Vulnerabilities > Improper Restriction of Excessive Authentication Attempts

DATE CVE VULNERABILITY TITLE RISK
2023-06-08 CVE-2023-34243 Improper Restriction of Excessive Authentication Attempts vulnerability in Tgstation13 Tgstation-Server
TGstation is a toolset to manage production BYOND servers.
network
low complexity
tgstation13 CWE-307
5.3
2023-06-01 CVE-2023-33754 Improper Restriction of Excessive Authentication Attempts vulnerability in Inpiazza Cloud Wifi
The captive portal in Inpiazza Cloud WiFi versions prior to v4.2.17 does not enforce limits on the number of attempts for password recovery, allowing attackers to brute force valid user accounts to gain access to login credentials.
network
low complexity
inpiazza CWE-307
6.5
2023-05-30 CVE-2023-23755 Improper Restriction of Excessive Authentication Attempts vulnerability in Joomla Joomla!
An issue was discovered in Joomla! 4.2.0 through 4.3.1.
network
low complexity
joomla CWE-307
7.5
2023-05-26 CVE-2023-32319 Improper Restriction of Excessive Authentication Attempts vulnerability in Nextcloud Server
Nextcloud server is an open source personal cloud implementation.
network
low complexity
nextcloud CWE-307
6.5
2023-05-25 CVE-2023-32074 Improper Restriction of Excessive Authentication Attempts vulnerability in Nextcloud User Oidc
user_oidc app is an OpenID Connect user backend for Nextcloud.
network
low complexity
nextcloud CWE-307
critical
9.8
2023-05-05 CVE-2023-2531 Improper Restriction of Excessive Authentication Attempts vulnerability in Azuracast
Improper Restriction of Excessive Authentication Attempts in GitHub repository azuracast/azuracast prior to 0.18.3.
network
low complexity
azuracast CWE-307
critical
9.8
2023-04-25 CVE-2023-28847 Improper Restriction of Excessive Authentication Attempts vulnerability in Nextcloud Server
Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform.
network
low complexity
nextcloud CWE-307
7.5
2023-04-18 CVE-2022-43377 Improper Restriction of Excessive Authentication Attempts vulnerability in Schneider-Electric products
A CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that could cause account takeover when a brute force attack is performed on the account. Affected Products: NetBotz 4 - 355/450/455/550/570 (V4.7.0 and prior)
network
low complexity
schneider-electric CWE-307
7.5
2023-04-15 CVE-2022-2525 Improper Restriction of Excessive Authentication Attempts vulnerability in Janeczku Calibre-Web
Improper Restriction of Excessive Authentication Attempts in GitHub repository janeczku/calibre-web prior to 0.6.20.
network
low complexity
janeczku CWE-307
critical
9.8
2023-04-14 CVE-2023-26756 Improper Restriction of Excessive Authentication Attempts vulnerability in Revive Adserver 5.4.1
The login page of Revive Adserver v5.4.1 is vulnerable to brute force attacks.
network
low complexity
revive CWE-307
7.5