CVE-2023-40763

User enumeration is found in PHPJabbers Taxi Booking Script v2.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users...

CVE-2023-40759

The CVE-2023-40759 issue affects PHP Jabbers Restaurant Booking Script v3.0. It exposes a user-enumeration flaw during password recovery: differing responses reveal whether a username exists, enabling brute-force attempts with valid users. The vulnerability lies in the authentication/forgot-passw...

CVE-2023-40762

User enumeration is found in PHPJabbers Fundraising Script v1.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users...

CVE-2023-40767

CVE-2023-40767 affects PHPJabbers Make an Offer Widget v1.0. The issue is user enumeration during password recovery: messages differ between valid and invalid usernames, enabling brute-forcing with valid users. Base CVSS 3.1: 9.8 (Network, High impact on confidentiality, integrity, availability)....

CVE-2023-40761

CVE-2023-40761 affects PHPJabbers Yacht Listing Script v2.0, where a password-recovery message difference allows user enumeration. An attacker could determine if a username exists, enabling brute-force attempts with valid users. The issue is documented across multiple sources (e.g., Red Hat, NVD/...

CVE-2023-40757

The CVE-2023-40757 entry concerns PHPJabbers Food Delivery Script v3.1. The vulnerability is a user-enumeration flaw in the password-recovery flow: an attacker can distinguish between valid and invalid usernames based on response messages, enabling brute-forcing valid user accounts. Affected soft...

CVE-2023-40762

User enumeration is found in PHPJabbers Fundraising Script v1.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users...

CVE-2023-40765

User enumeration is found in PHPJabbers Event Booking Calendar v4.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users...

CVE-2023-40758

CVE-2023-40758 affects PHPJabbers Document Creator v1.0. The issue is a user-enumeration vulnerability during the password-recovery process caused by differing response messages that let an attacker determine whether a given username exists, enabling targeted brute-forcing with valid users. The a...

IBM Security Guardium Data Encryption 安全漏洞

IBM Security Guardium Data Encryption is a software from International Business Machines IBM that is used to secure sensitive data within an organization. The software protects assets located in cloud, virtual, big data and physical environments by controlling access to databases, files,...

PT-2023-20580 · Ibm · Ibm Security Guardium Data Encryption

Name of the Vulnerable Software and Affected Versions: IBM Security Guardium Data Encryption version 1.10.3 Description: The issue is related to an inadequate account lockout setting in IBM Security Guardium Data Encryption, which could allow a remote attacker to brute force account credentials...

CVE-2023-40707

There are no requirements for setting a complex password in the built-in web server of the SNAP PAC S1 Firmware version R10.3b, which could allow for a successful brute force attack if users don't set up complex credentials...

CVE-2023-40707

There are no requirements for setting a complex password in the built-in web server of the SNAP PAC S1 Firmware version R10.3b, which could allow for a successful brute force attack if users don't set up complex credentials...

CVE-2023-40706

There is no limit on the number of login attempts in the web server for the SNAP PAC S1 Firmware version R10.3b. This could allow for a brute-force attack on the built-in web server login...

Design/Logic Flaw

There is no limit on the number of login attempts in the web server for the SNAP PAC S1 Firmware version R10.3b. This could allow for a brute-force attack on the built-in web server login...

Design/Logic Flaw

There are no requirements for setting a complex password in the built-in web server of the SNAP PAC S1 Firmware version R10.3b, which could allow for a successful brute force attack if users don't set up complex credentials...

CVE-2023-40707

CVE-2023-40707 affects OPTO 22 SNAP PAC S1 built-in web server in firmware version R10.3b, due to WEAK PASSWORD REQUIREMENTS (no complex-password enforcement). The Red Hat and NVD entries corroborate a brute-force risk (NETWORK, low attack complexity) when credentials are not strong. Documented m...

CVE-2023-40707 Weak password requirements in OPTO 22 SNAP PAC S1 Built-in Web Server

There are no requirements for setting a complex password in the built-in web server of the SNAP PAC S1 Firmware version R10.3b, which could allow for a successful brute force attack if users don't set up complex credentials...

CVE-2023-40706

CVE-2023-40706 affects the SNAP PAC S1 built-in web server (Firmware R10.3b). The root issue is no limit on login attempts, enabling brute-force login attempts via the web interface (remote access, low attack complexity). Impact described across sources includes high confidentiality and integrity...

CVE-2023-40706 Improper Restriction of Excessive Authentication Attempts in OPTO 22 SNAP PAC S1 Built-in Web Server

There is no limit on the number of login attempts in the web server for the SNAP PAC S1 Firmware version R10.3b. This could allow for a brute-force attack on the built-in web server login...