912 matches found
WordPress plugin ProfileGrid 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
The vulnerability of the AVerCaster video encoding device lies in its insufficient attempt-limiting mechanism, which allows attackers to execute a brute-force attack.
The vulnerability of the AVerCaster video encoding device is related to insufficient restrictions on authentication attempts. Exploiting this vulnerability allows a remote attacker to execute an attack using brute-force methods...
CVE-2024-32676 WordPress LoginPress Pro plugin < 3.0.0 - Captcha Bypass vulnerability
Improper Restriction of Excessive Authentication Attempts vulnerability in LoginPress LoginPress Pro allows Removing Important Client Functionality.This issue affects LoginPress Pro: from n/a before 3.0.0...
CVE-2024-32676 WordPress LoginPress Pro plugin < 3.0.0 - Captcha Bypass vulnerability
Improper Restriction of Excessive Authentication Attempts vulnerability in LoginPress LoginPress Pro allows Removing Important Client Functionality.This issue affects LoginPress Pro: from n/a before 3.0.0...
CVE-2024-32676
The CVE-2024-32676 entry concerns LoginPress Pro prior to version 3.0.0, with documented details in connected sources indicating a Captcha Bypass in LoginPress Pro (|Captcha Bypass|) and related authorization issues. The vulnerability is categorized as Improper Restriction of Excessive Authentica...
WordPress plugin LoginPress Pro 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
UBUNTU-CVE-2024-28825
Improper restriction of excessive authentication attempts on some authentication methods in Checkmk before 2.3.0b5 beta, 2.2.0p26, 2.1.0p43, and in Checkmk 2.0.0 EOL facilitates password brute-forcing...
CVE-2024-28825
CVE-2024-28825 affects Checkmk installations where login attempts are not adequately limited. The vulnerability exists in multiple Checkmk branches prior to fixes: 2.3.0b5 (beta), 2.2.0p26, 2.1.0p43, and (EOL) 2.0.0. Root cause: insufficient restriction on excessive authentication attempts for ce...
The vulnerability of the Chamberlain myQ gate control device’s software lies in its insufficient attempt-limiting mechanism. This allows a intruder to circumvent existing security measures through brute-force attacks.
The vulnerability of the Chamberlain myQ gate control device’s software is related to insufficient restrictions on authentication attempts. Exploiting this vulnerability could allow a malicious actor to circumvent existing security measures through brute-force attacks...
CVE-2024-30390 Junos OS Evolved: Connection limits is not being enforced while the resp. rate limit is being enforced
An Improper Restriction of Excessive Authentication Attempts vulnerability in Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause a limited Denial of Service DoS to the management plane. When an incoming connection was blocked because it exceeded the...
CVE-2024-30390 Junos OS Evolved: Connection limits is not being enforced while the resp. rate limit is being enforced
An Improper Restriction of Excessive Authentication Attempts vulnerability in Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause a limited Denial of Service DoS to the management plane. When an incoming connection was blocked because it exceeded the...
Juniper Junos OS Vulnerability (JSA79183)
The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA79183 advisory. - An Improper Restriction of Excessive Authentication Attempts vulnerability in Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause ...
PT-2024-4788 · Juniper Networks · Junos Evolved
Name of the Vulnerable Software and Affected Versions: Junos OS Evolved versions prior to 21.4R3-S4-EVO Junos OS Evolved versions 22.1-EVO prior to 22.1R3-S3-EVO Junos OS Evolved versions 22.2-EVO prior to 22.2R3-S2-EVO Junos OS Evolved versions 22.3-EVO prior to 22.3R2-S1-EVO, 22.3R3-EVO...
Stupid Simple CMS 安全漏洞
Stupid Simple CMS is a content management system by codelyfe individual developers. A security vulnerability exists in Stupid Simple CMS version 1.2.4, which stems from the lack of a limit on the number of authentication attempts...
The vulnerability of the caching mechanism of the declarative delivery tool for GitOps in Kubernetes Argo CD allows attackers to circumvent security restrictions and execute an brute-force attack.
The vulnerability of the caching mechanism for the declarative delivery tool in GitOps for Kubernetes Argo CD lies in the absence of restrictions on authentication attempts when processing the defaultMaxCacheSize parameter. Exploiting this vulnerability allows a malicious actor to bypass security...
The vulnerability of the declarative delivery tool for GitOps on Kubernetes Argo CD lies in the lack of limits on authentication attempts. This allows a perpetrator to circumvent security restrictions or cause service failures.
The vulnerability of GitOps’ continuous delivery tool for Kubernetes Argo CD lies in the absence of restrictions on authentication attempts when processing the defaultMaxCacheSize parameter. Exploiting this vulnerability allows a malicious actor to circumvent security restrictions or cause servic...
CVE-2024-2051
CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that could cause account takeover and unauthorized access to the system when an attacker conducts brute-force attacks against the login form...
CVE-2024-2051
CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that could cause account takeover and unauthorized access to the system when an attacker conducts brute-force attacks against the login form...
CVE-2024-2051
CVE-2024-2051 concerns Schneider Electric Easergy T200 (including SC2-04MOD-07000104 and earlier). The vulnerability arises from an improper restriction of excessive authentication attempts, which could allow an attacker to perform brute-force login attempts and potentially lead to account takeov...
The vulnerability of the microprogramming software of Schneider Electric Easergy T200 remote control devices allows a intruder to gain unauthorized access to the system.
The vulnerability of the microprogramming software of Schneider Electric Easergy T200 remote control devices is related to insufficient restrictions on authentication attempts. Exploiting this vulnerability could allow an intruder to gain unauthorized access to the system...