Search Vulnerabilities

OpenProject has no protection against brute-force attacks in the Change Password function

Improper Authentication in Restajet's Online Food Delivery System

Misskey has a login rate limit bypass via spoofed X-Forwarded-For header

WBCE CMS allows brute-force protection bypass using X-Forwarded-For header

Improper Restriction of Excessive Authentication Attempts vulnerability in CIRCL Vulnerability-Lookup

Dell CloudBoost Virtual Appliance, versions 19

Medtronic CareLink Network allows an unauthenticated remote attacker to perform a brute force attack on an API endpoint that could be used to deter...

EPSON WebConfig and Epson Web Control for SEIKO EPSON Projector Products do not restrict excessive authentication attempts

Bruteforce Protection Bypass in Windu CMS

CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that would allow an attacker on the local network to gain a...

Authentication Bypass in Turkguven's Perfektive

Improper resource management in firmware of some Solidigm DC Products may allow an attacker with local or physical access to gain un-authorized acc...

LogicalDOC Community Edition Admin Login login.jsp excessive authentication

Nagios Fusion < 2024R2.1 2FA Brute Force Bypass

Password enumeration vulnerability in Liferay Portal 7

Access code - Moderately critical - Access bypass - SA-CONTRIB-2025-108

Zitadel allows brute-forcing authentication factors

VirtFusion Email Change _settings excessive authentication

PingFederate unexpected browser flow initiation in redirectless mode

Moodle: password brute force risk when mobile/web services enabled