122 matches found
CVE-2023-22960
Lexmark products through 2023-01-10 have Improper Control of Interaction Frequency...
CVE-2023-22960
Lexmark products through 2023-01-10 have Improper Control of Interaction Frequency...
Design/Logic Flaw
Lexmark products through 2023-01-10 have Improper Control of Interaction Frequency...
CVE-2023-22960
CVE-2023-22960 : Lexmark printer firmware prior to 2023-01-10 is affected by Improper Control of Interaction Frequency, enabling bypass of login brute-force protections. Connected sources indicate exploitation involves the Embedded Web Server interface; impact is limited to authentication bypass ...
PT-2023-18802
Name of the Vulnerable Software and Affected Versions Lexmark products through 2023-01-10 Description The issue is related to Improper Control of Interaction Frequency in Lexmark products. It affects the built-in web server interface of more than 60 Lexmark printer models, specifically concerning...
CVE-2023-22960: Improper Restriction of Excessive Authentication Attempts
Lexmark products through 2023-01-10 have Improper Control of Interaction Frequency...
Lexmark 安全漏洞
Lexmark is a line of printers in the United States. A security vulnerability exists in Lexmark products version 2023-01-10 and prior versions, which stems from improper control of interaction frequency...
CVE-2023-22960
Lexmark products through 2023-01-10 have Improper Control of Interaction Frequency...
CVE-2022-0823
An improper control of interaction frequency vulnerability in Zyxel GS1200 series switches could allow a local attacker to guess the password by using a timing side-channel attack...
CVE-2022-0823
An improper control of interaction frequency vulnerability in Zyxel GS1200 series switches could allow a local attacker to guess the password by using a timing side-channel attack...
Information disclosure
An improper control of interaction frequency vulnerability in Zyxel GS1200 series switches could allow a local attacker to guess the password by using a timing side-channel attack...
Zyxel GS1200 安全漏洞
The Zyxel GS1200 is a series of switches from China-based Hopkins Technology Zyxel. A security vulnerability exists in the Zyxel GS1200 series of switches that stems from an improperly controlled interaction frequency vulnerability. A local attacker can exploit the vulnerability to guess password...
CVE-2021-37910
ASUS routers Wi-Fi protected access protocol WPA2 and WPA3-SAE has improper control of Interaction frequency vulnerability, an unauthenticated attacker can remotely disconnect other users' connections by sending specially crafted SAE authentication frames...
Design/Logic Flaw
ASUS routers Wi-Fi protected access protocol WPA2 and WPA3-SAE has improper control of Interaction frequency vulnerability, an unauthenticated attacker can remotely disconnect other users' connections by sending specially crafted SAE authentication frames...
CVE-2021-37910: Improper Control of Interaction Frequency
ASUS routers Wi-Fi protected access protocol WPA2 and WPA3-SAE has improper control of Interaction frequency vulnerability, an unauthenticated attacker can remotely disconnect other users' connections by sending specially crafted SAE authentication frames...
CVE-2021-41177: Improper Control of Interaction Frequency
Nextcloud is an open-source, self-hosted productivity platform. Prior to versions 20.0.13, 21.0.5, and 22.2.0, Nextcloud Server did not implement a database backend for rate-limiting purposes. Any component of Nextcloud using rate-limits as as AnonRateThrottle or UserRateThrottle was thus not rat...
CVE-2021-32741: Improper Control of Interaction Frequency
Nextcloud Server is a Nextcloud package that handles data storage. In versions prior to 19.0.13, 20.011, and 21.0.3, there was a lack of ratelimiting on the public share link mount endpoint. This may have allowed an attacker to enumerate potentially valid share tokens. The issue was fixed in...
IBM Security Key Lifecycle Manager: All Security Bulletins
Summary This page lists all the security bulletins that are released for IBM Security Key Lifecycle Manager. Vulnerability Details Security Bulletin: IBM Security Key Lifecycle Manager stores unencrypted password CVE-2016-6092 --- Security Bulletin: IBM Security Key Lifecycle Manager uses Less...
Improper Control of Interaction Frequency in Apache syncope-core
A malicious user with enough administration entitlements can inject html-like elements containing JavaScript statements into Connector names, Report names, AnyTypeClass keys and Policy descriptions. When another user with enough administration entitlements edits one of the Entities above via Admi...
GHSA-9H9C-F287-C6VP Improper Control of Interaction Frequency in Apache syncope-core
A malicious user with enough administration entitlements can inject html-like elements containing JavaScript statements into Connector names, Report names, AnyTypeClass keys and Policy descriptions. When another user with enough administration entitlements edits one of the Entities above via Admi...