Filtered by vendor Weintek Subscriptions
Filtered by product Weincloud Subscriptions
Total 4 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2023-37362 1 Weintek 1 Weincloud 2024-11-21 7.2 High
Weintek Weincloud v0.13.6 could allow an attacker to abuse the registration functionality to login with testing credentials to the official website.
CVE-2023-35134 1 Weintek 1 Weincloud 2024-11-21 7.4 High
Weintek Weincloud v0.13.6 could allow an attacker to reset a password with the corresponding account’s JWT token only.
CVE-2023-34429 1 Weintek 1 Weincloud 2024-11-21 7.5 High
Weintek Weincloud v0.13.6 could allow an attacker to cause a denial-of-service condition for Weincloud by sending a forged JWT token.
CVE-2023-32657 1 Weintek 1 Weincloud 2024-11-21 5.3 Medium
Weintek Weincloud v0.13.6 could allow an attacker to efficiently develop a brute force attack on credentials with authentication hints from error message responses.