Login Security Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

No Login Security Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

2 records

TI-2013-01964 CVE-2013-2198 · GHSA-46hf-hf23-q64q

Incorrect authorization in Login Security

MEDIUM 46

The Login Security module 6.x-1.x before 6.x-1.3 and 7.x-1.x before 7.x-1.3 for Drupal allows attackers to bypass intended restrictions via a crafted username.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01727 Published 2020-01-30 Fixed in 6.x-1.3, 7.x-1.3 CWE-863

TI-2013-01963 CVE-2013-2197 · GHSA-v9vj-r9q3-qvcc

The Login Security module 6.x-1.x before 6.x-1.3 and 7.x-1.x before 7.x-1.3 for Drupal…

LOW 23

The Login Security module 6.x-1.x before 6.x-1.3 and 7.x-1.x before 7.x-1.3 for Drupal, when using the login delay option, allows remote attackers to cause a denial of service (CPU consumption) via a large number of fail…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01336 Published 2013-08-28 No fix listed CWE-119

Open these records in search →

Critical	1
High	0
Medium	1
Low	0
No CVSS	0