CWE-799.

Komga Vulnerable to Arbitrary Code Execution via Crafted EPUB File

• gotson komga
• CWE-799

letmein connection limiter allows an arbitrary amount of simultaneous connections

• Denial of service
• CWE-799

<10.2.1 · fixed in 10.2.1

Tenda TDSEE App Password Reset Confirmation Code ConfirmSmsCode excessive authentication

• Tenda TDSEE App
• Authentication bypass
• CWE-799

Improper Control of Interaction Frequency

• Schweitzer Engineering Laboratories SEL-5056 Software-Defined Network Flow Controller
• CWE-799

ScriptAndTools eCommerce-website-in-PHP login.php excessive authentication

• ScriptAndTools eCommerce-website-in-PHP
• Authentication bypass
• CWE-799

ScriptAndTools eCommerce-website-in-PHP login.php excessive authentication

• ScriptAndTools eCommerce-website-in-PHP
• Authentication bypass
• CWE-799

Shopware default newsletter opt-in settings allow for mass sign-up abuse

• CWE-799
• CWE-1188

<6.5.8.17 || >=6.6.0.0-rc1, <6.6.10.3 || >=6.7.0.0-rc1, <6.7.0.0-rc2 · fixed in 6.5.8.17, 6.6.10.3, 6.7.0.0-rc2

No Rate Limiting Vulnerability in CAP back office application

• Rising Technosoft CAP back office application
• CWE-799

Missing rate limit in MaysWind ezBookkeeping in github.com/mayswind/ezbookkeeping

• CWE-799

* · no fixed version yet

Excitel Broadband Private my Excitel App One-Time Password excessive authentication

• Excitel Broadband Private my Excitel App
• Authentication bypass
• CWE-799

No Rate Limiting Vulnerability in RupeeWeb trading platform

• Rupeeseed Technology Ventures RupeeWeb
• CWE-799

Drupal Open Social allows Functionality Misuse

• CWE-799

<12.3.8 || >=12.4.0, <12.4.5 || >=13.0.0-alpha1, <13.0.0-alpha11 · fixed in 12.3.8, 12.4.5, 13.0.0-alpha11

Protection Mechanism Failure in Digital Operation Services' WiFiBurada

• Digital Operation Services WiFiBurada
• CWE-302
• CWE-799

Digistar AG-30 Plus Login Page excessive authentication

• Digistar AG-30 Plus
• Authentication bypass
• CWE-799

No Rate Limiting Vulnerability in Wave 2.0

• Brokerage Technology Solutions Wave 2.0
• CWE-799

The Syracom Secure Login (2FA) plugin for Jira, Confluence, and Bitbucket through 3.1.4.5 allows remote attackers to easily brute-force the 2FA PIN via the plugins/servlet/twofactor/public/pinvalidat…

• CWE-799

No Rate Limiting vulnerability

• Shilpi Computers Client Dashboard
• CWE-799

Rate limit vulnerability in Clibo Manager

• Clibo Manager
• CWE-799

No Rate Limiting Vulnerability

• Reedos Software Solutions Mutual Fund Distribution Product (aiM-Star)
• CWE-799

Journyx Unauthenticated Password Reset Bruteforce

• Journyx (jtime)
• Hard-coded credentials
• CWE-334

Westermo L210-F2G Lynx Improper Control of Interaction Frequency

• Westermo L210-F2G Lynx
• CWE-799

Westermo L210-F2G Lynx Improper Control of Interaction Frequency

• Westermo L210-F2G Lynx
• CWE-799

CVE

• nvidia vGPU software and Cloud Gaming
• CWE-799

WordPress RegistrationMagic plugin <= 5.2.5.0 - Form Submission Limit Bypass vulnerability

• Metagauss RegistrationMagic
• CWE-799

WordPress Cartpauj Register Captcha plugin <= 1.0.02 - Captcha Bypass vulnerability

• Cartpauj Register Captcha
• CWE-799

WordPress WP-PostRatings plugin <= 1.91 - Rating limit Bypass vulnerability

• Lester ‘GaMerZ’ Chan WP-PostRatings
• CWE-799

WordPress Polls CP plugin <= 1.0.71 - Polls Limitation Bypass vulnerability

• CodePeople CP Polls
• CWE-799

WOWS Karma vulnerable to a post submission bounce/timing attack

• SakuraIsayeki WOWS-Karma
• CWE-799

IBM Aspera Faspex denial of service

• IBM Aspera Faspex
• CWE-799

Microsoft Dynamics 365 Finance and Operations Denial of Service Vulnerability

• Microsoft Dynamics 365 for Finance and Operations
• CWE-799

In JetBrains YouTrack before 2023.1.16597 captcha was not properly validated for Helpdesk forms

• JetBrains YouTrack
• CWE-799

Contec CONPROSYS HMI System (CHS) v3.5.2 Denial of Service

• Contec CONPROSYS HMI System
• CWE-799

ASUS GT-AXE11000, RT-AX3000, RT-AX55, RT-AX58U, TUF-AX3000 - Improper Authentication

• ASUS GT-AXE11000
• ASUS RT-AX3000
• CWE-799

Rate-limits not working on instances without configured memory cache backend

• nextcloud security-advisories
• CWE-799

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2).

• Siemens SINEMA Remote Connect Server
• CWE-799

Lack of ratelimit on public share link mount endpoint

• nextcloud security-advisories
• CWE-799

Lack of ratelimit on public DAV endpoint

• nextcloud security-advisories
• CWE-799

Lack of ratelimit on shareinfo endpoint

• nextcloud security-advisories
• CWE-799

Ratelimit not applied on OCS API responses

• nextcloud security-advisories
• CWE-799

Improper rate limiting in Koel

• Weak cryptography or TLS
• CWE-799

<5.1.4 · fixed in 5.1.4

SonicWall SonicOS: A vulnerability in SonicOS allows a remote unauthenticated attacker to brute force…

• SonicWall SonicOS
• CWE-799

Improper Control of Interaction Frequency in Apache syncope-core

• CWE-799

<2.0.11 || >=2.1.0, <2.1.2 · fixed in 2.0.11, 2.1.2

A captured MAC/device ID of an iTrack Easy can be registered under multiple user accounts allowing access to getgps GPS data

• iTrack Easy
• CWE-799