23 matches found
EUVD-2018-0632
Malware in sbrugna...
EUVD-2023-24347
Malicious code in bioql PyPI...
SolaX Cloud 安全漏洞
SolaX Cloud is a PV monitoring and management platform from SolaX China. A security vulnerability exists in SolaX Cloud that stems from a bypass of the Forgot Password feature, which could lead to an authentication attempt limit bypass...
Unsecured Authentication Attempt Detected (Medium)
A server allow for authentication using credentials in an unencrypted manner over unencrypted channel. Such credentials might be revealed to an attacker intercepting this traffic and used to gain access to data on the server. This plugin only works with Tenable.ot. Please visit...
Unsecured Authentication Attempt Detected (Critical)
A server allow for authentication using credentials in an unencrypted manner over unencrypted channel. Such credentials might be revealed to an attacker intercepting this traffic and used to gain access to data on the server. This plugin only works with Tenable.ot. Please visit...
Unsecured Authentication Attempt Detected (Low)
A server allow for authentication using credentials in an unencrypted manner over unencrypted channel. Such credentials might be revealed to an attacker intercepting this traffic and used to gain access to data on the server. This plugin only works with Tenable.ot. Please visit...
Unsecured Authentication Attempt Detected (High)
A server allow for authentication using credentials in an unencrypted manner over unencrypted channel. Such credentials might be revealed to an attacker intercepting this traffic and used to gain access to data on the server. This plugin only works with Tenable.ot. Please visit...
PT-2024-4725 · Unknown · Проект-Смартпро
Name of the Vulnerable Software and Affected Versions: Проект-СмартПРО affected versions not specified Description: The issue is related to the lack of authentication attempt restrictions in the software. This could allow a remote attacker to perform a brute force attack. Recommendations: At the...
PT-2024-10342 · Fortinet · Forticlientems
Name of the Vulnerable Software and Affected Versions: FortiClientEMS versions 7.2.0 through 7.2.4 FortiClientEMS versions prior to 7.0.10 Description: The issue is related to an improper restriction of excessive authentication attempts, which may allow an unauthenticated attacker to perform a...
CVE-2023-5455
A Cross-site request forgery vulnerability exists in ipa/session/loginpassword in all supported versions of IPA. This flaw allows an attacker to trick the user into submitting a request that could perform actions as the user, resulting in a loss of confidentiality and system integrity. During...
Can't complete your request with SAML enabled in a Single Domain
Can't complete your request when logon Netscaler Gateway using UPN name with SAML enabled. On Storefront event log, we can see "An authentication attempt was made for user: [email protected] with realm context resulting in: Failed -1073741715" In Storefront Verbose log, we can see...
Error "Try again after some time or contact your help desk" after authentication passed
After inputting your username and password to "https://x.x.x.x/manageotp" page, you are encountering an error message that says, "Try again after some time or contact your help desk " "Rejecting with error code 4009 “， ”receiveldapusersearchevent:ldapfirstentryreturned null, user XXX not found “...
Schneider Electric Conext ComBox 安全漏洞
Schneider Electric Conext ComBox is a powerful communication and monitoring device from Schneider Electric, a French company. A security vulnerability exists in all versions of the Schneider Electric Conext ComBox that stems from an incorrect limit on the number of authentication attempts that...
CVE-2021-28248
CA eHealth Performance Manager up to version 6.3.2.12 suffers from Improper Restriction of Excessive Authentication Attempts via the /web/frames/ endpoint, allowing an attacker to attempt many passwords and potentially access a targeted account. The maintainer no longer supports this product, and...
GHSA-XM8R-5WH6-F46F Timing attack
While each ID is used for only one authentication attempt, a timing attack is possible to figure out in Autobahn...
Session fixation
Symantec Reporter 9.5 prior to 9.5.4.1 and 10.1 prior to 10.1.5.5 does not restrict excessive authentication attempts for management interface users. A remote attacker can use brute force search to guess a user password and gain access to Reporter...
CVE-2016-3094
PlainSaslServer.java in Apache Qpid Java before 6.0.3, when the broker is configured to allow plaintext passwords, allows remote attackers to cause a denial of service broker termination via a crafted authentication attempt, which triggers an uncaught exception...
Error: "There are no apps available at this time. Please check the server and try again"
Consider the following scenario. There are two sites IN GSLB- production and disaster recovery. Production is already working with the StoreFront integration behind it. Customer wanted to test the disaster recovery site using the same URL that resolves to the NetScaler Gateway VIP, creating the...
CVE-2016-1295
CVE-2016-1295 affects Cisco ASA Software 8.4. An unauthenticated, remote attacker can disclose sensitive data during a Cisco AnyConnect client authentication attempt, including the ASA software version. The underlying issue is improper protection of sensitive data during the authentication proces...
Amazon Linux AMI : php (ALAS-2012-95)
Integer overflow in the pharparsetarfile function in tar.c in the phar extension in PHP before 5.3.14 and 5.4.x before 5.4.4 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted tar file that triggers a heap-based buffer overflow...