Lucene search
+L

5819 matches found

F5 Networks
F5 Networks
added 2023/02/21 6:59 p.m.54 views

K51444934: NTP vulnerability CVE-2016-7426

Security Advisory Description NTP before 4.2.8p9 rate limits responses received from the configured sources when rate limiting for all associations is enabled, which allows remote attackers to cause a denial of service prevent responses from the sources by sending responses with a spoofed source...

7.5CVSS6.4AI score0.12466EPSS
SaveExploits0Affected Software12
F5 Networks
F5 Networks
added 2023/02/21 6:15 p.m.46 views

K17527: NTP vulnerability CVE-2015-7705

Security Advisory Description The rate limiting feature in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to have unspecified impact via a large number of crafted requests. CVE-2015-7705 Impact An attacker with the ability to spoof multiple client requests may be able to...

9.8CVSS6.6AI score0.12351EPSS
SaveExploits0Affected Software20
F5 Networks
F5 Networks
added 2023/02/21 6:13 p.m.16 views

K23278332: A DNS over TCP packet is not rate-limited accurately using the single-endpoint DoS device flood vector

Security Advisory Description This issue occurs when all of the following conditions are met: Setting the correct DNS packet type in the denial-of-service DoS device sweep or flood vector. Matching traffic sends DNS over TCP. Impact The mitigation for DNS over TCP packets is not working as expect...

6.7AI score
SaveExploits0
CNNVD
CNNVD
added 2023/02/21 12:00 a.m.12 views

Chamberlain myQ 安全漏洞

Chamberlain myQ is an intelligent vehicle access system from Chamberlain. A security vulnerability exists in Chamberlain myQ version v5.222.0.32277 iOS that stems from a lack of rate limiting in the password reset endpoint, which can be exploited by an attacker to compromise a user's account via ...

9.8CVSS8.3AI score0.00939EPSS
SaveExploits0References7
Vulnrichment
Vulnrichment
added 2023/02/21 12:00 a.m.7 views

CVE-2023-24080

A lack of rate limiting on the password reset endpoint of Chamberlain myQ v5.222.0.32277 on iOS allows attackers to compromise user accounts via a bruteforce attack...

9.4AI score0.00939EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2023/02/21 12:00 a.m.32 views

CVE-2023-24080

A lack of rate limiting on the password reset endpoint of Chamberlain myQ v5.222.0.32277 on iOS allows attackers to compromise user accounts via a bruteforce attack...

9.5AI score0.00939EPSS
SaveExploits0References2
CVE
CVE
added 2023/02/21 12:00 a.m.125 views

CVE-2023-24080

Affected product: Chamberlain myQ (iOS) v5.222.0.32277. Root cause: lack of rate limiting on the password reset endpoint. Impact: enables brute-force attacks to compromise user accounts. Remediation: implement rate limiting and apply available patch; some sources also suggest disabling the passwo...

9.8CVSS9.2AI score0.00939EPSS
SaveExploits0References2Affected Software1
Hacker One
Hacker One
added 2023/02/20 11:47 a.m.51 views

Nextcloud: Basic auth header on WebDAV requests is not bruteforce protected

A basic authentication bypass vulnerability was discovered on WebDAV requests, due to a lack of rate limit protection. Attackers could brute force the password and gain full account takeover. The vulnerability was reported and fixed...

8.1CVSS7.3AI score0.00697EPSS
SaveExploits0
Code423n4
Code423n4
added 2023/02/17 12:00 a.m.17 views

Mitigation of M-05: Issue not fully mitigated

Lines of code Vulnerability details Original issue: M-05: early user can call issue and then melt to increase basketsNeeded to supply ratio to its maximum value and then melt won't work and contract contract features like issue won't work Not mitigated - attacker can still manipulate the...

6.6AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2023/02/17 12:00 a.m.24 views

The vulnerability of the component responsible for creating new account records in the Apex-VUZ education automation system allows a perpetrator to cause service interruptions.

The vulnerability of the component responsible for creating new account records in the Apex-VUZ automation system is related to improper control of the interaction frequency. Exploiting this vulnerability allows a malicious actor to trigger a service failure by sending specially crafted POST...

7.8CVSS5.4AI score
SaveExploits0Affected Software1
OSV
OSV
added 2023/02/15 6:10 p.m.65 views

GHSA-7968-H4M4-GHM9 No protection against brute-force attacks on login page

Impact Previous versions of Kiwi TCMS do not impose rate limits which makes it easier to attempt brute-force attacks against the login page. Patches Users should upgrade to v12.0 or later. Workarounds Users may install and configure a rate-limiting proxy in front of Kiwi TCMS. For example nginx...

7.5CVSS8.4AI score0.0091EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
added 2023/02/15 6:10 p.m.37 views

No protection against brute-force attacks on login page

Impact Previous versions of Kiwi TCMS do not impose rate limits which makes it easier to attempt brute-force attacks against the login page. Patches Users should upgrade to v12.0 or later. Workarounds Users may install and configure a rate-limiting proxy in front of Kiwi TCMS. For example nginx...

9.8CVSS8.8AI score0.0091EPSS
SaveExploits0References6Affected Software1
Github Security Blog
Github Security Blog
added 2023/02/15 6:10 p.m.32 views

Denial of service vulnerability on Password reset page

Impact Previous versions of Kiwi TCMS do not impose rate limits which makes it easier to attempt denial-of-service attacks against the Password reset page. An attacker could potentially send a large number of emails if they know the email addresses of users in Kiwi TCMS. Additionally that may...

7.5CVSS5.6AI score0.00916EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2023/02/15 6:10 p.m.67 views

GHSA-7J9H-3JXF-3VRF Denial of service vulnerability on Password reset page

Impact Previous versions of Kiwi TCMS do not impose rate limits which makes it easier to attempt denial-of-service attacks against the Password reset page. An attacker could potentially send a large number of emails if they know the email addresses of users in Kiwi TCMS. Additionally that may...

7.5CVSS6.3AI score0.00916EPSS
SaveExploits0References6
NVD
NVD
added 2023/02/15 3:15 p.m.43 views

CVE-2023-25171

Kiwi TCMS, an open source test management system, does not impose rate limits in versions prior to 12.0. This makes it easier to attempt denial-of-service attacks against the Password reset page. An attacker could potentially send a large number of emails if they know the email addresses of users...

7.5CVSS7.3AI score0.00916EPSS
SaveExploits0References4
NVD
NVD
added 2023/02/15 3:15 p.m.30 views

CVE-2023-25156

Kiwi TCMS, an open source test management system, does not impose rate limits in versions prior to 12.0. This makes it easier to attempt brute-force attacks against the login page. Users should upgrade to v12.0 or later to receive a patch. As a workaround, users may install and configure a...

9.8CVSS7.9AI score0.0091EPSS
SaveExploits0References4
Prion
Prion
added 2023/02/15 3:15 p.m.23 views

Code injection

Kiwi TCMS, an open source test management system, does not impose rate limits in versions prior to 12.0. This makes it easier to attempt brute-force attacks against the login page. Users should upgrade to v12.0 or later to receive a patch. As a workaround, users may install and configure a...

7.5CVSS9.2AI score0.0091EPSS
SaveExploits0References4Affected Software1
Prion
Prion
added 2023/02/15 3:15 p.m.27 views

Code injection

Kiwi TCMS, an open source test management system, does not impose rate limits in versions prior to 12.0. This makes it easier to attempt denial-of-service attacks against the Password reset page. An attacker could potentially send a large number of emails if they know the email addresses of users...

2.6CVSS5.5AI score0.00916EPSS
SaveExploits0References4Affected Software1
SUSE CVE
SUSE CVE
added 2023/02/15 5:48 a.m.9 views

SUSE CVE-2012-1107

The analyzeCurrent function in ape/apeproperties.cpp in TagLib 1.7 and earlier allows context-dependent attackers to cause a denial of service application crash via a crafted sampleRate in an ape file, which triggers a divide-by-zero error...

4.3CVSS6.6AI score0.01827EPSS
SaveExploits1References6
SUSE CVE
SUSE CVE
added 2023/02/15 5:36 a.m.6 views

SUSE CVE-2013-4369

The xluvifparserate function in the libxlu library in Xen 4.2.x and 4.3.x allows local users to cause a denial of service NULL pointer dereference by using the "@" character as the VIF rate configuration...

1.9CVSS6.2AI score0.00343EPSS
SaveExploits0References5
Rows per page
Query Builder