Vulnerabilities > Improper Restriction of Excessive Authentication Attempts

DATE CVE VULNERABILITY TITLE RISK
2024-03-18 CVE-2024-21662 Improper Restriction of Excessive Authentication Attempts vulnerability in Argoproj Argo CD
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes.
network
low complexity
argoproj CWE-307
critical
9.1
2024-03-18 CVE-2024-21652 Improper Restriction of Excessive Authentication Attempts vulnerability in Argoproj Argo CD
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes.
network
low complexity
argoproj CWE-307
critical
9.8
2024-02-19 CVE-2024-1345 Improper Restriction of Excessive Authentication Attempts vulnerability in Laborofficefree 19.10
Weak MySQL database root password in LaborOfficeFree affects version 19.10.
local
low complexity
laborofficefree CWE-307
5.5
2024-02-09 CVE-2023-45190 Improper Restriction of Excessive Authentication Attempts vulnerability in IBM Engineering Lifecycle Optimization 7.0.2/7.0.3
IBM Engineering Lifecycle Optimization 7.0.2 and 7.0.3 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers.
network
low complexity
ibm CWE-307
6.1
2024-01-25 CVE-2023-33759 Improper Restriction of Excessive Authentication Attempts vulnerability in Splicecom Maximiser Soft PBX
SpliceCom Maximiser Soft PBX v1.5 and before does not restrict excessive authentication attempts, allowing attackers to bypass authentication via a brute force attack.
network
low complexity
splicecom CWE-307
critical
9.8
2024-01-22 CVE-2022-45790 Improper Restriction of Excessive Authentication Attempts vulnerability in Omron products
The Omron FINS protocol has an authenticated feature to prevent access to memory regions.
network
low complexity
omron CWE-307
critical
9.1
2024-01-11 CVE-2023-50123 Improper Restriction of Excessive Authentication Attempts vulnerability in Hozard Alarm System 1.0
The number of attempts to bring the Hozard Alarm system (alarmsystemen) v1.0 to a disarmed state is not limited.
network
high complexity
hozard CWE-307
8.1
2023-12-20 CVE-2023-6912 Improper Restriction of Excessive Authentication Attempts vulnerability in M-Files Server
Lack of protection against brute force attacks in M-Files Server before 23.12.13205.0 allows an attacker unlimited authentication attempts, potentially compromising targeted M-Files user accounts by guessing passwords.
network
low complexity
m-files CWE-307
critical
9.8
2023-12-20 CVE-2023-27172 Improper Restriction of Excessive Authentication Attempts vulnerability in Xpand-It Write-Back Manager 2.3.1
Xpand IT Write-back Manager v2.3.1 uses weak secret keys to sign JWT tokens.
network
low complexity
xpand-it CWE-307
critical
9.1
2023-12-19 CVE-2023-6928 Improper Restriction of Excessive Authentication Attempts vulnerability in Eurotel Etl3100 Firmware 01C01/01X37
EuroTel ETL3100 versions v01c01 and v01x37 does not limit the number of attempts to guess administrative credentials in remote password attacks to gain full control of the system.
network
low complexity
eurotel CWE-307
critical
9.8