CVE-2021-35223

The Serv-U File Server allows for events such as user login failures to be audited by executing a command. This command can be supplied with parameters that can take the form of user string variables, allowing remote code execution...

Remote code execution

The Serv-U File Server allows for events such as user login failures to be audited by executing a command. This command can be supplied with parameters that can take the form of user string variables, allowing remote code execution...

CVE-2021-27793

ntermittent authorization failure in aaa tacacs+ with Brocade Fabric OS versions before Brocade Fabric OS v9.0.1b and after 9.0.0, also in Brocade Fabric OS before Brocade Fabric OS v8.2.3a and after v8.2.0 could cause a user with a valid account to be unable to log into the switch...

"Http/1.1 Internal Server Error 43531" when accessing Citrix Gateway after upgrading to version 13.0

Users will get the error "Http/1.1 Internal Server Error 43531" The ns.log will give error as below: Dec 23 14:52:26 , aaainfo flags 11 flags2 0, new webview 0, sess flags2 0, flags3 0 flags4 400 ssoDomain , ssoUsername: , ssoUsername2: " Dec 23 14:52:26 XXX.XXX.X.XXX 12/23/2020:19:52:26 GMT...

Citrix Provisioning "The trust relationship between this workstation and the primary domain failed."

Windows 10 image loosing trust relationship to the domain after reboot. Machine account reset from PVS server succeeds however VM still gets the same error after reboot and can not login with domain account...

Soar Cloud System HR 安全漏洞

Soar Cloud System is a HR system solution system developed by Soar. Soar Cloud System HR Portal has an access control error that allows remote attackers to access sensitive data through specific packets e.g., user's login information while obtaining a user ID, thus preventing the login function...

Error: "Cannot complete your request" when login to the Storefront with SAML.

While login to the Storefront with SAML authentication getting "Cannot complete your request" Storefront error : Event ID 6 CitrixAGBasic single sign-on failed because the supplied domain: domain.com is invalid. This has two main causes, either; The single sign-on domain specified in the session...

keycloak: failedLogin Event not sent to BruteForceProtector when using Post Login Flow with Conditional-OTP

A flaw was found in keycloak. BruteForceProtector does not handle Conditional OTP Authentication Flow login failure events due to these events not being sent to the brute force protection event queue. The highest threat from this vulnerability is to data confidentiality and integrity as well as...

CVE-2020-13805

An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It has brute-force attack mishandling because the CAS service lacks a limit on login failures...

CVE-2020-13805

An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It has brute-force attack mishandling because the CAS service lacks a limit on login failures...

keycloak: failedLogin Event not sent to BruteForceProtector when using Post Login Flow with Conditional-OTP

A flaw was found in keycloak. BruteForceProtector does not handle Conditional OTP Authentication Flow login failure events due to these events not being sent to the brute force protection event queue. The highest threat from this vulnerability is to data confidentiality and integrity as well as...

Red Hat Keycloak Information Disclosure Vulnerability (CNVD-2020-20715)

Red Hat Keycloak is a suite of software from Red Hat, Inc. that provides authentication and management capabilities for modern applications and services. An information disclosure vulnerability exists in Red Hat keycloak versions prior to 9.0.1, which stems from the program's inability to send...

DEBIAN-CVE-2012-1101

systemd 37-1 does not properly handle non-existent services, which causes a denial of service failure of login procedure...

CVE-2012-1101

systemd 37-1 does not properly handle non-existent services, which causes a denial of service failure of login procedure...

Design/Logic Flaw

systemd 37-1 does not properly handle non-existent services, which causes a denial of service failure of login procedure...

Linux: FAILLOG_ENAB in /etc/login.defs

FAILLOGENAB variable enables logging and display of /var/log/faillog login failure info. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2016-11017

The application login page in AKIPS Network Monitor 15.37 through 16.5 allows a remote unauthenticated attacker to execute arbitrary OS commands via shell metacharacters in the username parameter a failed login attempt returns the command-injection output to a limited login failure field. This is...

Command injection

The application login page in AKIPS Network Monitor 15.37 through 16.5 allows a remote unauthenticated attacker to execute arbitrary OS commands via shell metacharacters in the username parameter a failed login attempt returns the command-injection output to a limited login failure field. This is...

CVE-2016-10791

cPanel before 60.0.15 does not ensure that system accounts lack a valid password, so that logins are impossible CPANEL-9559...

ADC AAA ReCaptcha fails with error at login page after upgrade or initial setup with "Error for site owner: Invalid Site Key"

Upgrade from 12.1.49.x to 50.x+ or 13.x re-captcha causes error at login page. Setup for ReCaptcha on 12.1.50.x + or 13.0.x causes error at login page. Error on login is "Error for site owner: Invalid Site Key" ns.log has error message - 0-PPE-2: default AAATM Message 16977 0: "nFactor: Could not...