Lucene search
+L

893 matches found

CVE
CVE
added 2024/05/17 9:37 a.m.65 views

CVE-2024-32774

Technical details about CVE-2024-32774 (ProfileGrid Group Members Limit Bypass) are not provided in the supplied documents. Public advisories exist but do not specify affected versions, exploit vectors, or fixes in this data; monitor for official updates.

8.8CVSS6.8AI score0.00468EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/05/17 9:37 a.m.30 views

CVE-2024-32720 WordPress Appointment Hour Booking plugin <= 1.4.56 - Captcha Bypass vulnerability

Improper Restriction of Excessive Authentication Attempts vulnerability in CodePeople Appointment Hour Booking allows Removing Important Client Functionality.This issue affects Appointment Hour Booking: from n/a through 1.4.56...

5.3CVSS5.3AI score0.00351EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/05/17 12:0 a.m.4 views

WordPress plugin ProfileGrid  安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

8.8CVSS6.8AI score0.00468EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/05/08 12:0 a.m.9 views

The vulnerability of the AVerCaster video encoding device lies in its insufficient attempt-limiting mechanism, which allows attackers to execute a brute-force attack.

The vulnerability of the AVerCaster video encoding device is related to insufficient restrictions on authentication attempts. Exploiting this vulnerability allows a remote attacker to execute an attack using brute-force methods...

8.6CVSS5.7AI score
SaveExploits0Affected Software1
CVE
CVE
added 2024/04/25 10:43 a.m.103 views

CVE-2024-32676

The CVE-2024-32676 entry concerns LoginPress Pro prior to version 3.0.0, with documented details in connected sources indicating a Captcha Bypass in LoginPress Pro (|Captcha Bypass|) and related authorization issues. The vulnerability is categorized as Improper Restriction of Excessive Authentica...

5.3CVSS6.8AI score0.0043EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/04/25 10:43 a.m.20 views

CVE-2024-32676 WordPress LoginPress Pro plugin < 3.0.0 - Captcha Bypass vulnerability

Improper Restriction of Excessive Authentication Attempts vulnerability in LoginPress LoginPress Pro allows Removing Important Client Functionality.This issue affects LoginPress Pro: from n/a before 3.0.0...

5.3CVSS7AI score0.0043EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/04/25 10:43 a.m.32 views

CVE-2024-32676 WordPress LoginPress Pro plugin < 3.0.0 - Captcha Bypass vulnerability

Improper Restriction of Excessive Authentication Attempts vulnerability in LoginPress LoginPress Pro allows Removing Important Client Functionality.This issue affects LoginPress Pro: from n/a before 3.0.0...

5.3CVSS5.6AI score0.0043EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/04/25 12:0 a.m.9 views

WordPress plugin LoginPress Pro 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

5.3CVSS6.9AI score0.0043EPSS
SaveExploits0References2
OSV
OSV
added 2024/04/24 12:15 p.m.28 views

UBUNTU-CVE-2024-28825

Improper restriction of excessive authentication attempts on some authentication methods in Checkmk before 2.3.0b5 beta, 2.2.0p26, 2.1.0p43, and in Checkmk 2.0.0 EOL facilitates password brute-forcing...

9.8CVSS5.8AI score0.00521EPSS
SaveExploits0References2
CVE
CVE
added 2024/04/24 11:25 a.m.77 views

CVE-2024-28825

CVE-2024-28825 affects Checkmk installations where login attempts are not adequately limited. The vulnerability exists in multiple Checkmk branches prior to fixes: 2.3.0b5 (beta), 2.2.0p26, 2.1.0p43, and (EOL) 2.0.0. Root cause: insufficient restriction on excessive authentication attempts for ce...

9.8CVSS7.2AI score0.00521EPSS
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/04/15 12:0 a.m.9 views

The vulnerability of the Chamberlain myQ gate control device’s software lies in its insufficient attempt-limiting mechanism. This allows a intruder to circumvent existing security measures through brute-force attacks.

The vulnerability of the Chamberlain myQ gate control device’s software is related to insufficient restrictions on authentication attempts. Exploiting this vulnerability could allow a malicious actor to circumvent existing security measures through brute-force attacks...

10CVSS7.8AI score0.00931EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2024/04/12 3:24 p.m.25 views

CVE-2024-30390 Junos OS Evolved: Connection limits is not being enforced while the resp. rate limit is being enforced

An Improper Restriction of Excessive Authentication Attempts vulnerability in Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause a limited Denial of Service DoS to the management plane. When an incoming connection was blocked because it exceeded the...

6.9CVSS5.6AI score0.0051EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/04/12 3:24 p.m.14 views

CVE-2024-30390 Junos OS Evolved: Connection limits is not being enforced while the resp. rate limit is being enforced

An Improper Restriction of Excessive Authentication Attempts vulnerability in Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause a limited Denial of Service DoS to the management plane. When an incoming connection was blocked because it exceeded the...

6.9CVSS6.9AI score0.0051EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2024/04/11 12:0 a.m.23 views

Juniper Junos OS Vulnerability (JSA79183)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA79183 advisory. - An Improper Restriction of Excessive Authentication Attempts vulnerability in Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause ...

6.9CVSS5.7AI score0.0051EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/04/10 12:0 a.m.8 views

PT-2024-4788 · Juniper Networks · Junos Evolved

Name of the Vulnerable Software and Affected Versions: Junos OS Evolved versions prior to 21.4R3-S4-EVO Junos OS Evolved versions 22.1-EVO prior to 22.1R3-S3-EVO Junos OS Evolved versions 22.2-EVO prior to 22.2R3-S2-EVO Junos OS Evolved versions 22.3-EVO prior to 22.3R2-S1-EVO, 22.3R3-EVO...

6.9CVSS7.4AI score0.0051EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2024/04/02 12:0 a.m.7 views

Stupid Simple CMS 安全漏洞

Stupid Simple CMS is a content management system by codelyfe individual developers. A security vulnerability exists in Stupid Simple CMS version 1.2.4, which stems from the lack of a limit on the number of authentication attempts...

5.9CVSS5AI score0.01201EPSS
SaveExploits1References5
BDU FSTEC
BDU FSTEC
added 2024/03/22 12:0 a.m.9 views

The vulnerability of the declarative delivery tool for GitOps on Kubernetes Argo CD lies in the lack of limits on authentication attempts. This allows a perpetrator to circumvent security restrictions or cause service failures.

The vulnerability of GitOps’ continuous delivery tool for Kubernetes Argo CD lies in the absence of restrictions on authentication attempts when processing the defaultMaxCacheSize parameter. Exploiting this vulnerability allows a malicious actor to circumvent security restrictions or cause servic...

10CVSS6.6AI score0.00751EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/03/22 12:0 a.m.17 views

The vulnerability of the caching mechanism of the declarative delivery tool for GitOps in Kubernetes Argo CD allows attackers to circumvent security restrictions and execute an brute-force attack.

The vulnerability of the caching mechanism for the declarative delivery tool in GitOps for Kubernetes Argo CD lies in the absence of restrictions on authentication attempts when processing the defaultMaxCacheSize parameter. Exploiting this vulnerability allows a malicious actor to bypass security...

7.8CVSS7.3AI score0.00838EPSS
SaveExploits1References6Affected Software1
Vulnrichment
Vulnrichment
added 2024/03/18 4:3 p.m.11 views

CVE-2024-2051

CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that could cause account takeover and unauthorized access to the system when an attacker conducts brute-force attacks against the login form...

9.8CVSS7.2AI score0.00755EPSS
SaveExploits0References1
CVE
CVE
added 2024/03/18 4:3 p.m.76 views

CVE-2024-2051

CVE-2024-2051 concerns Schneider Electric Easergy T200 (including SC2-04MOD-07000104 and earlier). The vulnerability arises from an improper restriction of excessive authentication attempts, which could allow an attacker to perform brute-force login attempts and potentially lead to account takeov...

9.8CVSS6.8AI score0.00755EPSS
SaveExploits0References1
Rows per page
Query Builder