484 matches found
CVE-2022-43904
CVE-2022-43904 affects IBM Security Guardium 11.3 and 11.4 (also 10.6 and 11.5 per IBM bulletin) with an information-disclosure risk due to improper restriction of excessive authentication attempts. The issue can disclose sensitive information to an attacker. IBM’s Security Bulletin notes a base ...
PT-2023-14389 · Ibm · Ibm Security Guardium
Name of the Vulnerable Software and Affected Versions: IBM Security Guardium versions 11.3 through 11.4 Description: The issue could disclose sensitive information to an attacker due to improper restriction of excessive authentication attempts. Recommendations: For versions 11.3 and 11.4, conside...
CVE-2023-40706 Improper Restriction of Excessive Authentication Attempts in OPTO 22 SNAP PAC S1 Built-in Web Server
There is no limit on the number of login attempts in the web server for the SNAP PAC S1 Firmware version R10.3b. This could allow for a brute-force attack on the built-in web server login...
CVE-2023-40706 Improper Restriction of Excessive Authentication Attempts in OPTO 22 SNAP PAC S1 Built-in Web Server
There is no limit on the number of login attempts in the web server for the SNAP PAC S1 Firmware version R10.3b. This could allow for a brute-force attack on the built-in web server login...
CVE-2023-21709: Improper Restriction of Excessive Authentication Attempts
Microsoft Exchange Server Elevation of Privilege Vulnerability...
CVE-2023-32657 Weintek Weincloud Improper Restriction of Excessive Authentication Attempts
Weintek Weincloud v0.13.6 could allow an attacker to efficiently develop a brute force attack on credentials with authentication hints from error message responses...
Weintek Weincloud
1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Weintek Equipment: Weincloud Vulnerabilities: Weak Password Recovery Mechanism for Forgotten Password, Improper Authentication, Improper Restriction of Excessive Authentication Attempts, Improper...
CVE-2023-29301
Adobe ColdFusion versions 2018u16 and earlier, 2021u6 and earlier and 2023.0.0.330468 and earlier are affected by an Improper Restriction of Excessive Authentication Attempts vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to impact the...
Security feature bypass
Adobe ColdFusion versions 2018u16 and earlier, 2021u6 and earlier and 2023.0.0.330468 and earlier are affected by an Improper Restriction of Excessive Authentication Attempts vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to impact the...
CVE-2023-29301 Adobe ColdFusion Improper Restriction of Excessive Authentication Attempts Security feature bypass
Adobe ColdFusion versions 2018u16 and earlier, 2021u6 and earlier and 2023.0.0.330468 and earlier are affected by an Improper Restriction of Excessive Authentication Attempts vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to impact the...
CVE-2023-29301
CVE-2023-29301 affects Adobe ColdFusion versions 2018u16 and earlier, 2021u6 and earlier, and 2023.0.0.330468 and earlier. It is an Improper Restriction of Excessive Authentication Attempts vulnerability that could result in a security feature bypass and could impact user confidentiality. Exploit...
CVE-2023-29301: Improper Restriction of Excessive Authentication Attempts
Adobe ColdFusion versions 2018u16 and earlier, 2021u6 and earlier and 2023.0.0.330468 and earlier are affected by an Improper Restriction of Excessive Authentication Attempts vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to impact the...
CVE-2023-3605
A vulnerability was found in PHPGurukul Online Shopping Portal 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Registration Page. The manipulation leads to improper restriction of excessive authentication attempts. The attack can ...
CVE-2023-3605
PHPGurukul Online Shopping Portal 1.0 is affected in the Registration Page component, where inadequate restriction of excessive authentication attempts allows remote exploitation. The vulnerability arises from insufficient rate-limiting controls on login/registration flows, enabling an attacker t...
CVE-2023-35697
Improper Restriction of Excessive Authentication Attempts in the SICK ICR890-4 could allow a remote attacker to brute-force user credentials...
CVE-2023-35697
Improper Restriction of Excessive Authentication Attempts in the SICK ICR890-4 could allow a remote attacker to brute-force user credentials...
CVE-2023-35697
The CVE-2023-35697 refers to the SICK ICR890-4 track-and-trace device, with the root cause described as improper restriction of excessive authentication attempts, enabling a remote attacker to brute-force credentials. Publicly documented details indicate the vulnerability affects SICK ICR890-4 an...
PT-2023-25280 · Sick · Sick Icr890-4
Name of the Vulnerable Software and Affected Versions: SICK ICR890-4 affected versions not specified Description: The issue is related to improper restriction of excessive authentication attempts, which could allow a remote attacker to brute-force user credentials. Recommendations: At the moment,...
PiiGAB M-Bus
1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: PiiGAB, Processinformation i Göteborg Aktiebolag Equipment: M-Bus SoftwarePack 900S Vulnerabilities: Code Injection, Improper Restriction of Excessive Authentication Attempts, Unprotected Transport of...