Lucene search
+L

130 matches found

Snyk
Snyk
•added 2026/10/22 9:04 p.m.•5 views

Improper Control of Interaction Frequency

Overview Affected versions of this package are vulnerable to Improper Control of Interaction Frequency due to improper handling of role resolution in the rate limit quota process when processing requests with form-encoded bodies or forwarded certificates. An attacker can bypass backend-specific...

6.3CVSS5.8AI score0.00187EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/10/22 9:04 p.m.•5 views

Improper Control of Interaction Frequency

Overview Affected versions of this package are vulnerable to Improper Control of Interaction Frequency due to improper handling of role resolution in the rate limit quota process when processing requests with form-encoded bodies or forwarded certificates. An attacker can bypass backend-specific...

6.3CVSS5.8AI score0.00187EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2026/10/22 1:21 a.m.•9 views

CVE-2026-96364 Webform - Moderately critical - Access bypass - SA-CONTRIB-2026-171

Improper Control of Interaction Frequency vulnerability in Drupal Webform allows Functionality Misuse. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1...

5.3CVSS5.9AI score
SaveExploits0References5
CVE
CVE
•added 2026/10/22 1:21 a.m.•38 views

CVE-2026-96364

The Drupal Webform module, specifically when using the Webform Share submodule, contains an Improper Control of Interaction Frequency vulnerability (CWE-799). This flaw allows submissions for Ajax-enabled webforms to bypass anti-spam protections under certain circumstances. The vulnerability spec...

5.3CVSS5.9AI score0.00287EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/22 1:21 a.m.•8 views

EUVD-2026-107830

Improper Control of Interaction Frequency vulnerability in Drupal Webform allows Functionality Misuse. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1...

5.3CVSS6AI score0.00287EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/10/22 1:21 a.m.•9 views

CVE-2026-96364 Webform - Moderately critical - Access bypass - SA-CONTRIB-2026-171

Improper Control of Interaction Frequency vulnerability in Drupal Webform allows Functionality Misuse. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1...

5.9AI score0.00287EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/22 1:21 a.m.•26 views

CVE-2026-96364 Webform - Moderately critical - Access bypass - SA-CONTRIB-2026-171

Improper Control of Interaction Frequency vulnerability in Drupal Webform allows Functionality Misuse. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1...

0.00287EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/06 2:17 p.m.•13 views

CVE-2026-82924

Improper Control of Interaction Frequency vulnerability in Pusula Communication, IT, and Internet Industry and Trade Co. Ltd. Expert Mail allows Brute Force. This issue affects Expert Mail: through 2026-09-18...

5.3CVSS0.00197EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/06 1:33 p.m.•17 views

EUVD-2026-93415

Improper Control of Interaction Frequency vulnerability in Pusula Communication, IT, and Internet Industry and Trade Co. Ltd. Expert Mail allows Brute Force. This issue affects Expert Mail: through 2026-09-18...

5.3CVSS5.8AI score0.00197EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/06 1:33 p.m.•43 views

CVE-2026-82924 PII Enumeration via Missing Rate Limiting in Pusula Communication's Expert Mail

Improper Control of Interaction Frequency vulnerability in Pusula Communication, IT, and Internet Industry and Trade Co. Ltd. Expert Mail allows Brute Force. This issue affects Expert Mail: through 2026-09-18...

5.3CVSS0.00197EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/10/06 12:00 a.m.•14 views

PT-2026-106732

Improper Control of Interaction Frequency vulnerability in Pusula Communication, IT, and Internet Industry and Trade Co. Ltd. Expert Mail allows Brute Force. This issue affects Expert Mail: through 2026-09-18...

5.3CVSS5.8AI score0.00197EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/06 12:00 a.m.•10 views

CVE-2026-82924: Improper Control of Interaction Frequency

Improper Control of Interaction Frequency vulnerability in Pusula Communication, IT, and Internet Industry and Trade Co. Ltd. Expert Mail allows Brute Force. This issue affects Expert Mail: through 2026-09-18...

5.3CVSS5.8AI score0.00197EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/26 12:00 a.m.•13 views

CVE-2026-100603: Improper Control of Interaction Frequency

ClawHub openclaw/clawhub application/backend contains a flaw in the skill report moderation flow: four distinct ordinary authenticated accounts can report a visible skill and trigger automatic hiding moderationStatus: hidden of that skill from the catalog without any moderator decision. Because t...

8.7CVSS5.9AI score0.00294EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/18 4:17 p.m.•18 views

CVE-2025-36045

IBM TS4300 1.1.0.1 through 1.7.1.1 could allow an authenticated user to cause a denial of service in the email service due to improper control of interaction frequency...

4.3CVSS0.00359EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/18 3:41 p.m.•17 views

CVE-2025-36045 TS4300 Tape Library addresses security vulnerability

IBM TS4300 1.1.0.1 through 1.7.1.1 could allow an authenticated user to cause a denial of service in the email service due to improper control of interaction frequency...

4.3CVSS5.8AI score0.00359EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/18 3:41 p.m.•60 views

CVE-2025-36045 TS4300 Tape Library addresses security vulnerability

IBM TS4300 1.1.0.1 through 1.7.1.1 could allow an authenticated user to cause a denial of service in the email service due to improper control of interaction frequency...

4.3CVSS0.00359EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/18 3:41 p.m.•22 views

EUVD-2025-210956

IBM TS4300 1.1.0.1 through 1.7.1.1 could allow an authenticated user to cause a denial of service in the email service due to improper control of interaction frequency...

4.3CVSS5.8AI score0.00359EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/18 3:41 p.m.•45 views

CVE-2025-36045

IBM TS4300 Tape Library (versions 1.1.0.1 through 1.7.1.1) is affected by a denial-of-service vulnerability in its email service. Email-related functions in the web GUI and APIs did not enforce rate limiting, allowing an authenticated user to repeatedly invoke email-sending requests and generate ...

4.3CVSS5.8AI score0.00359EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/18 3:17 p.m.•20 views

CVE-2025-13882

IBM Sterling Partner Engagement Manager Essentials Edition 6.3.0.0 through 6.3.0.2, and 6.2.4.0 through 6.2.4.4 and IBM Sterling Partner Engagement Manager Standard Edition 6.2.4.0 through 6.2.4.4 could allow an unauthenticated user to cause a denial of service in the email service due to imprope...

5.3CVSS0.0042EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/18 2:33 p.m.•49 views

CVE-2025-13882

IBM Sterling Partner Engagement Manager Essentials Edition 6.3.0.0–6.3.0.2, 6.2.4.0–6.2.4.4, and Standard Edition 6.2.4.0–6.2.4.4 could allow an unauthenticated remote attacker to cause a denial of service in the email service due to improper control of interaction frequency (CWE-799). The CVSS 3...

5.3CVSS5.8AI score0.0042EPSS
SaveExploits0References1
Rows per page
Query Builder