765 matches found
CVE-2022-32515
Conext ComBox is affected by CWE-307 due to insufficient restriction of excessive authentication attempts on the admin login form. The vulnerability exists in all versions and could enable brute-force takeover of the admin account when rate limiting is not implemented. The connected sources confi...
CVE-2022-32517
A CWE-1021: Improper Restriction of Rendered UI Layers or Frames vulnerability exists that could cause an adversary to trick the interface user/admin into interacting with the application in an unintended way when the product does not implement restrictions on the ability to render within frames ...
Siemens Desigo PXC and DXR Devices Improper Restriction of Excessive Authentication Attempts (CVE-2022-24044)
A vulnerability has been identified in Desigo DXR2 All versions V01.21.142.5-22, Desigo PXC3 All versions V01.21.142.4-18, Desigo PXC4 All versions V02.20.142.10-10884, Desigo PXC5 All versions V02.20.142.10-10884. The login functionality of the application does not employ any countermeasures...
GHSA-H8R9-467R-VJJF pyLoad vulnerable to Improper Restriction of Rendered UI Layers or Frames
Improper Restriction of Rendered UI Layers or Frames in GitHub repository pyload/pyload prior to 0.5.0b3.dev33...
CVE-2023-0046
Improper Restriction of Names for Files and Other Resources in GitHub repository lirantal/daloradius prior to master-branch...
CVE-2023-0046 Improper Restriction of Names for Files and Other Resources in lirantal/daloradius
Improper Restriction of Names for Files and Other Resources in GitHub repository lirantal/daloradius prior to master-branch...
CVE-2023-0046 Improper Restriction of Names for Files and Other Resources in lirantal/daloradius
Improper Restriction of Names for Files and Other Resources in GitHub repository lirantal/daloradius prior to master-branch...
usememos/memos vulnerable Improper Restriction of Excessive Authentication Attempts
In usememos/memos 0.9.0 and prior, an attacker can delete other users' posts via post id, which can be done via brute force...
CVE-2022-4797
CVE-2022-4797 affects usememos/memos prior to v0.9.1. The root cause is improper restriction of excessive authentication attempts, enabling brute-force access to post deletion by guessing post IDs. Consequences include potential deletion of other users’ posts (high impact per linked advisories). ...
Rockwell Automation MicroLogix 1100 and 1400
1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Rockwell Automation Equipment: MicroLogix 1100 and 1400 Vulnerabilities: Cross-site Scripting, Improper Restriction of Rendered UI Layers or Frames 2. RISK EVALUATION Successful exploitation of these...
CVE-2022-2166
CVE-2022-2166 affects mastodon/mastodon versions prior to 4.0.0. The vulnerability is described as improper restriction of excessive authentication attempts, with a CVSS v3.1 base score of 9.8 (critical) affecting confidentiality, integrity, and availability. Concrete details in connected docs co...
CVE-2022-24937
Silicon Labs Ember ZNet (Zigbee stack) is affected by CVE-2022-24937, a vulnerability described as Improper Restriction of Operations within the Bounds of a Memory Buffer that can lead to buffer overflows. Connected sources indicate the issue impacts Ember ZNet up to version 7.0.0 or earlier (as ...
CVE-2022-3993 Improper Restriction of Excessive Authentication Attempts in kareadita/kavita
Improper Restriction of Excessive Authentication Attempts in GitHub repository kareadita/kavita prior to 0.6.0.3...
CVE-2022-38419 Adobe ColdFusion Solr Service XML External Entity Processing Arbitrary file system read
Adobe ColdFusion versions Update 14 and earlier and Update 4 and earlier are affected by an Improper Restriction of XML External Entity Reference 'XXE' vulnerability that could result in arbitrary file system read. Exploitation of this issue does not require user interaction...
Adobe ColdFusion Path Traversal Vulnerability (CNVD-2023-08751)
Adobe ColdFusion is a rapid application development platform from Adobe, which includes an integrated development environment and scripting language. The platform includes an integrated development environment and scripting language.Adobe ColdFusion contains a path traversal vulnerability, which...
Input validation
Improper restriction of broadcasting Intent in MouseNKeyHidDevice prior to SMR Oct-2022 Release 1 leaks MAC address of the connected Bluetooth device...
CVE-2022-36868
The issue in CVE-2022-36868 affects Samsung Mobile devices with the MouseNKeyHidDevice before SMR Oct-2022 Release 1. The root cause is an improper restriction of broadcasting an Intent, which leaks the MAC address of the connected Bluetooth device. Impact is limited to exposure of MAC address; n...
CVE-2022-36875
Improper restriction of broadcasting Intent in SaWebViewRelayActivity of?Waterplugin prior to version 2.2.11.22081151 allows attacker to access the file without permission...
CVE-2022-36873
The vulnerability CVE-2022-36873 concerns Waterplugin’s GalaxyStoreBridgePageLinker prior to version 2.2.11.22081151, where an improper restriction of broadcasting Intent leaks the MAC address of the connected Bluetooth device. Affected component: Waterplugin (GalaxyStoreBridgePageLinker). Root c...