Timing Attack

automattic/jetpack is vulnerable to timing attacks. This vulnerability is caused because the secrets are not compared in constant time, allowing malicious users to guess the valid secrets based on the time that a comparison takes...

IBM Sametime Information Disclosure Vulnerability (CNVD-2017-30590)

IBM Sametime is a suite of next-generation social communication tools from IBM in the United States. The tool helps users realize real-time business collaboration by integrating audio voice, data and video. A security vulnerability exists in IBM Sametime versions 8.5.1 and 9.0. An attacker can...

CVE-2016-2966

IBM Sametime 8.5.1 and 9.0 could allow an authenticated user to enumerate meeting rooms by guessing the meeting room id. IBM X-Force ID: 113847...

CVE-2016-2966

IBM Sametime 8.5.1 and 9.0 could allow an authenticated user to enumerate meeting rooms by guessing the meeting room id. IBM X-Force ID: 113847...

PT-2017-3941 · Red Hat +1 · 389-Ds-Base +2

Name of the Vulnerable Software and Affected Versions: 389-ds-base versions prior to 1.3.5.19 and 1.3.6.7 Description: The issue is related to an account lockout error in the 389 Directory Server, which could allow password guessing. Exploitation of this issue may enable a remote attacker to acce...

NTP 'ntp-keygen.c' Predictable Random Number Generation Vulnerability

NTP Network Time Protocol is a protocol for synchronizing computer clocks over a network. A predictable random number generation vulnerability exists in NTP. An attacker can exploit this vulnerability to guess the MD5 key and spoof the client or server...

WakaTime: Login page password - guessing attack

No account lock out after a certain number of failed login attempts Steps to reproduce: navigate to https://wakatime.com/ and enter email address and false password make more than attempts and account does not get locked out After failed attempts, I was still able to login in with my password...

EllisLab ExpressionEngine Weak Password Vulnerability

EllisLab ExpressionEngine is the United States EllisLab company's set of content management system CMS, it provides Web publishing, template engine and attachment components and other modules. A security vulnerability exists in EllisLab ExpressionEngine version 2.x prior to 2.11.8 and version 3.x...

UBUNTU-CVE-2017-9735

Jetty through 9.4.x is prone to a timing channel in util/security/Password.java, which makes it easier for remote attackers to obtain access by observing elapsed times before rejection of incorrect passwords...

Hibernate SQL Injection Vulnerability in Electric Power Safety Supervision Information System

Electric Power Safety Supervision Information System is an electric power safety management system of Guodian Ruichi Vision Information Technology Co. There is a Hibernate SQL injection vulnerability in the power security monitoring system, by entering ' and 1=1, password arbitrary, and combining...

PT-2017-3707 · Schneider Electric · Modicon M340 +3

Name of the Vulnerable Software and Affected Versions: Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200 controllers affected versions not specified Description: The issue concerns a vulnerable hash algorithm used for password encryption in the communication...

Weblate: No BruteForce Protection

A common threat web developers face is a password-guessing attack known as a brute force attack. A brute-force attack is an attempt to discover a password by systematically trying every possible combination of letters, numbers, and symbols until you discover the one correct combination that works...

CVE-2016-2564

Invision Power Services IPS Community Suite before 4.1.9 makes session hijack easier by relying on the PHP uniqid function without the moreentropy flag. Attackers can guess an Invision Power Board session cookie if they can predict the exact time of cookie generation...

Multiple Huawei Server Design Vulnerabilities

Huawei Tecal RH1288 V2 and others are servers from Huawei, a Chinese company. A security vulnerability exists in several Huawei servers. An attacker can exploit the vulnerability by guessing the session ID used by another user to access the system with a fake identity...

Revive Adserver Overauthentication Attempts Improper Restriction Vulnerability

Revive Adserver is an open source advertising management system from the Revive Adserver team. The system provides ad placement, ad space management, data statistics and other functions. A security vulnerability exists in the login page of Revive Adserver versions prior to 3.2.3. An attacker can...

CVE-2016-9124

Revive Adserver before 3.2.3 suffers from Improper Restriction of Excessive Authentication Attempts. The login page of Revive Adserver is vulnerable to password-guessing attacks. An account lockdown feature was considered, but rejected to avoid introducing service disruptions to regular users...

CVE-2016-9124

Revive Adserver before 3.2.3 suffers from Improper Restriction of Excessive Authentication Attempts. The login page of Revive Adserver is vulnerable to password-guessing attacks. An account lockdown feature was considered, but rejected to avoid introducing service disruptions to regular users...

CVE-2016-9124

Revive Adserver before 3.2.3 suffers from Improper Restriction of Excessive Authentication Attempts. The login page of Revive Adserver is vulnerable to password-guessing attacks. An account lockdown feature was considered, but rejected to avoid introducing service disruptions to regular users...

CVE-2016-9124

Revive Adserver prior to 3.2.3 is affected by improper restriction of excessive authentication attempts on the login page, enabling password-guessing attacks. The issue stems from login controls that do not adequately throttle/brute-force limit, though a random delay and anti-parallel brute-forci...

UBUNTU-CVE-2015-8623

The User::matchEditToken function in includes/User.php in MediaWiki before 1.23.12 and 1.24.x before 1.24.5 does not perform token comparison in constant time before returning, which allows remote attackers to guess the edit token and bypass CSRF protection via a timing attack, a different...