CVE-2018-19021

CVSS v3 Score
6.5
Medium
CVSS v2 Score
3.3
Low

Vulnerability Description

A specially crafted script could bypass the authentication of a maintenance port of Emerson DeltaV DCS Versions 11.3.1, 11.3.2, 12.3.1, 13.3.1, 14.3, R5.1, R6 and prior, which may allow an attacker to cause a denial of service.

CVSS:6.5(Medium)

A potential security vulnerability has been identified for certain HP Printers and All-in-Ones that would allow bypassing account lockout.

CVSS:6.5(Medium)

An issue was discovered in Bitrix24 Bitrix Framework (1c site management) 20.0. An "User enumeration and Improper Restriction of Excessive Authentication Attempts" vulnerability exists in the admin lo...

CVSS:6.5(Medium)

In cPanel before 90.0.17, 2FA can be bypassed via a brute-force approach (SEC-575).

CVSS:6.5(Medium)

Improper restriction of excessive authentication attempts in LOGITEC LAN-WH450N/GR allows an attacker in the wireless range of the device to recover PIN and access the network.

CVSS:6.5(Medium)

After requesting multiple permissions, and closing the first permission panel, subsequent permission panels will be displayed in a different position but still record a click in the default location, ...

CVSS:6.5(Medium)

There is a password verification vulnerability in WS7200-10 11.0.2.13. Attackers on the LAN may use brute force cracking to obtain passwords, which may cause sensitive system information to be disclos...