Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2023-37362

Weintek Weincloud Improper Authentication

Weintek Weincloud v0.13.6 could allow an attacker to abuse the registration functionality to login with testing credentials to the official website.

CVSS 3.1 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Weintek
Products
Weincloud
CVE-2023-35134

Weintek Weincloud Weak Password Recovery Mechanism for Forgotten Password

Weintek Weincloud v0.13.6 could allow an attacker to reset a password with the corresponding account’s JWT token only.

CVSS 3.1 · 7.4 High EPSS < 1% KEV · Not listed
Vendors
Weintek
Products
Weincloud
CVE-2023-34429

Weintek Weincloud Improper Handling of Structural Elements

Weintek Weincloud v0.13.6 could allow an attacker to cause a denial-of-service condition for Weincloud by sending a forged JWT token.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Weintek
Products
Weincloud
CVE-2023-32657

Weintek Weincloud Improper Restriction of Excessive Authentication Attempts

Weintek Weincloud v0.13.6 could allow an attacker to efficiently develop a brute force attack on credentials with authentication hints from error message responses.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Weintek
Products
Weincloud