Unspecified Vulnerability in Mattermost Server (CNVD-2020-35459)

Mattermost Server is the United States Mattermost company's set of open source messaging platform. A security vulnerability exists in Mattermost Server versions prior to 3.2.0, which stems from the program incorrectly handling brute force attacks. An attacker could exploit the vulnerability to...

CVE-2016-11069

An issue was discovered in Mattermost Server before 3.2.0. It mishandles brute-force attempts at password change...

Default credentials

An issue was discovered in Mattermost Server before 3.2.0. It mishandles brute-force attempts at password change...

CVE-2016-11069

An issue was discovered in Mattermost Server before 3.2.0. It mishandles brute-force attempts at password change...

CVE-2016-11069

Mattermost Server (before 3.2.0) contains a vulnerability in the password-change flow where brute-force attempts are mishandled, potentially enabling repeated password-change attempts. Affected product: Mattermost Server; initial description specifies 3.2.0 as the fixed version. Root cause: impro...

CVE-2016-11069

An issue was discovered in Mattermost Server before 3.2.0. It mishandles brute-force attempts at password change...

CVE-2019-20881

An issue was discovered in Mattermost Server before 5.8.0. It mishandles brute-force attacks against MFA...

CVE-2019-20881

An issue was discovered in Mattermost Server before 5.8.0. It mishandles brute-force attacks against MFA...

Design/Logic Flaw

An issue was discovered in Mattermost Server before 5.8.0. It mishandles brute-force attacks against MFA...

CVE-2019-20881

CVE-2019-20881 affects Mattermost Server prior to 5.8.0, where brute-force handling of MFA is mishandled. Root cause is improper handling of MFA brute-force attempts, allowing continued attempts that could weaken MFA effectiveness. Affects Mattermost Server versions before 5.8.0; CVSS base scores...

CVE-2019-20881

An issue was discovered in Mattermost Server before 5.8.0. It mishandles brute-force attacks against MFA...

CVE-2019-20881

An issue was discovered in Mattermost Server before 5.8.0. It mishandles brute-force attacks against MFA...

Curve: Sensitive Info Leak - An Attacker Can Retrieve All the Users Mobile Numbers at https://website-api.production.curve.app/api/waitlist/us

Hi, When am going through all the JS files in curve.com I found a link called "/usa" is used to create Curve USA Waitlists by entering your name, email address, mobile number and address details. F874173 Then there is a functionality called "Track my Position" by using which joined users can view...

CVE-2016-11069: Weak Password Requirements

An issue was discovered in Mattermost Server before 3.2.0. It mishandles brute-force attempts at password change...

CVE-2019-20881: Improper Restriction of Excessive Authentication Attempts

An issue was discovered in Mattermost Server before 5.8.0. It mishandles brute-force attacks against MFA...

PT-2020-10845

Name of the Vulnerable Software and Affected Versions Mattermost Server versions prior to 5.8.0 Description The issue concerns the mishandling of brute-force attacks against Multi-Factor Authentication MFA in the affected software. Recommendations For versions prior to 5.8.0, update to version...

PT-2020-7998

Name of the Vulnerable Software and Affected Versions: Mattermost Server versions prior to 3.2.0 Description: The issue concerns the mishandling of brute-force attempts at password change. Recommendations: For versions prior to 3.2.0, update to version 3.2.0 or later to resolve the issue...

Schneider Electric Easergy T300 Encryption Issue Vulnerability

The Schneider Electric Easergy T300 is a remote terminal unit for the power industry from Schneider Electric, France. A cryptographic vulnerability exists in the Schneider Electric Easergy T300 using firmware version 1.5.2 and earlier, which stems from the program's use of weak cryptographic...

Drupal core - Critical - Arbitrary PHP code execution - SA-CORE-2020-005

Drupal 8 and 9 have a remote code execution vulnerability under certain circumstances. An attacker could trick an administrator into visiting a malicious site that could result in creating a carefully named directory on the file system. With this directory in place, an attacker could attempt to...

Unspecified Vulnerability in Schneider Electric Easergy T300 (CNVD-2021-21476)

The Schneider Electric Easergy T300 is a remote terminal unit for the power industry from Schneider Electric, France. A security vulnerability in the Schneider Electric Easergy T300 using firmware version 1.5.2 and earlier, which arises from the program not limiting the number of authentication...