Lucene search
+L

11552 matches found

NVD
NVD
added 2025/04/02 10:15 p.m.41 views

CVE-2025-3129

Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Access code allows Brute Force.This issue affects Access code: from 0.0.0 before 2.0.4...

4.8CVSS0.00265EPSS
SaveExploits0References1
CVE
CVE
added 2025/04/02 9:10 p.m.77 views

CVE-2025-3129

CVE-2025-3129 affects the Drupal Access code module. The vulnerability is caused by an improper restriction of excessive authentication attempts, enabling brute-force login for versions 0.0.0 through 2.0.3. Exploitation details are not provided in the available documents. The issue is mitigated b...

4.8CVSS7.4AI score0.00265EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2025/04/02 9:10 p.m.10 views

CVE-2025-3129 Access code - Moderately critical - Access bypass - SA-CONTRIB-2025-028

Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Access code allows Brute Force.This issue affects Access code: from 0.0.0 before 2.0.4...

4.8CVSS6AI score
SaveExploits0References5
Cvelist
Cvelist
added 2025/04/02 9:10 p.m.51 views

CVE-2025-3129 Access code - Moderately critical - Access bypass - SA-CONTRIB-2025-028

Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Access code allows Brute Force.This issue affects Access code: from 0.0.0 before 2.0.4...

0.00265EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/04/02 9:10 p.m.4 views

CVE-2025-3129 Access code - Moderately critical - Access bypass - SA-CONTRIB-2025-028

Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Access code allows Brute Force.This issue affects Access code: from 0.0.0 before 2.0.4...

5.4AI score0.00265EPSS
SaveExploits0References1
OSV
OSV
added 2025/04/02 5:02 p.m.7 views

DRUPAL-CONTRIB-2025-028

This module enables users to log in using a short access code instead of providing a username/password combination. The module doesn't sufficiently protect against brute force attacks to guess a user's access code. This vulnerability is mitigated by the fact that access code based logins are off ...

4.8CVSS6.9AI score0.00265EPSS
SaveExploits0References1
The Hacker News
The Hacker News
added 2025/04/02 10:43 a.m.49 views

Outlaw Group Uses SSH Brute-Force to Deploy Cryptojacking Malware on Linux Servers

Cybersecurity researchers have shed light on an "auto-propagating" cryptocurrency mining botnet called Outlaw aka Dota that's known for targeting SSH servers with weak credentials. "Outlaw is a Linux malware that relies on SSH brute-force attacks, cryptocurrency mining, and worm-like propagation ...

7.8CVSS7.8AI score0.83524EPSS
SaveExploits106
RedhatCVE
RedhatCVE
added 2025/04/02 5:33 a.m.18 views

CVE-2025-25211

Weak password requirements issue exists in CHOCO TEI WATCHER mini IB-MCT001 all versions. If this issue is exploited, a brute-force attack may allow an attacker unauthorized access and login...

9.8CVSS7.3AI score0.00832EPSS
SaveExploits0References1
Drupal
Drupal
added 2025/04/02 12:00 a.m.28 views

Access code - Moderately critical - Access bypass - SA-CONTRIB-2025-028

This module enables users to log in using a short access code instead of providing a username/password combination. The module doesn't sufficiently protect against brute force attacks to guess a user's access code. This vulnerability is mitigated by the fact that access code based logins are off ...

4.8CVSS7.2AI score0.00265EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/04/02 12:00 a.m.11 views

PT-2025-14554 · Drupal · Drupal Access Code

Name of the Vulnerable Software and Affected Versions: Drupal Access code versions 0.0.0 through 2.0.3 Description: The issue is related to an Improper Restriction of Excessive Authentication Attempts, which allows for Brute Force attacks. Recommendations: For versions 0.0.0 through 2.0.3, update...

4.8CVSS6.6AI score0.00265EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2025/04/02 12:00 a.m.10 views

Drupal Access code 安全漏洞

Drupal Access code is a Drupal module for the Drupal community. A security vulnerability exists in Drupal Access code versions prior to 2.0.4, which stems from an improperly restricted authentication attempt that could lead to brute force cracking...

4.8CVSS6.8AI score0.00265EPSS
SaveExploits0References3
Snyk
Snyk
added 2025/04/01 6:27 a.m.8 views

Brute Force

Overview alertwise is a Wagtail based weather warnings composing and dissemination tool Affected versions of this package are vulnerable to Brute Force due to insufficient login security measures affected version potentially vulnerable to brute-force and credential-stuffing attacks. The issue ste...

6.9CVSS7AI score
SaveExploits0References3
NVD
NVD
added 2025/04/01 4:15 a.m.17 views

CVE-2025-0417

Lack of protection against brute force attacks in Valmet DNA visualization in DNA Operate. The possibility to make an arbitrary number of login attempts without any rate limit gives an attacker an increased chance of guessing passwords and then performing switching operations...

7CVSS0.00166EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/04/01 4:02 a.m.7 views

CVE-2025-0417 Valmet DNA Lack of protection against brute force attacks

Lack of protection against brute force attacks in Valmet DNA visualization in DNA Operate. The possibility to make an arbitrary number of login attempts without any rate limit gives an attacker an increased chance of guessing passwords and then performing switching operations...

7CVSS7.2AI score0.00166EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/04/01 4:02 a.m.27 views

CVE-2025-0417 Valmet DNA Lack of protection against brute force attacks

Lack of protection against brute force attacks in Valmet DNA visualization in DNA Operate. The possibility to make an arbitrary number of login attempts without any rate limit gives an attacker an increased chance of guessing passwords and then performing switching operations...

7CVSS0.00166EPSS
SaveExploits0References1
CVE
CVE
added 2025/04/01 4:02 a.m.57 views

CVE-2025-0417

CVE-2025-0417 affects Valmet DNA Visualization in DNA Operate. The issue is a lack of protection against brute force attacks, permitting an arbitrary number of login attempts with no rate limit, increasing the chance of password guessing and subsequent switching operations. Reported impact per CV...

7CVSS6.7AI score0.00166EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/04/01 12:00 a.m.13 views

PT-2025-14023 · Valmet · Valmet Dna Visualization

Name of the Vulnerable Software and Affected Versions: Valmet DNA visualization in DNA Operate affected versions not specified Description: The issue is related to a lack of protection against brute force attacks. This allows an attacker to make an arbitrary number of login attempts without any...

7CVSS6.2AI score0.00166EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2025/04/01 12:00 a.m.27 views

Valmet DNA 安全漏洞

Valmet DNA is a platform for automation and information systems from the Finnish company Valmet. In this single platform, process control, machine control, quality control, drive control and equipment condition monitoring systems are covered. A security vulnerability exists in Valmet DNA, which...

7CVSS6.5AI score0.00166EPSS
SaveExploits0References2
NVD
NVD
added 2025/03/31 10:15 p.m.33 views

CVE-2025-31676

Weak Authentication vulnerability in Drupal Email TFA allows Brute Force.This issue affects Email TFA: from 0.0.0 before 2.0.3...

8.8CVSS0.00552EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/03/31 9:36 p.m.28 views

CVE-2025-31676 Email TFA - Moderately critical - Access bypass - SA-CONTRIB-2025-001

Weak Authentication vulnerability in Drupal Email TFA allows Brute Force.This issue affects Email TFA: from 0.0.0 before 2.0.3...

0.00552EPSS
SaveExploits0References1
Rows per page
Query Builder