CVE-2025-9551

Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Protected Pages allows Brute Force.This issue affects Protected Pages: from 0.0.0 before 1.8.0, from 7.X-1.0 before 7.X-2.5...

CVE-2025-9551

The Drupal Protected Pages module (versions 0.0.0 before 1.8.0 and 7.X-1.0 before 7.X-2.5 ) contains an Improper Restriction of Excessive Authentication Attempts vulnerability. The module fails to limit the number of password attempts for protected pages, which allows for brute force attacks . Wh...

CVE-2025-9551

Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Protected Pages allows Brute Force.This issue affects Protected Pages: from 0.0.0 before 1.8.0, from 7.X-1.0 before 7.X-2.5...

CVE-2025-9551 Protected Pages - Moderately critical - Access bypass - SA-CONTRIB-2025-101

Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Protected Pages allows Brute Force.This issue affects Protected Pages: from 0.0.0 before 1.8.0, from 7.X-1.0 before 7.X-2.5...

CVE-2025-9551 Protected Pages - Moderately critical - Access bypass - SA-CONTRIB-2025-101

Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Protected Pages allows Brute Force.This issue affects Protected Pages: from 0.0.0 before 1.8.0, from 7.X-1.0 before 7.X-2.5...

CVE-2025-0038

In AMD Zynq UltraScale+ devices, the lack of address validation when executing CSU runtime services through the PMU Firmware can allow access to isolated or protected memory spaces resulting in the loss of integrity and confidentiality...

Drupal Protected Pages security vulnerabilities

Drupal Protected Pages is a page locking plugin for the Drupal community. A security vulnerability exists in Drupal Protected Pages versions prior to 1.8.0, which stems from an unrestricted number of authentication attempts that could lead to a brute force attack...

CVE-2025-9551: Improper Restriction of Excessive Authentication Attempts

Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Protected Pages allows Brute Force.This issue affects Protected Pages: from 0.0.0 before 1.8.0, from 7.X-1.0 before 7.X-2.5...

PT-2025-41619

Name of the Vulnerable Software and Affected Versions Drupal Protected Pages versions 0.0.0 through 1.7.9 Description A flaw exists in Drupal Protected Pages that allows for excessive authentication attempts, potentially leading to brute force attacks. This issue impacts the Protected Pages modul...

Cisco Nexus Dashboard Fabric Controller REST API Unauthorized Access

The vulnerability of the REST API component of the Cisco Nexus Dashboard Fabric Controller NDFC management platform relates to a flaw in the data protection mechanism. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

Zabbix Authentication Bypass

The vulnerability of the Zabbix universal monitoring system is related to authentication errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

Cisco Nexus Dashboard Fabric Controller REST API Unauthorized Access

The vulnerability of the REST API component of the Cisco Nexus Dashboard Fabric Controller NDFC management platform relates to the disclosure of information during data transmission. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

Zabbix Agent 2 Information Disclosure

The vulnerability of the Zabbix Agent 2 component of the Zabbix IT infrastructure monitoring system is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose sensitive information that...

Zabbix Authentication Bypass

The vulnerability of the Zabbix universal monitoring system is related to authentication errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

ELAARA Elikon-TS Web Interface Unauthorized Access

The vulnerability of the ELAARA Elikon-TS web server’s web interface is related to the absence of filtering for the path transmitted to the client. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

Websoft HCM Automation Software Unauthorized Access

The vulnerability of Websoft HCM’s automation software for HR processes is related to the disclosure of information in debugging messages. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

CVE-2025-59957

An Origin Validation Error vulnerability in an insufficient protected file of Juniper Networks Junos OS on EX4600 Series and QFX5000 Series allows an unauthenticated attacker with physical access to the device to create a backdoor which allows complete control of the system. When a device isn't...

CVE-2025-59957

An Origin Validation Error vulnerability in an insufficient protected file of Juniper Networks Junos OS on EX4600 Series and QFX5000 Series allows an unauthenticated attacker with physical access to the device to create a backdoor which allows complete control of the system. When a device isn't...

CVE-2025-59957 Junos OS: EX4600 Series and QFX5000 Series: An attacker with physical access can open a persistent backdoor

An Origin Validation Error vulnerability in an insufficient protected file of Juniper Networks Junos OS on EX4600 Series and QFX5000 Series allows an unauthenticated attacker with physical access to the device to create a backdoor which allows complete control of the system. When a device isn't...

Barco ClickShare Devices Weak Password Requirements (CVE-2019-18828)

Barco ClickShare Button R9861500D01 devices before 1.9.0 have Insufficiently Protected Credentials. The root account present for access via debug interfaces, which are by default not enabled on production devices of the embedded Linux on the ClickShare Button is using a weak password. This plugin...