341 matches found
Input validation
An Improper Restriction of Excessive Authentication Attempts CWE-307 in FortiSIEM below 7.0.0 may allow a non-privileged user with access to several endpoints to brute force attack these endpoints...
CVE-2022-42478
"CVE-2022-42478" affects FortiSIEM prior to 7.0.0 and describes an improper restriction of excessive authentication attempts that could let a non-privileged user brute‑force endpoints. The issue is tied to FortiSIEM’s authentication controls and may allow targeted endpoints to be attacked. The co...
CVE-2022-42478
An Improper Restriction of Excessive Authentication Attempts CWE-307 in FortiSIEM below 7.0.0 may allow a non-privileged user with access to several endpoints to brute force attack these endpoints...
CVE-2023-3173
CVE-2023-3173 affects froxlor/froxlor prior to 2.0.20. The root cause is an improper restriction of excessive authentication attempts, with potential high impact on confidentiality, integrity, and availability (CVSS 9.8). Mitigation: upgrade to version 2.0.20 or later; apply available patches as ...
PT-2023-23440 · Froxlor · Froxlor
Name of the Vulnerable Software and Affected Versions: froxlor versions prior to 2.0.20 Description: The issue is related to improper restriction of excessive authentication attempts in the GitHub repository froxlor/froxlor. Recommendations: For versions prior to 2.0.20, update to version 2.0.20 ...
CVE-2023-3173 Improper Restriction of Excessive Authentication Attempts in froxlor/froxlor
Improper Restriction of Excessive Authentication Attempts in GitHub repository froxlor/froxlor prior to 2.0.20...
PT-2023-20777 · Linagora · Linagora/Twake
Name of the Vulnerable Software and Affected Versions: linagora/twake versions prior to 2023.Q1.1223 Description: The issue is related to improper restriction of excessive authentication attempts. Recommendations: For versions prior to 2023.Q1.1223, update to version 2023.Q1.1223 or later to...
CVE-2023-2531
Improper Restriction of Excessive Authentication Attempts in GitHub repository azuracast/azuracast prior to 0.18.3...
Input validation
Improper Restriction of Excessive Authentication Attempts in GitHub repository azuracast/azuracast prior to 0.18.3...
CVE-2023-2531
The CVE-2023-2531 entry concerns AzuraCast (azuracast/azuracast) before version 0.18.3, where the login rate-limiting/anti-brute-force control could be bypassed, enabling credential brute-forcing. Multiple connected sources corroborate that older AzuraCast releases lacked effective restriction on...
CVE-2023-2531 Improper Restriction of Excessive Authentication Attempts in azuracast/azuracast
Improper Restriction of Excessive Authentication Attempts in GitHub repository azuracast/azuracast prior to 0.18.3...
CVE-2022-43377
A CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that could cause account takeover when a brute force attack is performed on the account. Affected Products: NetBotz 4 - 355/450/455/550/570 V4.7.0 and prior...
Authentication flaw
A CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that could cause account takeover when a brute force attack is performed on the account. Affected Products: NetBotz 4 - 355/450/455/550/570 V4.7.0 and prior...
CVE-2022-43377
CVE-2022-43377 affects Schneider Electric NetBotz 4 (versions ≤ 4.7.0). The root cause is CWE-307: improper restriction of excessive authentication attempts, enabling potential account takeover via brute force over the network. Affected: NetBotz 4 355/450/455/550/570 (V4.7.0 and prior). CVSSv3.1 ...
CVE-2022-43377
A CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that could cause account takeover when a brute force attack is performed on the account. Affected Products: NetBotz 4 - 355/450/455/550/570 V4.7.0 and prior...
CVE-2022-2525
Improper Restriction of Excessive Authentication Attempts in GitHub repository janeczku/calibre-web prior to 0.6.20...
CVE-2022-2525 Improper Restriction of Excessive Authentication Attempts in janeczku/calibre-web
Improper Restriction of Excessive Authentication Attempts in GitHub repository janeczku/calibre-web prior to 0.6.20...
CVE-2022-2525 Improper Restriction of Excessive Authentication Attempts in janeczku/calibre-web
Improper Restriction of Excessive Authentication Attempts in GitHub repository janeczku/calibre-web prior to 0.6.20...
Protect
An improper restriction of excessive authentication attempts vulnerability CWE-307 in FortiOS & FortiProxy administrative interface may allow an attacker with a valid user account to perform brute-force attacks on other user accounts via injecting valid login sessions...
