Input validation

Improper Restriction of Excessive Authentication Attempts in GitHub repository answerdev/answer prior to 1.0.6...

CVE-2023-1539

CVE-2023-1539 affects the GitHub repository answerdev/answer : versions prior to 1.0.6 have an improper restriction of excessive authentication attempts and a guessable CAPTCHA. Root cause: insufficient controls on repeated authentication attempts (exact technical details not expanded beyond what...

CVE-2023-1539 Improper Restriction of Excessive Authentication Attempts in answerdev/answer

Improper Restriction of Excessive Authentication Attempts in GitHub repository answerdev/answer prior to 1.0.6...

CVE-2023-1539 Improper Restriction of Excessive Authentication Attempts in answerdev/answer

Improper Restriction of Excessive Authentication Attempts in GitHub repository answerdev/answer prior to 1.0.6...

The vulnerability of the FortiAuthenticator identification system lies in its insufficient limit on authentication attempts, allowing attackers to trigger a service denial.

The vulnerability of the FortiAuthenticator identification system is related to insufficient restrictions on authentication attempts. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures by sending specially crafted HTTP requests...

Fortinet FortiMail Access Control Error Vulnerability (CNVD-2023-30849)

Fortinet FortiMail is a set of e-mail security gateway products of the U.S. Fita Fortinet. The product provides e-mail security and data protection features. An Access Control Error vulnerability exists in Fortinet FortiMail that stems from the system improperly limiting excessive authentication...

SonicWall SonicOS Security Misconfiguration (SNWLID-2023-0005)

According to its self-reported version, the remote SonicWall firewall is running a version of SonicOS that is affected by a security misconfiguration vulnerability, due to improper restriction of excessive MFA attempts in the SonicOS SSLVPN interface, which may allow a remote authenticated attack...

CVE-2023-26209

A improper restriction of excessive authentication attempts vulnerability CWE-307 in Fortinet FortiDeceptor 3.1.x and before allows a remote unauthenticated attacker to partially exhaust CPU and memory via sending numerous HTTP requests to the login form...

CVE-2022-29056

A improper restriction of excessive authentication attempts vulnerability CWE-307 in Fortinet FortiMail version 6.4.0, version 6.2.0 through 6.2.4 and before 6.0.9 allows a remote unauthenticated attacker to partially exhaust CPU and memory via sending numerous HTTP requests to the login form...

Authentication flaw

A improper restriction of excessive authentication attempts vulnerability CWE-307 in Fortinet FortiDeceptor 3.1.x and before allows a remote unauthenticated attacker to partially exhaust CPU and memory via sending numerous HTTP requests to the login form...

CVE-2022-29056

A improper restriction of excessive authentication attempts vulnerability CWE-307 in Fortinet FortiMail version 6.4.0, version 6.2.0 through 6.2.4 and before 6.0.9 allows a remote unauthenticated attacker to partially exhaust CPU and memory via sending numerous HTTP requests to the login form...

CVE-2022-29056

A improper restriction of excessive authentication attempts vulnerability CWE-307 in Fortinet FortiMail version 6.4.0, version 6.2.0 through 6.2.4 and before 6.0.9 allows a remote unauthenticated attacker to partially exhaust CPU and memory via sending numerous HTTP requests to the login form...

Fortinet FortiMail 安全漏洞

Fortinet FortiMail is a set of e-mail security gateway products of the U.S. Fita Fortinet. The product provides e-mail security and data protection features. An Access Control Error vulnerability exists in Fortinet FortiMail that stems from the system improperly limiting excessive authentication...

PT-2023-1877 · Fortinet · Fortimail

Name of the Vulnerable Software and Affected Versions: FortiMail versions 6.2.0 through 6.2.4 FortiMail version 6.4.0 FortiMail versions prior to 6.0.9 Description: The issue is related to an improper restriction of excessive authentication attempts, allowing a remote unauthenticated attacker to...

PT-2023-1735 · Fortinet · Fortideceptor

Name of the Vulnerable Software and Affected Versions: Fortinet FortiDeceptor versions 3.1.x and earlier Description: The issue is related to insufficient restriction of excessive authentication attempts, allowing a remote attacker to cause a denial of service by sending specially crafted HTTP...

PT-2023-1736 · Fortinet · Fortiauthenticator

Name of the Vulnerable Software and Affected Versions: Fortinet FortiAuthenticator versions 6.4.x and earlier Description: The issue is related to an improper restriction of excessive authentication attempts, allowing a remote unauthenticated attacker to partially exhaust CPU and memory by sendin...

CVE-2023-1101

SonicOS SSLVPN improper restriction of excessive MFA attempts vulnerability allows an authenticated attacker to use excessive MFA codes...

CVE-2023-1101

SonicOS SSLVPN improper restriction of excessive MFA attempts vulnerability allows an authenticated attacker to use excessive MFA codes...

Design/Logic Flaw

SonicOS SSLVPN improper restriction of excessive MFA attempts vulnerability allows an authenticated attacker to use excessive MFA codes...

SonicOS SSLVPN Improper Restriction of Excessive MFA Attempts Vulnerability

SonicOS SSLVPN improper restriction of excessive MFA attempts vulnerability allows an authenticated attacker to use excessive MFA codes. CVE: CVE-2023-1101 Last updated: March 28, 2023, 11:32 a.m...