CWE-799 · 61 records

Improper Control of Interaction Frequency

CVEs in this class

61 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
39Monitor	CVE-2025-54321Proof of concept	In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the reset password function, leading to an email bombing vulnerabiascertia · signinghub · CWE-799 Pre-auth	Critical9.8	—	0.5%	Nov 18, 2025
39Monitor	CVE-2023-40332No exploit	WordPress WP-PostRatings plugin <= 1.91 - Rating limit Bypass vulnerabilitylesterchan · wp-postratings · CWE-799 Pre-auth	Critical9.8	—	0.4%	Jun 4, 2024
36Monitor	CVE-2023-7006No exploit	The unlockKey character in a lock using Sciener firmware can be brute forced through repeated challenge requests, compromising the locks intsciener · kontrol lux · CWE-799 Pre-auth	Critical9.1	—	0.5%	Mar 15, 2024
34Monitor	CVE-2024-45788No exploit	No Rate Limiting Vulnerabilityreedos · aim-star · CWE-799 Pre-auth	High8.7	—	0.4%	Sep 11, 2024
34Monitor	CVE-2024-35246No exploit	Westermo L210-F2G Lynx Improper Control of Interaction Frequencywestermo · l210-f2g lynx firmware · CWE-799 Pre-auth	High8.7	—	0.4%	Jun 20, 2024
34Monitor	CVE-2024-32943No exploit	Westermo L210-F2G Lynx Improper Control of Interaction Frequencywestermo · l210-f2g firmware · CWE-799 Pre-auth	High8.7	—	0.4%	Jun 20, 2024
34Monitor	CVE-2026-100603No exploit	ClawHub before 8c2de6c506 Skill Hiding via Coordinated Reportsopenclaw · clawhub · CWE-799	High8.7	—	0.2%	Sep 26, 2026
32Monitor	CVE-2021-41177No exploit	Rate-limits not working on instances without configured memory cache backendnextcloud · nextcloud server · CWE-799	High8.1	—	1.5%	Oct 25, 2021
32Monitor	CVE-2026-24017No exploit	An Improper Control of Interaction Frequency vulnerability [CWE-799] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 fortinet · fortiweb · CWE-799 Pre-auth Auth bypass	High8.1	—	0.7%	Mar 10, 2026
32Monitor	CVE-2025-29998No exploit	No Rate Limiting Vulnerability in CAP back office applicationrising technosoft · cap back office application · CWE-799 Pre-auth	High8.2	—	0.3%	Mar 13, 2025
32Monitor	CVE-2026-7402No exploit	Improper Rate Limiting in MeWare Software's PDKSmeware software development inc. · pdks · CWE-799	High8.1	—	0.3%	Apr 30, 2026
31Monitor	CVE-2023-35621No exploit	Microsoft Dynamics 365 Finance and Operations Denial of Service Vulnerabilitymicrosoft · dynamics 365 · CWE-799 Pre-auth Denial of service	High7.5	—	2.3%	Dec 12, 2023
31Monitor	CVE-2021-32705No exploit	Lack of ratelimit on public DAV endpointnextcloud · nextcloud server · CWE-799 Pre-auth	High7.5	—	1.7%	Jul 12, 2021
30Monitor	CVE-2024-9199No exploit	Rate limit vulnerability in Clibo Managerclibomanager · clibo manager · CWE-799 Pre-auth Denial of service	High7.5	—	0.3%	Sep 26, 2024
29Monitor	CVE-2023-38068No exploit	In JetBrains YouTrack before 2023.1.16597 captcha was not properly validated for Helpdesk formsjetbrains · youtrack · CWE-799 Pre-auth	High7.3	—	0.5%	Jul 12, 2023
28Monitor	CVE-2024-47654No exploit	No Rate Limiting vulnerabilityshilpisoft · client dashboard · CWE-799	High7.1	—	0.4%	Oct 4, 2024
28Monitor	CVE-2024-51557No exploit	No Rate Limiting Vulnerability in Wave 2.063moons · aero · CWE-799	High7.1	—	0.4%	Nov 4, 2024
28Monitor	CVE-2026-33434No exploit	Wazuh: Rate Limit Bypass via /events Endpointwazuh · wazuh · CWE-799	High7.1	—	0.4%	Jul 16, 2026
28Monitor	CVE-2026-5233No exploit	Missing Rate Limiting in Mia Technologies' Pizzy Librarymia technology inc. · pizzy library · CWE-799	High7.1	—	0.2%	Jun 15, 2026
27Monitor	CVE-2026-85586No exploit	phpMyFAQ before 4.1.8 CAPTCHA Bypass via store parameterthorsten · phpmyfaq · CWE-799 Pre-auth	Medium6.9	—	0.4%	Sep 4, 2026
27Monitor	CVE-2026-41343No exploit	OpenClaw < 2026.3.31 - Denial of Service via LINE Webhook Handler Pre-Auth Concurrencyopenclaw · openclaw · CWE-799 Pre-auth	Medium6.9	—	0.4%	Apr 23, 2026
27Monitor	CVE-2026-107830No exploit	Jivejdon through commit ee67a65e Missing Rate Limiting via /account/smsVRAction SMS Endpointbanq · jivejdon · CWE-799 Pre-auth	Medium6.9	—	0.3%	Oct 8, 2026
27Monitor	CVE-2026-30972No exploit	Parse Server has a rate limit bypass via batch request endpointparseplatform · parse-server · CWE-799 Pre-auth	Medium6.9	—	0.3%	Mar 10, 2026
27Monitor	CVE-2026-22216No exploit	wpDiscuz before 7.6.47 - No Rate Limiting on Subscription Endpoints with LIKE Wildcard Bypassgvectors · wpdiscuz · CWE-799 Pre-auth	Medium6.9	—	0.3%	Mar 13, 2026
27Monitor	CVE-2025-32378No exploit	Shopware's default newsletter opt-in settings allow for mass sign-up abuseshopware · shopware · CWE-799 Pre-auth	Medium6.9	—	0.3%	Apr 9, 2025

CVE-2025-54321
39Monitor
In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the reset password function, leading to an email bombing vulnerabi
CriticalCVSS 9.8Proof of conceptEPSS 0%
- Pre-auth
ascertia · signinghubNov 18, 2025
CVE-2023-40332
39Monitor
WordPress WP-PostRatings plugin <= 1.91 - Rating limit Bypass vulnerability
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
lesterchan · wp-postratingsJun 4, 2024
CVE-2023-7006
36Monitor
The unlockKey character in a lock using Sciener firmware can be brute forced through repeated challenge requests, compromising the locks int
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
sciener · kontrol luxMar 15, 2024
CVE-2024-45788
34Monitor
No Rate Limiting Vulnerability
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
reedos · aim-starSep 11, 2024
CVE-2024-35246
34Monitor
Westermo L210-F2G Lynx Improper Control of Interaction Frequency
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
westermo · l210-f2g lynx firmwareJun 20, 2024
CVE-2024-32943
34Monitor
Westermo L210-F2G Lynx Improper Control of Interaction Frequency
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
westermo · l210-f2g firmwareJun 20, 2024
CVE-2026-100603
34Monitor
ClawHub before 8c2de6c506 Skill Hiding via Coordinated Reports
HighCVSS 8.7No exploitEPSS 0%
openclaw · clawhubSep 26, 2026
CVE-2021-41177
32Monitor
Rate-limits not working on instances without configured memory cache backend
HighCVSS 8.1No exploitEPSS 1%
nextcloud · nextcloud serverOct 25, 2021
CVE-2026-24017
32Monitor
An Improper Control of Interaction Frequency vulnerability [CWE-799] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- Auth bypass
fortinet · fortiwebMar 10, 2026
CVE-2025-29998
32Monitor
No Rate Limiting Vulnerability in CAP back office application
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
rising technosoft · cap back office applicationMar 13, 2025
CVE-2026-7402
32Monitor
Improper Rate Limiting in MeWare Software's PDKS
HighCVSS 8.1No exploitEPSS 0%
meware software development inc. · pdksApr 30, 2026
CVE-2023-35621
31Monitor
Microsoft Dynamics 365 Finance and Operations Denial of Service Vulnerability
HighCVSS 7.5No exploitEPSS 2%
- Pre-auth
- Denial of service
microsoft · dynamics 365Dec 12, 2023
CVE-2021-32705
31Monitor
Lack of ratelimit on public DAV endpoint
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
nextcloud · nextcloud serverJul 12, 2021
CVE-2024-9199
30Monitor
Rate limit vulnerability in Clibo Manager
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
clibomanager · clibo managerSep 26, 2024
CVE-2023-38068
29Monitor
In JetBrains YouTrack before 2023.1.16597 captcha was not properly validated for Helpdesk forms
HighCVSS 7.3No exploitEPSS 0%
- Pre-auth
jetbrains · youtrackJul 12, 2023
CVE-2024-47654
28Monitor
No Rate Limiting vulnerability
HighCVSS 7.1No exploitEPSS 0%
shilpisoft · client dashboardOct 4, 2024
CVE-2024-51557
28Monitor
No Rate Limiting Vulnerability in Wave 2.0
HighCVSS 7.1No exploitEPSS 0%
63moons · aeroNov 4, 2024
CVE-2026-33434
28Monitor
Wazuh: Rate Limit Bypass via /events Endpoint
HighCVSS 7.1No exploitEPSS 0%
wazuh · wazuhJul 16, 2026
CVE-2026-5233
28Monitor
Missing Rate Limiting in Mia Technologies' Pizzy Library
HighCVSS 7.1No exploitEPSS 0%
mia technology inc. · pizzy libraryJun 15, 2026
CVE-2026-85586
27Monitor
phpMyFAQ before 4.1.8 CAPTCHA Bypass via store parameter
MediumCVSS 6.9No exploitEPSS 0%
- Pre-auth
thorsten · phpmyfaqSep 4, 2026
CVE-2026-41343
27Monitor
OpenClaw < 2026.3.31 - Denial of Service via LINE Webhook Handler Pre-Auth Concurrency
MediumCVSS 6.9No exploitEPSS 0%
- Pre-auth
openclaw · openclawApr 23, 2026
CVE-2026-107830
27Monitor
Jivejdon through commit ee67a65e Missing Rate Limiting via /account/smsVRAction SMS Endpoint
MediumCVSS 6.9No exploitEPSS 0%
- Pre-auth
banq · jivejdonOct 8, 2026
CVE-2026-30972
27Monitor
Parse Server has a rate limit bypass via batch request endpoint
MediumCVSS 6.9No exploitEPSS 0%
- Pre-auth
parseplatform · parse-serverMar 10, 2026
CVE-2026-22216
27Monitor
wpDiscuz before 7.6.47 - No Rate Limiting on Subscription Endpoints with LIKE Wildcard Bypass
MediumCVSS 6.9No exploitEPSS 0%
- Pre-auth
gvectors · wpdiscuzMar 13, 2026
CVE-2025-32378
27Monitor
Shopware's default newsletter opt-in settings allow for mass sign-up abuse
MediumCVSS 6.9No exploitEPSS 0%
- Pre-auth
shopware · shopwareApr 9, 2025

All vulnerability classes