CWE-640.

A host header injection vulnerability in Staff Appraisal System v1.0 allows attackers to obtain the password reset token via user interaction with a crafted password reset link.

• CWE-640

HaloITSM - Password Reset Poisoning

• Halo Service Solutions HaloITSM
• CWE-640

The password-reset mechanism in the Forgot Password functionality in R-HUB TurboMeeting through 8.x allows unauthenticated remote attackers to force the application into resetting the administrator's…

• CWE-640

Login with phone number <= 1.7.34 - Insecure Password Reset Mechanism

• glboy OTP Login With Phone Number, OTP Verification
• CWE-640

Shenzhen Guoxin Synthesis image system before 8.3.0 allows unauthorized password resets via the resetPassword API.

• CWE-640

Keycloak Denial of Service via account lockout

• CWE-640
• CWE-645

<24.0.0 · fixed in 24.0.0

Build App Online <= 1.0.22 - Account Takeover via Weak Password Reset Mechanism

• hakeemnala Build App Online
• CWE-640

SuiteCRM unauthenticated user password reset on php7

• salesagility SuiteCRM
• CWE-640

Weak Password Recovery Mechanism in lunary-ai/lunary

• lunary-ai/lunary
• CWE-640

ifm: moneo prone to weak password recovery mechanism

• ifm moneo appliance QVA200
• ifm moneo appliance QHA210
• CWE-640

TP-Link Tapo C210 Password Recovery Authentication Bypass Vulnerability

• TP-Link Tapo C210
• CWE-640

In Jitsi Meet before 9391, a logic flaw in password-protected Jitsi meetings (that make use of a lobby) leads to the disclosure of the meeting password when a user is invited to a call after waiting…

• CWE-640

Security misconfiguration vulnerability in SAP NetWeaver AS Java User Management Engine

• SAP_SE SAP NetWeaver AS Java User Management Engine
• CWE-640

Weak password recovery mechanism in CDeX

• CDeX
• CWE-640

Weak password recovery in Dell Secure Connect Gateway (SCG) Policy Manager

• Dell Secure Connect Gateway (SCG) Policy Manager
• CWE-640

Liferay Portal and Liferay DXP Does Not Obfuscate Password Reminder Answers

• CWE-640

<5.0.18 · fixed in 5.0.18

Weak password recovery in Dell PowerProtect Data Manager

• Dell PowerProtect Data Manager
• CWE-640

Huaxia ERP UserController.java password recovery

• Huaxia ERP
• CWE-640

Weak Password Recovery Mechanism for Forgotten Password in GitLab

• GitLab
• CWE-640

ForU CMS password recovery

• ForU CMS
• CWE-640

WWBN AVideo recovery notification bypass vulnerability

• CWE-640

<=12.4 · no fixed version yet

Weak password recovery in WWBN AVideo

• WWBN AVideo
• CWE-640

HuiRan Host Reseller System HTTP POST Request password recovery

• HuiRan Host Reseller System
• CWE-640

Improper Access Control vulnerability in SAP Commerce Cloud

• SAP_SE SAP Commerce Cloud
• CWE-640

ZITADEL Account Takeover via Malicious Host Header Injection

• CWE-640

>=2.39.0, <2.39.9 || >=2.40.0, <2.40.10 || >=2.41.0, <2.41.6 · fixed in 2.39.9, 2.40.10, 2.41.6

Incorrect access control in the Forgot Your Password function of eMudhra emSigner v2.8.7 allows unauthenticated attackers to access accounts of all registered users, including those with administrato…

• CWE-640

Byzoro Smart S85F Management Platform login.php password recovery

• Byzoro Smart S85F Management Platform
• CWE-640

PILOS account takeover through password reset poisoning

• THM-Health PILOS
• CWE-20
• CWE-640

JumpServer default admin user email leak password reset

• jumpserver
• CWE-640

Weak Password Recovery Mechanism for Forgotten Password in linkstackorg/linkstack

• linkstackorg/linkstack
• CWE-640

ZITADEL's password reset does not respect the "Ignoring unknown usernames" setting

• CWE-640

<2.37.3 · fixed in 2.37.3

Xinhu RockOA Password password recovery

• Xinhu RockOA
• CWE-640

Non-MFA account takeover via brute-force attack on weak password reset code in jumpserver

• jumpserver
• CWE-640

Soar Cloud Ltd. HR Portal - Weak Password Recovery Mechanism for Forgotten Password

• Soar Cloud Ltd. HR Portal
• CWE-640

Vulnerability in the password recovery mechanism of Roundcube Password Recovery Plugin

• AlfnRU Password Recovery Plugin
• CWE-640

OpenRapid RapidCMS run-movepass.php password recovery

• OpenRapid RapidCMS
• CWE-640

Weintek Weincloud Weak Password Recovery Mechanism for Forgotten Password

• Weintek Weincloud
• CWE-640

The Malwarebytes EDR 1.0.11 for Linux driver doesn't properly ensure whitelisting of executable libraries loaded by executable files, allowing arbitrary code execution.

• CWE-640

The password reset function in ILIAS 7.0_beta1 through 7.20 and 8.0_beta1 through 8.1 allows remote attackers to take over the account.

• CWE-640

Weak password recovery in Apple macOS and others

• Apple macOS
• Apple watchOS
• CWE-640

Weak password recovery in Apple macOS

• Apple macOS
• CWE-640

ningzichun Student Management System Password Reset resetPassword.php password recovery

• ningzichun Student Management System
• CWE-640

A vulnerability in the Connect Mobility Router component of Mitel MiVoice Connect versions 9.6.2208.101 and earlier could allow an unauthenticated attacker with internal network access to authenticat…

• CWE-640

Missing rate limit for password resets

• CWE-640

<9.1.0 · fixed in 9.1.0

Authentication Bypass Vulnerability in Milesight Network Video Recorder (NVR)

• Milesight NVR MS-Nxxxx-xxG
• Milesight NVR MS-Nxxxx-xxE
• CWE-640

Insufficient token expiration in Serenity

• CWE-640

<6.7.0 · fixed in 6.7.0

An issue in Mobicint Backend for Credit Unions v3 allows attackers to retrieve partial email addresses and user entered information via submission to the forgotten-password endpoint.

• CWE-640

An insecure password reset issue discovered in MEGAFEIS, BOFEI DBD+ Application for IOS & Android v1.4.4 service via insecure expiry mechanism.

• CWE-640

COMFAST (Shenzhen Sihai Zhonglian Network Technology Co., Ltd) CF-WR623N Router firmware V2.3.0.1 and before is vulnerable to Account takeover.

• CWE-640

Password reset interception via API

• AMI MegaRAC SPx-12
• AMI MegaRAC SPx-13
• CWE-640

gitter-badger ezpublish-modern-legacy forgotpassword.php password recovery

• gitter-badger ezpublish-modern-legacy
• CWE-640

In Pilz PMC programming tool 3.x before 3.5.17 (based on CODESYS Development System), a user's password may be changed by an attacker without knowledge of the current password.

• CWE-640

Weak Password Recovery in ifm moneo appliance

• ifm moneo appliance
• CWE-640

An issue was discovered in BACKCLICK Professional 5.9.63.

• CWE-640

Weak password recovery in Schneider Electric EcoStruxure Control Expert and others

• Schneider Electric EcoStruxure Control Expert
• Schneider Electric EcoStruxure Process Expert
• CWE-640

Liferay Portal and Liferay DXP insecure default configuration

• CWE-640

<5.11.0 · fixed in 5.11.0

Mattermost Server password reset email requests can be sent to attacker-provided email addresses

• Authentication bypass
• CWE-640

<3.9.1-rc1 || >=3.10.0, <3.10.1 · fixed in 3.9.1-rc1, 3.10.1

Craft CMS possibility of brute force attempts

• CWE-640

<3.1.7 · fixed in 3.1.7

Predictable password reset token may lead to account takeover in countly-server

• countly-server
• CWE-640

Craft CMS subject to URL forgery

• CWE-640

<2.6.2976 · fixed in 2.6.2976