CWE-799 · 59 kayıt
Improper Control of Interaction Frequency
Bu sınıftaki CVE’ler
59 kayıt
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2025-54321Kavram kanıtı | In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the reset password function, leading to an email bombing vulnerabiascertia · signinghub · CWE-799 | Kritik9,8 | — | %0,5 | 18 Kas 2025 |
39İzleyin | CVE-2023-40332İstismar yok | WordPress WP-PostRatings plugin <= 1.91 - Rating limit Bypass vulnerabilitylesterchan · wp-postratings · CWE-799 | Kritik9,8 | — | %0,4 | 4 Haz 2024 |
36İzleyin | CVE-2023-7006İstismar yok | The unlockKey character in a lock using Sciener firmware can be brute forced through repeated challenge requests, compromising the locks intsciener · kontrol lux · CWE-799 | Kritik9,1 | — | %0,5 | 15 Mar 2024 |
34İzleyin | CVE-2024-45788İstismar yok | No Rate Limiting Vulnerabilityreedos · aim-star · CWE-799 | Yüksek8,7 | — | %0,5 | 11 Eyl 2024 |
34İzleyin | CVE-2024-32943İstismar yok | Westermo L210-F2G Lynx Improper Control of Interaction Frequencywestermo · l210-f2g firmware · CWE-799 | Yüksek8,7 | — | %0,5 | 20 Haz 2024 |
34İzleyin | CVE-2024-35246İstismar yok | Westermo L210-F2G Lynx Improper Control of Interaction Frequencywestermo · l210-f2g lynx firmware · CWE-799 | Yüksek8,7 | — | %0,5 | 20 Haz 2024 |
34İzleyin | CVE-2026-100603İstismar yok | ClawHub before 8c2de6c506 Skill Hiding via Coordinated Reportsopenclaw · clawhub · CWE-799 | Yüksek8,7 | — | %0,3 | 3 gün önce |
32İzleyin | CVE-2021-41177İstismar yok | Rate-limits not working on instances without configured memory cache backendnextcloud · nextcloud server · CWE-799 | Yüksek8,1 | — | %1,6 | 25 Eki 2021 |
32İzleyin | CVE-2026-24017İstismar yok | An Improper Control of Interaction Frequency vulnerability [CWE-799] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 fortinet · fortiweb · CWE-799 | Yüksek8,1 | — | %0,8 | 10 Mar 2026 |
32İzleyin | CVE-2026-7402İstismar yok | Improper Rate Limiting in MeWare Software's PDKSmeware software development inc. · pdks · CWE-799 | Yüksek8,1 | — | %0,5 | 30 Nis 2026 |
32İzleyin | CVE-2025-29998İstismar yok | No Rate Limiting Vulnerability in CAP back office applicationrising technosoft · cap back office application · CWE-799 | Yüksek8,2 | — | %0,4 | 13 Mar 2025 |
31İzleyin | CVE-2023-35621İstismar yok | Microsoft Dynamics 365 Finance and Operations Denial of Service Vulnerabilitymicrosoft · dynamics 365 · CWE-799 | Yüksek7,5 | — | %2,3 | 12 Ara 2023 |
31İzleyin | CVE-2021-32705İstismar yok | Lack of ratelimit on public DAV endpointnextcloud · nextcloud server · CWE-799 | Yüksek7,5 | — | %1,7 | 12 Tem 2021 |
30İzleyin | CVE-2024-9199İstismar yok | Rate limit vulnerability in Clibo Managerclibomanager · clibo manager · CWE-799 | Yüksek7,5 | — | %0,3 | 26 Eyl 2024 |
29İzleyin | CVE-2023-38068İstismar yok | In JetBrains YouTrack before 2023.1.16597 captcha was not properly validated for Helpdesk formsjetbrains · youtrack · CWE-799 | Yüksek7,3 | — | %0,6 | 12 Tem 2023 |
28İzleyin | CVE-2024-47654İstismar yok | No Rate Limiting vulnerabilityshilpisoft · client dashboard · CWE-799 | Yüksek7,1 | — | %0,5 | 4 Eki 2024 |
28İzleyin | CVE-2024-51557İstismar yok | No Rate Limiting Vulnerability in Wave 2.063moons · aero · CWE-799 | Yüksek7,1 | — | %0,5 | 4 Kas 2024 |
28İzleyin | CVE-2026-33434İstismar yok | Wazuh: Rate Limit Bypass via /events Endpointwazuh · wazuh · CWE-799 | Yüksek7,1 | — | %0,4 | 16 Tem 2026 |
28İzleyin | CVE-2026-5233İstismar yok | Missing Rate Limiting in Mia Technologies' Pizzy Librarymia technology inc. · pizzy library · CWE-799 | Yüksek7,1 | — | %0,4 | 15 Haz 2026 |
27İzleyin | CVE-2026-41343İstismar yok | OpenClaw < 2026.3.31 - Denial of Service via LINE Webhook Handler Pre-Auth Concurrencyopenclaw · openclaw · CWE-799 | Orta6,9 | — | %0,8 | 23 Nis 2026 |
27İzleyin | CVE-2026-30972İstismar yok | Parse Server has a rate limit bypass via batch request endpointparseplatform · parse-server · CWE-799 | Orta6,9 | — | %0,6 | 10 Mar 2026 |
27İzleyin | CVE-2026-85586İstismar yok | phpMyFAQ before 4.1.8 CAPTCHA Bypass via store parameterthorsten · phpmyfaq · CWE-799 | Orta6,9 | — | %0,5 | 4 Eyl 2026 |
27İzleyin | CVE-2026-22216İstismar yok | wpDiscuz before 7.6.47 - No Rate Limiting on Subscription Endpoints with LIKE Wildcard Bypassgvectors · wpdiscuz · CWE-799 | Orta6,9 | — | %0,3 | 13 Mar 2026 |
27İzleyin | CVE-2025-32378İstismar yok | Shopware's default newsletter opt-in settings allow for mass sign-up abuseshopware · shopware · CWE-799 | Orta6,9 | — | %0,3 | 9 Nis 2025 |
26İzleyin | CVE-2020-5141İstismar yok | A vulnerability in SonicOS allows a remote unauthenticated attacker to brute force Virtual Assist ticket ID in the firewall SSLVPN service.sonicwall · sonicos · CWE-799 | Orta6,5 | — | %1,3 | 12 Eki 2020 |
- CVE-2025-5432139İzleyin
In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the reset password function, leading to an email bombing vulnerabi
KritikCVSS 9,8Kavram kanıtıEPSS %0ascertia · signinghub18 Kas 2025
- CVE-2023-4033239İzleyin
WordPress WP-PostRatings plugin <= 1.91 - Rating limit Bypass vulnerability
KritikCVSS 9,8İstismar yokEPSS %0lesterchan · wp-postratings4 Haz 2024
- CVE-2023-700636İzleyin
The unlockKey character in a lock using Sciener firmware can be brute forced through repeated challenge requests, compromising the locks int
KritikCVSS 9,1İstismar yokEPSS %1sciener · kontrol lux15 Mar 2024
- CVE-2024-4578834İzleyin
No Rate Limiting Vulnerability
YüksekCVSS 8,7İstismar yokEPSS %0reedos · aim-star11 Eyl 2024
- CVE-2024-3294334İzleyin
Westermo L210-F2G Lynx Improper Control of Interaction Frequency
YüksekCVSS 8,7İstismar yokEPSS %0westermo · l210-f2g firmware20 Haz 2024
- CVE-2024-3524634İzleyin
Westermo L210-F2G Lynx Improper Control of Interaction Frequency
YüksekCVSS 8,7İstismar yokEPSS %0westermo · l210-f2g lynx firmware20 Haz 2024
- CVE-2026-10060334İzleyin
ClawHub before 8c2de6c506 Skill Hiding via Coordinated Reports
YüksekCVSS 8,7İstismar yokEPSS %0openclaw · clawhub3 gün önce
- CVE-2021-4117732İzleyin
Rate-limits not working on instances without configured memory cache backend
YüksekCVSS 8,1İstismar yokEPSS %2nextcloud · nextcloud server25 Eki 2021
- CVE-2026-2401732İzleyin
An Improper Control of Interaction Frequency vulnerability [CWE-799] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0
YüksekCVSS 8,1İstismar yokEPSS %1fortinet · fortiweb10 Mar 2026
- CVE-2026-740232İzleyin
Improper Rate Limiting in MeWare Software's PDKS
YüksekCVSS 8,1İstismar yokEPSS %0meware software development inc. · pdks30 Nis 2026
- CVE-2025-2999832İzleyin
No Rate Limiting Vulnerability in CAP back office application
YüksekCVSS 8,2İstismar yokEPSS %0rising technosoft · cap back office application13 Mar 2025
- CVE-2023-3562131İzleyin
Microsoft Dynamics 365 Finance and Operations Denial of Service Vulnerability
YüksekCVSS 7,5İstismar yokEPSS %2microsoft · dynamics 36512 Ara 2023
- CVE-2021-3270531İzleyin
Lack of ratelimit on public DAV endpoint
YüksekCVSS 7,5İstismar yokEPSS %2nextcloud · nextcloud server12 Tem 2021
- CVE-2024-919930İzleyin
Rate limit vulnerability in Clibo Manager
YüksekCVSS 7,5İstismar yokEPSS %0clibomanager · clibo manager26 Eyl 2024
- CVE-2023-3806829İzleyin
In JetBrains YouTrack before 2023.1.16597 captcha was not properly validated for Helpdesk forms
YüksekCVSS 7,3İstismar yokEPSS %1jetbrains · youtrack12 Tem 2023
- CVE-2024-4765428İzleyin
No Rate Limiting vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0shilpisoft · client dashboard4 Eki 2024
- CVE-2024-5155728İzleyin
No Rate Limiting Vulnerability in Wave 2.0
YüksekCVSS 7,1İstismar yokEPSS %063moons · aero4 Kas 2024
- CVE-2026-3343428İzleyin
Wazuh: Rate Limit Bypass via /events Endpoint
YüksekCVSS 7,1İstismar yokEPSS %0wazuh · wazuh16 Tem 2026
- CVE-2026-523328İzleyin
Missing Rate Limiting in Mia Technologies' Pizzy Library
YüksekCVSS 7,1İstismar yokEPSS %0mia technology inc. · pizzy library15 Haz 2026
- CVE-2026-4134327İzleyin
OpenClaw < 2026.3.31 - Denial of Service via LINE Webhook Handler Pre-Auth Concurrency
OrtaCVSS 6,9İstismar yokEPSS %1openclaw · openclaw23 Nis 2026
- CVE-2026-3097227İzleyin
Parse Server has a rate limit bypass via batch request endpoint
OrtaCVSS 6,9İstismar yokEPSS %1parseplatform · parse-server10 Mar 2026
- CVE-2026-8558627İzleyin
phpMyFAQ before 4.1.8 CAPTCHA Bypass via store parameter
OrtaCVSS 6,9İstismar yokEPSS %0thorsten · phpmyfaq4 Eyl 2026
- CVE-2026-2221627İzleyin
wpDiscuz before 7.6.47 - No Rate Limiting on Subscription Endpoints with LIKE Wildcard Bypass
OrtaCVSS 6,9İstismar yokEPSS %0gvectors · wpdiscuz13 Mar 2026
- CVE-2025-3237827İzleyin
Shopware's default newsletter opt-in settings allow for mass sign-up abuse
OrtaCVSS 6,9İstismar yokEPSS %0shopware · shopware9 Nis 2025
- CVE-2020-514126İzleyin
A vulnerability in SonicOS allows a remote unauthenticated attacker to brute force Virtual Assist ticket ID in the firewall SSLVPN service.
OrtaCVSS 6,5İstismar yokEPSS %1sonicwall · sonicos12 Eki 2020