https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 16:44:25 +0000 https://cve.radiocsirt.org/vuln/cnvd-2017-04819 cnvd-2017-04819 https://cve.radiocsirt.org/vuln/cnvd-2017-04819 https://cve.radiocsirt.org/vuln/euvd-2026-87634 EUVD-2026-87634 https://cve.radiocsirt.org/vuln/euvd-2026-87634 https://cve.radiocsirt.org/vuln/fkie_cve-2016-9124 <p>Revive Adserver before 3.2.3 suffers from Improper Restriction of Excessive Authentication Attempts. The login page of Revive Adserver is vulnerable to password-guessing attacks. An account lockdown feature was considered, but rejected to avoid introducing service disruptions to regular users during such attacks. A random delay has instead been introduced as a countermeasure in case of password failures, along with a system to discourage parallel brute forcing. These systems will effectively allow the valid users to log in to the adserver, even while an attack is in progress.</p> <p>Revive Adserver before 3.2.3 suffers from Improper Restriction of Excessive Authentication Attempts. The login page of Revive Adserver is vulnerable to password-guessing attacks. An account lockdown feature was considered, but rejected to avoid introducing service disruptions to regular users during such attacks. A random delay has instead been introduced as a countermeasure in case of password failures, along with a system to discourage parallel brute forcing. These systems will effectively allow the valid users to log in to the adserver, even while an attack is in progress.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2016-9124 https://cve.radiocsirt.org/vuln/ghsa-jq2f-3xc4-634f <p>Revive Adserver before 3.2.3 suffers from Improper Restriction of Excessive Authentication Attempts. The login page of Revive Adserver is vulnerable to password-guessing attacks. An account lockdown feature was considered, but rejected to avoid introducing service disruptions to regular users during such attacks. A random delay has instead been introduced as a countermeasure in case of password failures, along with a system to discourage parallel brute forcing. These systems will effectively allow the valid users to log in to the adserver, even while an attack is in progress.</p> <p>Revive Adserver before 3.2.3 suffers from Improper Restriction of Excessive Authentication Attempts. The login page of Revive Adserver is vulnerable to password-guessing attacks. An account lockdown feature was considered, but rejected to avoid introducing service disruptions to regular users during such attacks. A random delay has instead been introduced as a countermeasure in case of password failures, along with a system to discourage parallel brute forcing. These systems will effectively allow the valid users to log in to the adserver, even while an attack is in progress.</p> https://cve.radiocsirt.org/vuln/ghsa-jq2f-3xc4-634f https://cve.radiocsirt.org/vuln/gsd-2016-9124 gsd-2016-9124 https://cve.radiocsirt.org/vuln/gsd-2016-9124