Lucene search
+L

894 matches found

NVD
NVD
added 2023/04/18 8:15 p.m.20 views

CVE-2022-43377

A CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that could cause account takeover when a brute force attack is performed on the account. Affected Products: NetBotz 4 - 355/450/455/550/570 V4.7.0 and prior...

7.5CVSS7.6AI score0.0063EPSS
SaveExploits0References1
Prion
Prion
added 2023/04/18 8:15 p.m.23 views

Authentication flaw

A CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that could cause account takeover when a brute force attack is performed on the account. Affected Products: NetBotz 4 - 355/450/455/550/570 V4.7.0 and prior...

5CVSS7.6AI score0.0063EPSS
SaveExploits0References1Affected Software5
CVE
CVE
added 2023/04/18 7:56 p.m.41 views

CVE-2022-43377

CVE-2022-43377 affects Schneider Electric NetBotz 4 (versions ≤ 4.7.0). The root cause is CWE-307: improper restriction of excessive authentication attempts, enabling potential account takeover via brute force over the network. Affected: NetBotz 4 355/450/455/550/570 (V4.7.0 and prior). CVSSv3.1 ...

7.5CVSS7.5AI score0.0063EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/04/18 7:56 p.m.26 views

CVE-2022-43377

A CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that could cause account takeover when a brute force attack is performed on the account. Affected Products: NetBotz 4 - 355/450/455/550/570 V4.7.0 and prior...

7.5CVSS7.8AI score0.0063EPSS
SaveExploits0References1
NVD
NVD
added 2023/04/15 1:15 p.m.33 views

CVE-2022-2525

Improper Restriction of Excessive Authentication Attempts in GitHub repository janeczku/calibre-web prior to 0.6.20...

9.8CVSS7.8AI score0.00762EPSS
SaveExploits1References2
Prion
Prion
added 2023/04/15 1:15 p.m.14 views

Input validation

Improper Restriction of Excessive Authentication Attempts in GitHub repository janeczku/calibre-web prior to 0.6.20...

7.5CVSS9.6AI score0.00762EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/04/15 12:0 a.m.7 views

CVE-2022-2525 Improper Restriction of Excessive Authentication Attempts in janeczku/calibre-web

Improper Restriction of Excessive Authentication Attempts in GitHub repository janeczku/calibre-web prior to 0.6.20...

7.3CVSS6.8AI score0.00762EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2023/04/15 12:0 a.m.3 views

PT-2023-12780

Name of the Vulnerable Software and Affected Versions calibre-web versions prior to 0.6.20 Description The issue is related to improper restriction of excessive authentication attempts in the GitHub repository janeczku/calibre-web. Recommendations For versions prior to 0.6.20, update to version...

9.8CVSS7.1AI score0.00762EPSS
SaveExploits1References13
CNNVD
CNNVD
added 2023/04/15 12:0 a.m.9 views

Calibre-Web 安全漏洞

Calibre-Web is a web application for browsing, reading and downloading eBooks from the Calibre database. A security vulnerability exists in Calibre-Web versions prior to 0.6.20, which stems from an improper restriction on excessive authentication attempts...

9.8CVSS7.6AI score0.00762EPSS
SaveExploits1References3
OSV
OSV
added 2023/04/15 12:0 a.m.24 views

CVE-2022-2525 Improper Restriction of Excessive Authentication Attempts in janeczku/calibre-web

Improper Restriction of Excessive Authentication Attempts in GitHub repository janeczku/calibre-web prior to 0.6.20...

9.8CVSS7.7AI score0.00762EPSS
SaveExploits1References4
Fortinet
Fortinet
added 2023/04/11 12:0 a.m.69 views

Protect

An improper restriction of excessive authentication attempts vulnerability CWE-307 in FortiOS & FortiProxy administrative interface may allow an attacker with a valid user account to perform brute-force attacks on other user accounts via injecting valid login sessions...

6.5CVSS8.4AI score0.00405EPSS
SaveExploits0Affected Software3
Positive Technologies
Positive Technologies
added 2023/04/11 12:0 a.m.4 views

PT-2023-7425 · Fortinet · Fortiproxy +1

Name of the Vulnerable Software and Affected Versions: FortiOS versions 7.2.0 through 7.2.3 FortiOS versions prior to 7.0.10 FortiProxy versions 7.2.0 through 7.2.2 FortiProxy versions prior to 7.0.8 Description: The issue is related to an improper restriction of excessive authentication attempts...

8.8CVSS8.6AI score0.00405EPSS
SaveExploits0References6
GitLab Advisory Database
GitLab Advisory Database
added 2023/04/10 12:0 a.m.40 views

Flask-AppBuilder Has No Rate Limiting on Login AUTH DB

Lack of rate limiting will allow an attacker to brute-force user credentials...

7.5CVSS7.3AI score0.00629EPSS
SaveExploits0References7Affected Software1
Tenable Nessus
Tenable Nessus
added 2023/03/29 12:0 a.m.34 views

Schneider Electric Wiser Smart Improper Restriction of Excessive Authentication Attempts (CVE-2022-30235)

A CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that could allow unauthorized access when an attacker uses brute force. Affected Products: Wiser Smart, EER21000 & EER21001 V4.5 and prior This plugin only works with Tenable.ot. Please visit...

9.8CVSS8.4AI score0.00948EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2023/03/27 12:0 a.m.7 views

CVE-2023-1665 Improper Restriction of Excessive Authentication Attempts in linagora/twake

Improper Restriction of Excessive Authentication Attempts in GitHub repository linagora/twake prior to 0.0.0...

7.8CVSS9.6AI score0.0062EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2023/03/27 12:0 a.m.5 views

PT-2023-17154 · Linagora · Linagora/Twake

Name of the Vulnerable Software and Affected Versions: linagora/twake version prior to 0.0.0. Description: The issue concerns an improper restriction of excessive authentication attempts. This means that the system does not adequately limit the number of login attempts, potentially allowing for...

9.8CVSS7.7AI score0.0062EPSS
SaveExploits1References5
OSV
OSV
added 2023/03/27 12:0 a.m.13 views

CVE-2023-1665 Improper Restriction of Excessive Authentication Attempts in linagora/twake

Improper Restriction of Excessive Authentication Attempts in GitHub repository linagora/twake prior to 0.0.0...

7.8CVSS7.9AI score0.0062EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2023/03/22 12:0 a.m.11 views

CVE-2023-27100

Improper restriction of excessive authentication attempts in the SSHGuard component of Netgate pfSense Plus software v22.05.1 and pfSense CE software v2.6.0 allows attackers to bypass brute force protection mechanisms via crafted web requests...

9.6AI score0.09844EPSS
SaveExploits5References3
Prion
Prion
added 2023/03/21 5:15 a.m.13 views

Input validation

Improper Restriction of Excessive Authentication Attempts in GitHub repository answerdev/answer prior to 1.0.6...

5CVSS5.3AI score0.00614EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/03/21 12:0 a.m.8 views

CVE-2023-1539 Improper Restriction of Excessive Authentication Attempts in answerdev/answer

Improper Restriction of Excessive Authentication Attempts in GitHub repository answerdev/answer prior to 1.0.6...

5.3CVSS5.3AI score0.00614EPSS
SaveExploits1References2
Rows per page
Query Builder