Lucene search
+L

3181 matches found

CVE
CVE
•added 2025/04/18 12:00 a.m.•97 views

CVE-2024-53591

The Seclore secure data sharing software (version v3.27.5.0 ) contains a vulnerability in its login page that allows attackers to bypass authentication via a brute force attack . Additionally, the flaw can be used to enumerate valid domains and internal services by brute-forcing the repoCode para...

9.8CVSS6.8AI score0.00651EPSS
SaveExploits1References1Affected Software1
RedhatCVE
RedhatCVE
•added 2025/04/04 9:37 p.m.•35 views

CVE-2025-3129

Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Access code allows Brute Force.This issue affects Access code: from 0.0.0 before 2.0.4...

4.8CVSS7.5AI score0.0027EPSS
SaveExploits0References3
NVD
NVD
•added 2025/04/02 10:15 p.m.•45 views

CVE-2025-3129

Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Access code allows Brute Force.This issue affects Access code: from 0.0.0 before 2.0.4...

4.8CVSS0.0027EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/04/02 5:33 a.m.•23 views

CVE-2025-25211

Weak password requirements issue exists in CHOCO TEI WATCHER mini IB-MCT001 all versions. If this issue is exploited, a brute-force attack may allow an attacker unauthorized access and login...

9.8CVSS7.3AI score0.00846EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/04/01 12:00 a.m.•19 views

PT-2025-14023 · Valmet · Valmet Dna Visualization

Name of the Vulnerable Software and Affected Versions: Valmet DNA visualization in DNA Operate affected versions not specified Description: The issue is related to a lack of protection against brute force attacks. This allows an attacker to make an arbitrary number of login attempts without any...

7CVSS6.2AI score0.00166EPSS
SaveExploits0References5
NVD
NVD
•added 2025/03/31 10:15 p.m.•45 views

CVE-2025-31676

Weak Authentication vulnerability in Drupal Email TFA allows Brute Force.This issue affects Email TFA: from 0.0.0 before 2.0.3...

8.8CVSS0.00561EPSS
SaveExploits0References1
NVD
NVD
•added 2025/03/31 5:15 a.m.•29 views

CVE-2025-25211

Weak password requirements issue exists in CHOCO TEI WATCHER mini IB-MCT001 all versions. If this issue is exploited, a brute-force attack may allow an attacker unauthorized access and login...

9.8CVSS0.00846EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2025/03/31 4:49 a.m.•11 views

CVE-2025-25211

Weak password requirements issue exists in CHOCO TEI WATCHER mini IB-MCT001 all versions. If this issue is exploited, a brute-force attack may allow an attacker unauthorized access and login...

9.8CVSS7AI score0.00846EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2025/03/31 4:49 a.m.•43 views

CVE-2025-25211

Weak password requirements issue exists in CHOCO TEI WATCHER mini IB-MCT001 all versions. If this issue is exploited, a brute-force attack may allow an attacker unauthorized access and login...

9.8CVSS0.00846EPSS
SaveExploits0References4
CVE
CVE
•added 2025/03/31 4:49 a.m.•94 views

CVE-2025-25211

CVE-2025-25211 affects CHOCO TEI WATCHER mini (IB-MCT001) all versions. Root cause: weak password requirements that may permit brute-force login to obtain unauthorized access. CVSS metrics indicate high impact (Confidentiality, Integrity, Availability) with network attack vector and no user inter...

9.8CVSS7.1AI score0.00846EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/31 12:00 a.m.•6 views

CVE-2025-25211: Weak Password Requirements

Weak password requirements issue exists in CHOCO TEI WATCHER mini IB-MCT001 all versions. If this issue is exploited, a brute-force attack may allow an attacker unauthorized access and login...

9.8CVSS8.4AI score0.00846EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/03/25 8:21 p.m.•26 views

CVE-2023-42818

JumpServer is an open source bastion host. When users enable MFA and use a public key for authentication, the Koko SSH server does not verify the corresponding SSH private key. An attacker could exploit a vulnerability by utilizing a disclosed public key to attempt brute-force authentication...

9.8CVSS7.2AI score0.00675EPSS
SaveExploits1
Cvelist
Cvelist
•added 2025/03/24 12:00 a.m.•42 views

CVE-2025-29311

Limited secret space in LLDP packets used in onos v2.7.0 allows attackers to obtain the private key via a bruteforce attack. Attackers are able to leverage this vulnerability into creating crafted LLDP packets...

0.00366EPSS
SaveExploits0References1
CVE
CVE
•added 2025/03/24 12:00 a.m.•103 views

CVE-2025-29311

The Linux Open Network Operating System (ONOS) version v2.7.0 is vulnerable to a security flaw due to insufficient entropy in LLDP packets . Specifically, the limited secret space allows an attacker to perform a brute-force attack to obtain the private key, which can then be used to create crafte...

7.5CVSS6.8AI score0.00366EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2025/03/24 12:00 a.m.•14 views

PT-2025-12708 · Onos · Onos

Name of the Vulnerable Software and Affected Versions: onos version 2.7.0 Description: The issue is related to limited secret space in LLDP packets, which can be exploited by attackers to obtain the private key via a brute force attack. Attackers can leverage this to create crafted LLDP packets...

7.5CVSS5.9AI score0.00366EPSS
SaveExploits0References9
OSV
OSV
•added 2025/03/24 12:00 a.m.•19 views

CVE-2025-29311

Limited secret space in LLDP packets used in onos v2.7.0 allows attackers to obtain the private key via a bruteforce attack. Attackers are able to leverage this vulnerability into creating crafted LLDP packets...

7.5CVSS6.8AI score
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/03/20 4:15 p.m.•17 views

CVE-2025-25595

A lack of rate limiting in the login page of Safe App version a3.0.9 allows attackers to bypass authentication via a brute force attack...

9.8CVSS7.4AI score0.00502EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/03/20 12:00 a.m.•15 views

BG-TEK Coslat Hotspot 安全漏洞

BG-TEK Coslat Hotspot is a wireless hotspot product from BG-TEK, Inc. It is used to provide wireless LAN access to Internet services. A security vulnerability exists in versions prior to BG-TEK Coslat Hotspot 6.26.0.R.20250227, which stems from improperly restricted authentication attempts and...

6.5CVSS6.9AI score0.0034EPSS
SaveExploits0References3
NVD
NVD
•added 2025/03/18 5:15 p.m.•13 views

CVE-2025-25595

A lack of rate limiting in the login page of Safe App version a3.0.9 allows attackers to bypass authentication via a brute force attack...

9.8CVSS0.00502EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/18 12:00 a.m.•2 views

CVE-2025-25595: Improper Restriction of Excessive Authentication Attempts

A lack of rate limiting in the login page of Safe App version a3.0.9 allows attackers to bypass authentication via a brute force attack...

9.8CVSS5.8AI score0.00502EPSS
SaveExploits0References1
Rows per page
Query Builder