CWE-645

CWE-645 · 3 records · 1 with a public proof-of-concept

Records the NVD classes under CWE-645, highest CVSS first.

  1. MEDIUM 5.3CVE-2026-1266262026-11-11

    The web services listener of Progressive Robot hMailServer 6.3.3 through 6.3.7 counts every failed CardDAV, CalDAV or Autodiscover sign-in from a proxy it trusts - one on the same machine, or one named in WebServicesTrustedProxies, whose X-Forwarded-Proto it b…

    AI risk analysis on Exploit-DB.ai →

  2. MEDIUM 5.3CVE-2026-351612026-10-14

    Dell PowerScale InsightIQ, versions 5.2.0 through 6.3.0, contains an Overly Restrictive Account Lockout Mechanism vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Denial of service.

    AI risk analysis on Exploit-DB.ai →

  3. UNSCOREDCVE-2026-105866public PoC2026-10-06

    Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, an unauthenticated attacker who knows an account email address or username can abuse the account lockout mechanism of a …

    AI risk analysis on Exploit-DB.ai →