https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T16:15:57.120026+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2017-05582 cnvd-2017-05582 2026-10-09T16:15:57.249029+00:00 cnvd-2017-05582 https://cve.radiocsirt.org/vuln/euvd-2026-88457 EUVD-2026-88457 2026-10-09T16:15:57.249077+00:00 EUVD-2026-88457 https://cve.radiocsirt.org/vuln/fkie_cve-2016-10321 fkie_cve-2016-10321 2026-10-09T16:15:57.249093+00:00

web2py before 2.14.6 does not properly check if a host is denied before verifying passwords, allowing a remote attacker to perform brute-force attacks.

 https://cve.radiocsirt.org/vuln/ghsa-gv85-wgxc-vc56 GHSA-gv85-wgxc-vc56 — web2py is vulnerable to password brute-force attack 2026-10-09T16:15:57.249125+00:00

Affected: PyPI: web2py

web2py before 2.14.6 does not properly check if a host is denied before verifying passwords, allowing a remote attacker to perform brute-force attacks.

 https://cve.radiocsirt.org/vuln/gsd-2016-10321 gsd-2016-10321 2026-10-09T16:15:57.249149+00:00 gsd-2016-10321 https://cve.radiocsirt.org/vuln/pysec-2026-569 PYSEC-2026-569 — web2py is vulnerable to password brute-force attack 2026-10-09T16:15:57.249161+00:00

Affected: PyPI: web2py

web2py before 2.14.6 does not properly check if a host is denied before verifying passwords, allowing a remote attacker to perform brute-force attacks.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-10321 UBUNTU-CVE-2016-10321 2026-10-09T16:15:57.249179+00:00

Affected: Ubuntu:16.04:LTS: web2py

web2py before 2.14.6 does not properly check if a host is denied before verifying passwords, allowing a remote attacker to perform brute-force attacks.