CVE-2021-20635

Improper restriction of excessive authentication attempts in LOGITEC LAN-WH450N/GR allows an attacker in the wireless range of the device to recover PIN and access the network...

CVE-2020-8827

As of v1.5.0, the Argo API does not implement anti-automation measures such as rate limiting, account lockouts, or other anti-bruteforce measures. Attackers can submit an unlimited number of authentication attempts without consequence...

CVE-2020-7525

Improper Restriction of Excessive Authentication Attempts vulnerability exists in all hardware versions of spaceLYnk and Wiser for KNX formerly homeLYnk which could allow an attacker to guess a password when brute force is used...

CVE-2020-7508

A CWE-307 Improper Restriction of Excessive Authentication Attempts vulnerability exists in Easergy T300 Firmware version 1.5.2 and older which could allow an attacker to gain full access by brute force...

CVE-2020-15367

Venki Supravizio BPM 10.1.2 does not limit the number of authentication attempts. An unauthenticated user may exploit this vulnerability to launch a brute-force authentication attack against the Login page...

CVE-2018-16153

An issue was discovered in Apereo Opencast 4.x through 10.x before 10.6. It sends system digest credentials during authentication attempts to arbitrary external services in some situations...

CVE-2014-9151

The Services module 7.x-3.x before 7.x-3.10 for Drupal does not properly limit the rate of authentication attempts, which makes it easier for remote attackers to obtain access via a brute-force attack on the administrative password...

CVE-2013-1188

Cisco Unified Communications Manager CUCM does not properly limit the rate of authentication attempts, which allows remote attackers to cause a denial of service application slowdown via a series of requests, aka Bug ID CSCud39515...

CVE-2011-4022

The sensor in Cisco Intrusion Prevention System IPS 7.0 and 7.1 allows remote attackers to cause a denial of service file-handle exhaustion and mainApp hang by making authentication attempts that exceed the configured limit, aka Bug ID CSCto51204...

CVE-2013-4965

Puppet Enterprise before 3.1.0 does not properly restrict the number of authentication attempts by a console account, which makes it easier for remote attackers to bypass intended access restrictions via a brute-force attack...

CVE-2004-1780

Info Touch Surfnet kiosk allows local users to deposit extra time into Internet kiosk accounts via repeated authentication attempts...

The vulnerability of the ElasticSearch search engine arises from insufficient limits on authentication attempts. This allows attackers to execute brute-force attacks and gain increased privileges.

The vulnerability of the ElasticSearch search engine is related to insufficient restrictions on authentication attempts. Exploiting this vulnerability allows a malicious actor to execute a brute-force attack and increase their privileges...

CVE-2025-48014 Improper Restriction of Excessive Authentication Attempts

Password guessing limits could be bypassed when using LDAP authentication...

CVE-2025-48014

CVE-2025-48014 affects Schweitzer Engineering Laboratories (SEL) Series software/firmware where password guessing limits can be bypassed when LDAP authentication is used. The linked records describe a bypass of login-account protection without detailing the exact vulnerable component version(s) o...

CVE-2025-46739

CVE-2025-46739 describes unauthenticated brute-force against accounts with no rate limiting, potentially exposing credentials. Connected sources indicate affected Schweitzer Engineering Laboratories products (e.g., SEL-5033 acSELerator RTAC software and related SEL devices; Blueframe OS) but do n...

CVE-2025-46739 Improper Restriction of Excessive Authentication Attempts

An unauthenticated user could discover account credentials via a brute-force attack without rate limiting...

CVE-2025-3555

A vulnerability classified as problematic has been found in ScriptAndTools eCommerce-website-in-PHP 3.0. Affected is an unknown function of the file /login.php. The manipulation leads to improper restriction of excessive authentication attempts. It is possible to launch the attack remotely. The...

CVE-2025-3556

A vulnerability classified as problematic was found in ScriptAndTools eCommerce-website-in-PHP 3.0. Affected by this vulnerability is an unknown functionality of the file /admin/login.php. The manipulation leads to improper restriction of excessive authentication attempts. The attack can be...

CVE-2025-3556

A vulnerability classified as problematic was found in ScriptAndTools eCommerce-website-in-PHP 3.0. Affected by this vulnerability is an unknown functionality of the file /admin/login.php. The manipulation leads to improper restriction of excessive authentication attempts. The attack can be...

CVE-2025-3556

CVE-2025-3556 affects ScriptAndTools eCommerce-website-in-PHP 3.0. The vulnerability resides in an unknown functionality of /admin/login.php, where improper restriction of excessive authentication attempts can be exploited remotely. Documents consistently describe high attack complexity and high ...