Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
brute force vulnerabilities and exploits
(subscribe to this query)
356
VMScore
CVE-2021-41171
eLabFTW is an open source electronic lab notebook manager for research teams. In versions of eLabFTW prior to 4.1.0, it allows malicious users to bypass a brute-force protection mechanism by using many different forged PHPSESSID values in HTTP Cookie header. This issue has been a...
Elabftw Elabftw
445
VMScore
CVE-2013-2257
Cryptocat prior to 2.0.42 has Group Chat ECC Private Key Generation Brute Force Weakness
Cryptocat Project Cryptocat
NA
CVE-2023-26756
The login page of Revive Adserver v5.4.1 is vulnerable to brute force attacks.
Revive Adserver 5.4.1
NA
CVE-2024-21662
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Prior to versions 2.8.13, 2.9.9, and 2.10.4, an attacker can effectively bypass the rate limit and brute force protections by exploiting the application's weak cache-based mechanism. This loophole in s...
445
VMScore
CVE-2017-7551
389-ds-base version prior to 1.3.5.19 and 1.3.6.7 are vulnerable to password brute-force attacks during account lockout due to different return codes returned on password attempts.
Fedoraproject 389 Directory Server 1.3.6.7
Fedoraproject 389 Directory Server 1.3.5.19
445
VMScore
CVE-2019-4068
IBM Intelligent Operations Center (IOC) 5.1.0 up to and including 5.2.0 is vulnerable to user enumeration, allowing an malicious user to brute force into the system. IBM X-Force ID: 157013.
Ibm Intelligent Operations Center
Ibm Intelligent Operations Center For Emergency Management
Ibm Water Operations For Waternamics
445
VMScore
CVE-2019-4520
IBM Security Directory Server 6.4.0 uses an inadequate account lockout setting that could allow a remote malicious user to brute force account credentials. IBM X-Force ID: 165178.
Ibm Security Directory Server 6.4.0
445
VMScore
CVE-2016-8964
IBM BigFix Inventory v9 9.2 uses an inadequate account lockout setting that could allow a remote malicious user to brute force account credentials. IBM X-Force ID: 118853.
Ibm License Metric Tool
Ibm Bigfix Inventory
NA
CVE-2023-41879
Magento LTS is the official OpenMage LTS codebase. Guest orders may be viewed without authentication using a "guest-view" cookie which contains the order's "protect_code". This code is 6 hexadecimal characters which is arguably not enough to prevent a bru...
Openmage Magento
NA
CVE-2023-34227
In JetBrains TeamCity prior to 2023.05 a specific endpoint was vulnerable to brute force attacks
Jetbrains Teamcity
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
hardcoded
arbitrary code
CVE-2024-2404
CVE-2024-21111
CVE-2024-28627
CVE-2024-4073
information disclosure
CVE-2024-32780
CVE-2024-4040
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
8
9
10
NEXT »