CVE-2024-38888

An issue in Horizon Business Services Inc. Caterease 16.0.1.1663 through 24.0.1.2405 and possibly later versions, allows a local attacker to perform a Password Brute Forcing attack due to improper restriction of excessive authentication attempts...

CVE-2024-38888

CVE-2024-38888 affects Horizon Business Services Inc. Caterease versions 16.0.1.1663 through 24.0.1.2405, where a flaw in restricting excessive authentication attempts enables a local attacker to perform a password brute force. The linked data records a CVSS v3.1 base score of 6.8 (Medium): Attac...

CVE-2024-38176

An improper restriction of excessive authentication attempts in GroupMe allows a unauthenticated attacker to elevate privileges over a network...

Microsoft GroupMe 安全漏洞

Microsoft GroupMe is a confidential group text messaging service from Microsoft USA. Users can group chat and manage text messages via SMS or client on their cell phones. A security vulnerability exists in Microsoft GroupMe that stems from improper restrictions on excessive authentication attempt...

The vulnerability of the SCADA system MasterSCADA 4D, related to insufficient restrictions on authentication attempts, allows a perpetrator to carry out an attack using brute-force methods.

The vulnerability of the SCADA system MasterSCADA 4D is related to insufficient restrictions on authentication attempts. Exploiting this vulnerability allows a malicious actor to carry out an attack using brute-force methods...

The vulnerability of Juniper Networks’ Junos OS Evolved operating system, related to insufficient restrictions on authentication attempts, allows a perpetrator to trigger a service failure.

The vulnerability of Juniper Networks’ Junos OS Evolved operating system is related to insufficient restrictions on authentication attempts. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the SCADA system “ENTEK,” which stems from insufficient restrictions on authentication attempts, allows attackers to carry out attacks using brute-force methods.

The vulnerability of the SCADA system “ENTEK” is related to insufficient restrictions on authentication attempts. Exploiting this vulnerability allows a malicious actor to carry out an attack using brute-force methods...

The vulnerability of the “Updates Service” software, which allows a hacker to gain access to read local files.

The vulnerability of the “Updates Service” software’s web request handler lies in the lack of limits on authentication attempts. Exploiting this vulnerability can allow a malicious actor to gain read access to local files...

The vulnerability of the “Project-SmartPRO” software lies in the lack of restrictions on the number of authentication attempts. This allows a perpetrator to carry out a brute-force attack.

The vulnerability of the “Project-SmartPRO” software is related to the absence of restrictions on the number of authentication attempts. Exploiting this vulnerability allows a remote attacker to carry out an attack using brute-force methods...

CVE-2024-5862 User Enumeration in Mia Technology's Mia-Med Health Aplication

Improper Restriction of Excessive Authentication Attempts vulnerability in Mia Technology Inc. Mia-Med Health Aplication allows Interface Manipulation. This issue affects Mia-Med Health Aplication: before 1.0.14...

Mia Technology MIA-MED Security Vulnerability

Mia Technology MIA-MED is a hospital management system from Mia Technology. A security vulnerability exists in Mia Technology MIA-MED versions prior to 1.0.14 that stems from an improper restriction of excessive authentication attempts...

Logsign Unified SecOps Platform Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on affected installations of Logsign Unified SecOps Platform. Authentication is not required to exploit this vulnerability. The specific flaw exists within the password reset mechanism. The issue results from the lack of...

PT-2024-5480 · Microsoft · Groupme

Name of the Vulnerable Software and Affected Versions: GroupMe affected versions not specified Description: The issue is related to insufficient restriction of excessive authentication attempts in GroupMe, allowing a remote, unauthenticated attacker to elevate privileges over a network...

CVE-2024-35747 WordPress Contact Form Builder, Contact Widget plugin <= 2.1.7 - Bypass Vulnerability vulnerability

Improper Restriction of Excessive Authentication Attempts vulnerability in wpdevart Contact Form Builder, Contact Widget allows Functionality Bypass.This issue affects Contact Form Builder, Contact Widget: from n/a through 2.1.7...

CVE-2024-35747 WordPress Contact Form Builder, Contact Widget plugin <= 2.1.7 - Bypass Vulnerability vulnerability

Improper Restriction of Excessive Authentication Attempts vulnerability in wpdevart Contact Form Builder, Contact Widget allows Functionality Bypass.This issue affects Contact Form Builder, Contact Widget: from n/a through 2.1.7...

CVE-2024-28833 Missing brute-force protection for two factor authentication

Improper restriction of excessive authentication attempts with two factor authentication methods in Checkmk 2.3 before 2.3.0p6 facilitates brute-forcing of second factor mechanisms...

WordPress plugin Contact Form Builder, Contact Widget security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

WordPress Hide My WP Ghost plugin Access Control Error Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An access control error...

WordPress Captcha/Honeypot for Contact Form plugin Access Control Error Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An access control error...

WordPress Captcha Code plugin Access Control Error Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An access control error...