessive authentication attempts i...

The vulnerability of the SCADA system “SKADA-NEV” is related to insufficient restrictions on authentication attempts, allowing a intruder to gain access to the user account.

The vulnerability of the SCADA system “SKADA-NEV” is related to insufficient restrictions on authentication attempts. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to the user account by force...