Перейти к содержимому
Noroxi

CWE-307 · 638 записей

Improper Restriction of Excessive Authentication Attempts

CVE этого класса

638 записей

  • CVE-2019-17240
    51В плане

    bl-kernel/security.class.php in Bludit 3.9.2 allows attackers to bypass a brute-force protection mechanism by using many different forged X-

    КритическаяCVSS 9,8Proof of conceptEPSS 40 %

    bludit · bludit6 окт. 2019 г.

  • CVE-2020-15906
    47В плане

    tiki-login.php in Tiki before 21.2 sets the admin password to a blank value after 50 invalid login attempts.

    КритическаяCVSS 9,8Proof of conceptEPSS 27 %

    tiki · tiki22 окт. 2020 г.

  • CVE-2025-4094
    44В плане

    Digits < 8.4.6.1 - Auth Bypass via OTP Bruteforcing

    КритическаяCVSS 9,8Proof of conceptEPSS 16 %

    unitedover · digits21 мая 2025 г.

  • CVE-2024-39225
    43В плане

    GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/A1300/X300B v4.5.16,

    КритическаяCVSS 9,8Эксплойта нетEPSS 14 %

    gl-inet · mt6000 firmware6 авг. 2024 г.

  • CVE-2023-27100
    42В плане

    Improper restriction of excessive authentication attempts in the SSHGuard component of Netgate pfSense Plus software v22.05.1 and pfSense CE

    КритическаяCVSS 9,8Proof of conceptEPSS 10 %

    netgate · pfsense plus22 мар. 2023 г.

  • CVE-2001-1291
    42В плане

    The telnet server for 3Com hardware such as PS40 SuperStack II does not delay or disconnect remote attackers who provide an incorrect userna

    КритическаяCVSS 9,8Proof of conceptEPSS 9 %

    3com · superstack ii ps hub 40 firmware12 июл. 2001 г.

  • CVE-2001-1339
    41В плане

    Beck IPC GmbH IPC@CHIP telnet service does not delay or disconnect users from the service when bad passwords are entered, which makes it eas

    КритическаяCVSS 9,8Proof of conceptEPSS 7 %

    anybus · ipc\@chip firmware24 мая 2001 г.

  • CVE-2021-41435
    41В плане

    A brute-force protection bypass in CAPTCHA protection in ASUS ROG Rapture GT-AX11000, RT-AX3000, RT-AX55, RT-AX56U, RT-AX56U_V2, RT-AX58U, R

    КритическаяCVSS 9,8Эксплойта нетEPSS 6 %

    asus · gt-ax11000 firmware19 нояб. 2021 г.

  • CVE-2017-7898
    41В плане

    An Improper Restriction of Excessive Authentication Attempts issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 progr

    КритическаяCVSS 9,8Эксплойта нетEPSS 5 %

    rockwellautomation · 1763-l16awa series a29 июн. 2017 г.

  • CVE-2023-29301
    40В плане

    Adobe ColdFusion Improper Restriction of Excessive Authentication Attempts Security feature bypass

    ВысокаяCVSS 7,5Эксплойта нетEPSS 35 %

    adobe · coldfusion12 июл. 2023 г.

  • CVE-2020-7995
    40В плане

    The htdocs/index.php?mainmenu=home login page in Dolibarr 10.0.6 allows an unlimited rate of failed authentication attempts.

    КритическаяCVSS 9,8Эксплойта нетEPSS 5 %

    dolibarr · dolibarr erp\/crm26 янв. 2020 г.

  • CVE-2020-35590
    40В плане

    LimitLoginAttempts.php in the limit-login-attempts-reloaded plugin before 2.17.4 for WordPress allows a bypass of (per IP address) rate limi

    КритическаяCVSS 9,8Proof of conceptEPSS 4 %

    limitloginattempts · limit login attempts reloaded21 дек. 2020 г.

  • CVE-2021-27514
    40В плане

    EyesOfNetwork 5.3-10 uses an integer of between 8 and 10 digits for the session ID, which might be leveraged for brute-force authentication

    КритическаяCVSS 9,8Эксплойта нетEPSS 4 %

    eyesofnetwork · eyesofnetwork21 февр. 2021 г.

  • CVE-1999-1324
    40В плане

    VAXstations running Open VMS 5.3 through 5.5-2 with VMS DECwindows or MOTIF do not properly disable access to user accounts that exceed the

    КритическаяCVSS 9,8Эксплойта нетEPSS 3 %

    hp · openvms vax31 дек. 1999 г.

  • CVE-2018-1373
    40В плане

    IBM Security Guardium Big Data Intelligence (SonarG) 3.1 uses an inadequate account lockout setting that could allow a remote attacker to br

    КритическаяCVSS 9,8Эксплойта нетEPSS 3 %

    ibm · security guardium big data intelligence2 мар. 2018 г.

  • CVE-2018-5469
    40В плане

    An Improper Restriction of Excessive Authentication Attempts issue was discovered in Belden Hirschmann RS, RSR, RSB, MACH100, MACH1000, MACH

    КритическаяCVSS 9,8Эксплойта нетEPSS 3 %

    belden · hirschmann rs20-0900mmm2tdau6 мар. 2018 г.

  • CVE-2020-28212
    40В плане

    A CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists in PLC Simulator on EcoStruxureª Control Expert (n

    КритическаяCVSS 9,8Эксплойта нетEPSS 3 %

    schneider-electric · ecostruxure control expert19 нояб. 2020 г.

  • CVE-2019-6524
    40В плане

    Moxa IKS and EDS do not implement sufficient measures to prevent multiple failed authentication attempts, which may allow an attacker to dis

    КритическаяCVSS 9,8Эксплойта нетEPSS 3 %

    moxa · iks-g6824a firmware5 мар. 2019 г.

  • CVE-2020-6852
    40В плане

    CACAGOO Cloud Storage Intelligent Camera TV-288ZD-2MP with firmware 3.4.2.0919 has weak authentication of TELNET access, leading to root pri

    КритическаяCVSS 9,8Эксплойта нетEPSS 2 %

    cacagoo · tv-288zd-2mp firmware2 апр. 2020 г.

  • CVE-2023-36434
    40В плане

    Windows IIS Server Elevation of Privilege Vulnerability

    КритическаяCVSS 9,8Эксплойта нетEPSS 2 %

    microsoft · windows 10 150710 окт. 2023 г.

  • CVE-2019-12941
    40В плане

    AutoPi Wi-Fi/NB and 4G/LTE devices before 2019-10-15 allows an attacker to perform a brute-force attack or dictionary attack to gain access

    КритическаяCVSS 9,8Эксплойта нетEPSS 2 %

    autopi · wi-fi\/nb firmware14 окт. 2019 г.

  • CVE-2013-4441
    40В плане

    The Phonemes mode in Pwgen 2.06 generates predictable passwords, which makes it easier for context-dependent attackers to guess the password

    КритическаяCVSS 9,8Эксплойта нетEPSS 2 %

    pwgen project · pwgen27 янв. 2020 г.

  • CVE-2020-4567
    40В плане

    IBM Tivoli Key Lifecycle Manager 3.0.1 and 4.0 uses an inadequate account lockout setting that could allow a remote attacker to brute force

    КритическаяCVSS 9,8Эксплойта нетEPSS 2 %

    ibm · security key lifecycle manager29 июл. 2020 г.

  • CVE-2016-9124
    40В плане

    Revive Adserver before 3.2.3 suffers from Improper Restriction of Excessive Authentication Attempts.

    КритическаяCVSS 9,8Эксплойта нетEPSS 2 %

    revive-adserver · revive adserver27 мар. 2017 г.

  • CVE-2018-1475
    40В плане

    IBM BigFix Platform 9.2 and 9.5 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credent

    КритическаяCVSS 9,8Эксплойта нетEPSS 2 %

    ibm · bigfix platform27 апр. 2018 г.

Все классы уязвимостей