Search vulnerabilities

Results 2

Export CSV
CVE-2022-2321

Improper Restriction of Excessive Authentication Attempts in heroiclabs/nakama

Improper Restriction of Excessive Authentication Attempts in GitHub repository heroiclabs/nakama prior to 3.13.0. This results in login brute-force attacks.

CVSS 3.1 · 9.8 Critical EPSS 1.6% KEV · Not listed
Vendors
Products
CVE-2022-2306

Insufficient Session Expiration in heroiclabs/nakama

Old session tokens can be used to authenticate to the application and send authenticated requests.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Products