CVE-2024-41682

A vulnerability has been identified in Location Intelligence family All versions V4.4. Affected products do not properly enforce restriction of excessive authentication attempts. This could allow an unauthenticated remote attacker to conduct brute force attacks against legitimate user passwords...

PT-2024-29624 · Unknown · Sinec Traffic Analyzer

Name of the Vulnerable Software and Affected Versions: SINEC Traffic Analyzer versions prior to V2.0 Description: A vulnerability has been identified in the SINEC Traffic Analyzer where the affected application does not properly enforce restrictions on excessive authentication attempts. This coul...

Siemens Location Intelligence

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

Siemens SINEC Traffic Analyzer

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

PT-2024-6009 · Adobe · Commerce

Name of the Vulnerable Software and Affected Versions: Adobe Commerce versions 2.4.7-p1 through 2.4.4-p9 and earlier Description: The issue is related to an Improper Restriction of Excessive Authentication Attempts, which could result in a security feature bypass. An attacker could exploit this t...

The vulnerability of the GroupMe mobile messaging app, related to insufficient limits on authentication attempts, allows a hacker to elevate their privileges.

The vulnerability of the GroupMe mobile messaging app relates to insufficient restrictions on authentication attempts. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

CVE-2024-38888

An issue in Horizon Business Services Inc. Caterease 16.0.1.1663 through 24.0.1.2405 and possibly later versions, allows a local attacker to perform a Password Brute Forcing attack due to improper restriction of excessive authentication attempts...

CVE-2024-38888

An issue in Horizon Business Services Inc. Caterease 16.0.1.1663 through 24.0.1.2405 and possibly later versions, allows a local attacker to perform a Password Brute Forcing attack due to improper restriction of excessive authentication attempts...

CVE-2024-38888

CVE-2024-38888 affects Horizon Business Services Inc. Caterease versions 16.0.1.1663 through 24.0.1.2405, where a flaw in restricting excessive authentication attempts enables a local attacker to perform a password brute force. The linked data records a CVSS v3.1 base score of 6.8 (Medium): Attac...

CVE-2024-38176

An improper restriction of excessive authentication attempts in GroupMe allows a unauthenticated attacker to elevate privileges over a network...

Microsoft GroupMe 安全漏洞

Microsoft GroupMe is a confidential group text messaging service from Microsoft USA. Users can group chat and manage text messages via SMS or client on their cell phones. A security vulnerability exists in Microsoft GroupMe that stems from improper restrictions on excessive authentication attempt...

The vulnerability of the SCADA system MasterSCADA 4D, related to insufficient restrictions on authentication attempts, allows a perpetrator to carry out an attack using brute-force methods.

The vulnerability of the SCADA system MasterSCADA 4D is related to insufficient restrictions on authentication attempts. Exploiting this vulnerability allows a malicious actor to carry out an attack using brute-force methods...

The vulnerability of Juniper Networks’ Junos OS Evolved operating system, related to insufficient restrictions on authentication attempts, allows a perpetrator to trigger a service failure.

The vulnerability of Juniper Networks’ Junos OS Evolved operating system is related to insufficient restrictions on authentication attempts. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the SCADA system “ENTEK,” which stems from insufficient restrictions on authentication attempts, allows attackers to carry out attacks using brute-force methods.

The vulnerability of the SCADA system “ENTEK” is related to insufficient restrictions on authentication attempts. Exploiting this vulnerability allows a malicious actor to carry out an attack using brute-force methods...

The vulnerability of the “Updates Service” software, which allows a hacker to gain access to read local files.

The vulnerability of the “Updates Service” software’s web request handler lies in the lack of limits on authentication attempts. Exploiting this vulnerability can allow a malicious actor to gain read access to local files...

The vulnerability of the “Project-SmartPRO” software lies in the lack of restrictions on the number of authentication attempts. This allows a perpetrator to carry out a brute-force attack.

The vulnerability of the “Project-SmartPRO” software is related to the absence of restrictions on the number of authentication attempts. Exploiting this vulnerability allows a remote attacker to carry out an attack using brute-force methods...

CVE-2024-5862 User Enumeration in Mia Technology's Mia-Med Health Aplication

Improper Restriction of Excessive Authentication Attempts vulnerability in Mia Technology Inc. Mia-Med Health Aplication allows Interface Manipulation. This issue affects Mia-Med Health Aplication: before 1.0.14...

Mia Technology MIA-MED Security Vulnerability

Mia Technology MIA-MED is a hospital management system from Mia Technology. A security vulnerability exists in Mia Technology MIA-MED versions prior to 1.0.14 that stems from an improper restriction of excessive authentication attempts...

PT-2024-5480 · Microsoft · Groupme

Name of the Vulnerable Software and Affected Versions: GroupMe affected versions not specified Description: The issue is related to insufficient restriction of excessive authentication attempts in GroupMe, allowing a remote, unauthenticated attacker to elevate privileges over a network...

Logsign Unified SecOps Platform Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on affected installations of Logsign Unified SecOps Platform. Authentication is not required to exploit this vulnerability. The specific flaw exists within the password reset mechanism. The issue results from the lack of...