Lucene search
+L

122 matches found

NVD
NVD
•added 2023/01/23 9:15 p.m.•29 views

CVE-2023-22960

Lexmark products through 2023-01-10 have Improper Control of Interaction Frequency...

7.5CVSS7.6AI score0.27766EPSS
SaveExploits1References1
OSV
OSV
•added 2023/01/23 9:15 p.m.•23 views

CVE-2023-22960

Lexmark products through 2023-01-10 have Improper Control of Interaction Frequency...

7.5CVSS5.8AI score0.27766EPSS
SaveExploits1References1
Prion
Prion
•added 2023/01/23 9:15 p.m.•29 views

Design/Logic Flaw

Lexmark products through 2023-01-10 have Improper Control of Interaction Frequency...

5CVSS7.6AI score0.27766EPSS
SaveExploits1References1Affected Software128
CVE
CVE
•added 2023/01/23 12:00 a.m.•141 views

CVE-2023-22960

CVE-2023-22960 : Lexmark printer firmware prior to 2023-01-10 is affected by Improper Control of Interaction Frequency, enabling bypass of login brute-force protections. Connected sources indicate exploitation involves the Embedded Web Server interface; impact is limited to authentication bypass ...

7.5CVSS7.5AI score0.27766EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
•added 2023/01/23 12:00 a.m.•3 views

PT-2023-18802

Name of the Vulnerable Software and Affected Versions Lexmark products through 2023-01-10 Description The issue is related to Improper Control of Interaction Frequency in Lexmark products. It affects the built-in web server interface of more than 60 Lexmark printer models, specifically concerning...

7.5CVSS0.27766EPSS
SaveExploits1References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/23 12:00 a.m.•5 views

CVE-2023-22960: Improper Restriction of Excessive Authentication Attempts

Lexmark products through 2023-01-10 have Improper Control of Interaction Frequency...

7.5CVSS5.7AI score0.27766EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2023/01/23 12:00 a.m.•20 views

Lexmark 安全漏洞

Lexmark is a line of printers in the United States. A security vulnerability exists in Lexmark products version 2023-01-10 and prior versions, which stems from improper control of interaction frequency...

7.5CVSS7.3AI score0.27766EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2023/01/23 12:00 a.m.•50 views

CVE-2023-22960

Lexmark products through 2023-01-10 have Improper Control of Interaction Frequency...

7.8AI score0.27766EPSS
SaveExploits1References1
OSV
OSV
•added 2022/06/09 4:15 p.m.•16 views

CVE-2022-0823

An improper control of interaction frequency vulnerability in Zyxel GS1200 series switches could allow a local attacker to guess the password by using a timing side-channel attack...

6.2CVSS5.8AI score0.00231EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2022/06/09 4:15 p.m.•13 views

CVE-2022-0823

An improper control of interaction frequency vulnerability in Zyxel GS1200 series switches could allow a local attacker to guess the password by using a timing side-channel attack...

6.2CVSS6.7AI score0.00231EPSS
SaveExploits0References2
Prion
Prion
•added 2022/06/09 4:15 p.m.•40 views

Information disclosure

An improper control of interaction frequency vulnerability in Zyxel GS1200 series switches could allow a local attacker to guess the password by using a timing side-channel attack...

2.1CVSS6.3AI score0.00231EPSS
SaveExploits0References1Affected Software4
CNNVD
CNNVD
•added 2022/06/08 12:00 a.m.•16 views

Zyxel GS1200 安全漏洞

The Zyxel GS1200 is a series of switches from China-based Hopkins Technology Zyxel. A security vulnerability exists in the Zyxel GS1200 series of switches that stems from an improperly controlled interaction frequency vulnerability. A local attacker can exploit the vulnerability to guess password...

6.2CVSS6.7AI score0.00231EPSS
SaveExploits0References3
NVD
NVD
•added 2021/11/12 2:15 a.m.•47 views

CVE-2021-37910

ASUS routers Wi-Fi protected access protocol WPA2 and WPA3-SAE has improper control of Interaction frequency vulnerability, an unauthenticated attacker can remotely disconnect other users' connections by sending specially crafted SAE authentication frames...

5.3CVSS0.02099EPSS
SaveExploits0References1
Prion
Prion
•added 2021/11/12 2:15 a.m.•40 views

Design/Logic Flaw

ASUS routers Wi-Fi protected access protocol WPA2 and WPA3-SAE has improper control of Interaction frequency vulnerability, an unauthenticated attacker can remotely disconnect other users' connections by sending specially crafted SAE authentication frames...

5CVSS6.3AI score0.02099EPSS
SaveExploits0References1Affected Software5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/12 12:00 a.m.•2 views

CVE-2021-37910: Improper Control of Interaction Frequency

ASUS routers Wi-Fi protected access protocol WPA2 and WPA3-SAE has improper control of Interaction frequency vulnerability, an unauthenticated attacker can remotely disconnect other users' connections by sending specially crafted SAE authentication frames...

5.3CVSS5.8AI score0.02099EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/10/25 12:00 a.m.•4 views

CVE-2021-41177: Improper Control of Interaction Frequency

Nextcloud is an open-source, self-hosted productivity platform. Prior to versions 20.0.13, 21.0.5, and 22.2.0, Nextcloud Server did not implement a database backend for rate-limiting purposes. Any component of Nextcloud using rate-limits as as AnonRateThrottle or UserRateThrottle was thus not rat...

8.1CVSS5.7AI score0.0155EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/07/12 12:00 a.m.•4 views

CVE-2021-32741: Improper Control of Interaction Frequency

Nextcloud Server is a Nextcloud package that handles data storage. In versions prior to 19.0.13, 20.011, and 21.0.3, there was a lack of ratelimiting on the public share link mount endpoint. This may have allowed an attacker to enumerate potentially valid share tokens. The issue was fixed in...

5.3CVSS5.8AI score0.01322EPSS
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins
•added 2019/05/08 3:31 p.m.•71 views

IBM Security Key Lifecycle Manager: All Security Bulletins

Summary This page lists all the security bulletins that are released for IBM Security Key Lifecycle Manager. Vulnerability Details Security Bulletin: IBM Security Key Lifecycle Manager stores unencrypted password CVE-2016-6092 --- Security Bulletin: IBM Security Key Lifecycle Manager uses Less...

9.8CVSS6.2AI score0.9986EPSS
SaveExploits1
Github Security Blog
Github Security Blog
•added 2018/11/06 11:16 p.m.•50 views

Improper Control of Interaction Frequency in Apache syncope-core

A malicious user with enough administration entitlements can inject html-like elements containing JavaScript statements into Connector names, Report names, AnyTypeClass keys and Policy descriptions. When another user with enough administration entitlements edits one of the Entities above via Admi...

5.4CVSS2.2AI score0.01204EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2018/11/06 11:16 p.m.•25 views

GHSA-9H9C-F287-C6VP Improper Control of Interaction Frequency in Apache syncope-core

A malicious user with enough administration entitlements can inject html-like elements containing JavaScript statements into Connector names, Report names, AnyTypeClass keys and Policy descriptions. When another user with enough administration entitlements edits one of the Entities above via Admi...

5.4CVSS5.5AI score0.01204EPSS
SaveExploits0References3
Rows per page
Query Builder