901 matches found
PT-2022-24062 · Maarch Rm · Maarch Rm
Name of the Vulnerable Software and Affected Versions: Maarch RM version 2.8.3 Description: The issue is related to an improper restriction of excessive authentication attempts due to excessive verbose responses from the application. This could allow an unauthenticated remote attacker to...
CVE-2022-37772
Maarch RM 2.8.3 solution contains an improper restriction of excessive authentication attempts due to excessive verbose responses from the application. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to compromised accounts...
CVE-2022-2166
Improper Restriction of Excessive Authentication Attempts in GitHub repository mastodon/mastodon prior to 4.0.0...
PT-2022-15014 · Mastodon · Mastodon
Name of the Vulnerable Software and Affected Versions: Mastodon versions prior to 4.0.0 Description: The issue is related to improper restriction of excessive authentication attempts. Recommendations: For versions prior to 4.0.0, update to version 4.0.0 or later to resolve the issue...
CVE-2022-2166 Improper Restriction of Excessive Authentication Attempts in mastodon/mastodon
Improper Restriction of Excessive Authentication Attempts in GitHub repository mastodon/mastodon prior to 4.0.0...
Mastodon 安全漏洞
Mastodon is an open source social networking server based on ActivityPub. A security vulnerability exists in Mastodon versions prior to 4.0.0, which stems from an improper restriction on excessive authentication attempts...
CVE-2022-2166
CVE-2022-2166 affects mastodon/mastodon versions prior to 4.0.0. The vulnerability is described as improper restriction of excessive authentication attempts, with a CVSS v3.1 base score of 9.8 (critical) affecting confidentiality, integrity, and availability. Concrete details in connected docs co...
CVE-2022-4006 WBCE CMS Header class.login.php increase_attempts excessive authentication
A vulnerability, which was classified as problematic, has been found in WBCE CMS. Affected by this issue is the function increaseattempts of the file wbce/framework/class.login.php of the component Header Handler. The manipulation of the argument X-Forwarded-For leads to improper restriction of...
WBCE CMS 安全漏洞
WBCE CMS is an open source content management system CMS based on PHP and MySQL. WBCE CMS suffers from an Access Control Error vulnerability that stems from the increaseattempts function in the wbce/framework/class.login.php file in its Header Handler component not appropriately restricting too...
CVE-2022-4006 WBCE CMS Header class.login.php increase_attempts excessive authentication
A vulnerability, which was classified as problematic, has been found in WBCE CMS. Affected by this issue is the function increaseattempts of the file wbce/framework/class.login.php of the component Header Handler. The manipulation of the argument X-Forwarded-For leads to improper restriction of...
CVE-2022-4006
WBCE CMS (Header Handler) contains a vulnerability in the increase_attempts function of wbce/framework/class.login.php where manipulating X-Forwarded-For leads to insufficiently restricting excessive authentication attempts. This is a remote-auth related issue, with impact described as improper r...
PT-2022-25125 · Kareadita · Kavita
Name of the Vulnerable Software and Affected Versions: kareadita/kavita versions prior to 0.6.0.3 Description: The issue is related to improper restriction of excessive authentication attempts, which can lead to authentication bypass. This allows attackers to exploit the weakness in the...
CVE-2022-3993 Improper Restriction of Excessive Authentication Attempts in kareadita/kavita
Improper Restriction of Excessive Authentication Attempts in GitHub repository kareadita/kavita prior to 0.6.0.3...
CVE-2022-3945 Improper Restriction of Excessive Authentication Attempts in kareadita/kavita
Improper Restriction of Excessive Authentication Attempts in GitHub repository kareadita/kavita prior to 0.6.0.3...
CVE-2022-3945 Improper Restriction of Excessive Authentication Attempts in kareadita/kavita
Improper Restriction of Excessive Authentication Attempts in GitHub repository kareadita/kavita prior to 0.6.0.3...
kavita 安全漏洞
kavita is a fast, feature-rich, cross-platform reading server. A security vulnerability exists in versions prior to kavita 0.6.0.3 that stems from improperly restricted authentication attempts...
PT-2022-6266 · Netbotz 4 · Netbotz 4
Name of the Vulnerable Software and Affected Versions: NetBotz 4 versions 4.7.0 and prior Description: The issue is related to insufficient restriction of authentication attempts, allowing a remote attacker to bypass security restrictions using a brute force attack. This could lead to account...
CVE-2022-44023
PwnDoc through 0.5.3 might allow remote attackers to identify disabled user account names by leveraging response messages for authentication attempts...