1316 matches found
CVE-2021-41657: Improper Restriction of Rendered UI Layers or Frames
SmartBear CodeCollaborator v6.1.6102 was discovered to contain a vulnerability in the web UI which would allow an attacker to conduct a clickjacking attack...
CVE-2022-26314: Improper Restriction of Excessive Authentication Attempts
A vulnerability has been identified in Mendix Forgot Password Appstore module All versions = V3.3.0 V3.5.1, Mendix Forgot Password Appstore module Mendix 7 compatible All versions V3.2.2. Initial passwords are generated in an insecure manner. This could allow an unauthenticated remote attacker to...
CVE-2022-0839: Improper Restriction of XML External Entity Reference
Improper Restriction of XML External Entity Reference in GitHub repository liquibase/liquibase prior to 4.8.0...
CVE-2022-22810
CVE-2022-22810 is a CWE-307 vulnerability affecting Schneider Electric products SpaceLYnk (v2.6.2 and earlier), Wiser for KNX (formerly homeLYnk, v2.6.2 and earlier), and fellerLYnk (v2.6.2 and earlier). The issue is an improper restriction of excessive authentication attempts, enabling an attack...
CVE-2022-21205
Improper restriction of XML external entity reference in DSP Builder Pro for IntelR QuartusR Prime Pro Edition before version 21.3 may allow an unauthenticated user to potentially enable information disclosure via network access...
CVE-2022-22807
A CWE-1021 Improper Restriction of Rendered UI Layers or Frames vulnerability exists that could cause unintended modifications of the product settings or user accounts when deceiving the user to use the web interface rendered within iframes. Affected Product: EcoStruxure EV Charging Expert former...
CVE-2022-22810: Improper Restriction of Excessive Authentication Attempts
A CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that could allow an attacker to manipulate the admin after numerous attempts at guessing credentials. Affected Product: spaceLYnk V2.6.2 and prior, Wiser for KNX formerly homeLYnk V2.6.2 and prior, fellerLYn...
Siemens SIMATIC Improper Restriction of Operations within the Bounds of a Memory Buffer (CVE-2012-3017)
Siemens SIMATIC S7-400 PN CPU devices with firmware 5.x allow remote attackers to cause a denial of service defect-mode transition and service outage via 1 malformed HTTP traffic or 2 malformed IP packets. This plugin only works with Tenable.ot. Please visit...
CVE-2021-46660: Improper Restriction of XML External Entity Reference
Signiant Manager+Agents before 15.1 allows XML External Entity XXE attacks...
CVE-2021-22819
The CVE-2021-22819 entry describes a CWE-1021 vulnerability in Schneider Electric EVlink products where UI rendered in iframes can lead to unintended modification of product settings or user accounts when a user is deceived into interacting with the embedded interface. Affected are EVlink City (E...
CVE-2021-22818
The vulnerability CVE-2021-22818 affects Schneider Electric EVlink charging solutions: EVlink City EVC1S22P4/EVC1S7P4, EVlink Parking EVW2/EVF2/EVP2PE, and EVlink Smart Wallbox EVB1A, all versions prior to R8 V3.4.0.2. Root cause: CWE-307 Improper Restriction of Excessive Authentication Attempts,...
CVE-2021-22819
A CWE-1021 Improper Restriction of Rendered UI Layers or Frames vulnerability exists that could cause unintended modifications of the product settings or user accounts when deceiving the user to use the web interface rendered within iframes. Affected Products: EVlink City EVC1S22P4 / EVC1S7P4 All...
Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Apple Safari
Awesome Web Security 🐶 Curated list of Web Security materials and resources. Needless to say, most websites suffer from various types of bugs which may eventually lead to vulnerabilities. Why would this happen so often? There can be many factors involved including misconfiguration, shortage of...
GHSA-75VW-3M5V-FPRH corenlp is vulnerable to Improper Restriction of XML External Entity Reference
corenlp is vulnerable to Improper Restriction of XML External Entity Reference...
CVE-2022-22553
Dell EMC AppSync versions 3.9 to 4.3 contain an Improper Restriction of Excessive Authentication Attempts Vulnerability that can be exploited from UI and CLI. An adjacent unauthenticated attacker could potentially exploit this vulnerability, leading to password brute-forcing. Account takeover is...
CVE-2022-22553
Dell EMC AppSync versions 3.9–4.3 are affected by an Improper Restriction of Excessive Authentication Attempts vulnerability. An adjacent unauthenticated attacker could brute-force passwords via UI/CLI, potentially leading to account takeover if weak passwords are used. No remediation or fixed ve...
CVE-2022-22553: Improper Restriction of Excessive Authentication Attempts
Dell EMC AppSync versions 3.9 to 4.3 contain an Improper Restriction of Excessive Authentication Attempts Vulnerability that can be exploited from UI and CLI. An adjacent unauthenticated attacker could potentially exploit this vulnerability, leading to password brute-forcing. Account takeover is...
CVE-2022-0239
corenlp is vulnerable to Improper Restriction of XML External Entity Reference...
CVE-2022-0239
The CVE-2022-0239 entry pertains to Stanford CoreNLP (corenlp) with an XML External Entity (XXE) processing flaw. Root cause: SchemaFactory is created without secure processing enabled and is used to validate XML against a schema, enabling XXE when processing malicious XML. Impact (per public rec...