CWE-640 · Weak Password Recovery Mechanism for Forgotten Password (page 2)
Page 2 of 4 — CVEs classified under CWE-640, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-50503 | High | 8.8 | 2025-08-20 | A vulnerability in the password reset workflow of the Touch Lebanon Mobile App 2.20.2 allows an attacker to bypass the OTP reset password mechanism. By manipul… |
CVE-2025-55030 | Medium | 6.1 | 2025-08-19 | Firefox for iOS would not respect a Content-Disposition header of type Attachment and would incorrectly display the content inline rather than downloading, pot… |
CVE-2025-50594 | Critical | 9.8 | 2025-08-13 | An issue was discovered in /Code/Websites/DanpheEMR/Controllers/Settings/SecuritySettingsController.cs in Danphe Health Hospital Management System EMR 3.2 allo… |
CVE-2025-7948 | Medium | 4.3 | 2025-07-22 | A vulnerability classified as problematic was found in jshERP up to 3.5. Affected by this vulnerability is an unknown functionality of the file /jshERP-boot/us… |
CVE-2025-7881 | Low | 2.7 | 2025-07-20 | A vulnerability was found in Mercusys MW301R 1.0.2 Build 190726 Rel.59423n. It has been declared as problematic. This vulnerability affects unknown code of the… |
CVE-2024-43190 | Medium | 5.9 | 2025-07-07 | IBM Engineering Requirements Management DOORS 9.7.2.9, under certain configurations, could allow a remote attacker to obtain password reset instructions of a l… |
CVE-2025-53373 | | 2025-07-07 | Natours is a Tour Booking API. The attacker can easily take over any victim account by injecting an attacker-controlled server domain in the Host header when r… | |
CVE-2025-43932 | Critical | 9.8 | 2025-07-07 | JobCenter through 7e7b0b2 allows account takeover via the password reset feature because SERVER_NAME is not configured and thus a reset depends on the Host HTT… |
CVE-2025-43931 | Critical | 9.8 | 2025-07-07 | flask-boilerplate through a170e7c allows account takeover via the password reset feature because SERVER_NAME is not configured and thus a reset depends on the… |
CVE-2025-52560 | High | 8.1 | 2025-06-24 | Kanboard is project management software that focuses on the Kanban methodology. Prior to version 1.2.46, Kanboard allows password reset emails to be sent with… |
CVE-2025-6216 | Critical | 9.8 | 2025-06-21 | Allegra calculateTokenExpDate Password Recovery Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on aff… |
CVE-2025-6097 | Medium | 5.3 | 2025-06-16 | A vulnerability was found in UTT 进取 750W up to 5.0 and classified as critical. Affected by this issue is the function formDefineManagement of the file /goform/… |
CVE-2025-47646 | Critical | 9.8 | 2025-05-23 | Weak Password Recovery Mechanism for Forgotten Password vulnerability in Gilblas Ngunte Possi PSW Front-end Login & Registration psw-login-and-registration all… |
CVE-2025-4903 | Medium | 5.3 | 2025-05-19 | A vulnerability, which was classified as critical, was found in D-Link DI-7003GV2 24.04.18D1 R(68125). This affects the function sub_41F4F0 of the file /H5/web… |
CVE-2025-4552 | Medium | 5.4 | 2025-05-12 | A vulnerability has been found in ContiNew Admin up to 3.6.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the f… |
CVE-2025-3849 | Medium | 4.3 | 2025-04-22 | A vulnerability classified as problematic was found in YXJ2018 SpringBoot-Vue-OnlineExam 1.0. This vulnerability affects unknown code of the file /api/studentP… |
CVE-2025-31380 | Critical | 9.8 | 2025-04-17 | Weak Password Recovery Mechanism for Forgotten Password vulnerability in videowhisper Paid Videochat Turnkey Site ppv-live-webcams allows Password Recovery Exp… |
CVE-2024-12295 | High | 8.8 | 2025-03-19 | The BoomBox Theme Extensions plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.8.0. This… |
CVE-2025-29995 | | 2025-03-13 | This vulnerability exists in the CAP back office application due to a weak password-reset mechanism implemented at API endpoints. An authenticated remote attac… | |
CVE-2024-12604 | Medium | 6.5 | 2025-03-10 | Cleartext Storage of Sensitive Information in an Environment Variable, Weak Password Recovery Mechanism for Forgotten Password vulnerability in Tapandsign Tech… |
CVE-2025-2093 | Low | 3.1 | 2025-03-07 | A vulnerability was found in PHPGurukul Online Library Management System 3.0. It has been declared as problematic. Affected by this vulnerability is an unknown… |
CVE-2025-1570 | High | 8.1 | 2025-02-28 | The Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings plugin for WordPress is vulnerable to privilege escalation via account takeo… |
CVE-2025-1231 | Medium | 5.4 | 2025-02-11 | Improper password reset in PAM Module in Devolutions Server 2024.3.10.0 and earlier allows an authenticated user to reuse the oracle user password after check-… |
CVE-2025-22144 | Critical | 9.8 | 2025-01-13 | NamelessMC is a free, easy to use & powerful website software for Minecraft servers. A user with admincp.core.emails or admincp.users.edit permissions can vali… |
CVE-2025-0331 | Medium | 5.3 | 2025-01-09 | A vulnerability, which was classified as critical, has been found in YunzMall up to 2.4.2. This issue affects the function changePwd of the file /app/platform/… |
CVE-2024-11350 | Critical | 9.8 | 2025-01-08 | The AdForest theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 5.1.6. This is due to the plu… |
CVE-2024-53552 | Critical | 9.8 | 2024-12-10 | CrushFTP 10 before 10.8.3 and 11 before 11.2.3 mishandles password reset, leading to account takeover. |
CVE-2024-47547 | Critical | 9.4 | 2024-12-06 | Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x contains a weak mechanism for its users to change their passwords which leaves authentication… |
CVE-2024-11103 | Critical | 9.8 | 2024-11-28 | The Contest Gallery plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 24.0.7. This is due t… |
CVE-2024-45670 | Medium | 5.6 | 2024-11-14 | IBM Security SOAR 51.0.1.0 and earlier contains a mechanism for users to recover or change their passwords without knowing the original password, but the user… |
CVE-2024-50356 | Unrated | | 2024-10-31 | Press, a Frappe custom app that runs Frappe Cloud, manages infrastructure, subscription, marketplace, and software-as-a-service (SaaS). The password could be r… |
CVE-2024-48428 | Critical | 9.8 | 2024-10-25 | An issue in Olive VLE allows an attacker to obtain sensitive information via the reset password function. |
CVE-2024-9302 | High | 8.1 | 2024-10-25 | The App Builder – Create Native Android & iOS Apps On The Flight plugin for WordPress is vulnerable to privilege escalation via account takeover in all version… |
CVE-2024-9305 | High | 8.1 | 2024-10-16 | The AppPresser – Mobile App Framework plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 4.4… |
CVE-2024-9907 | Low | 3.7 | 2024-10-13 | A vulnerability classified as problematic was found in QileCMS up to 1.1.3. This vulnerability affects the function sendEmail of the file /qilecms/user/control… |
CVE-2024-45980 | High | 8.8 | 2024-09-26 | A host header injection vulnerability in MEANStore 1.0 allows attackers to obtain the password reset token via user interaction with a crafted password reset l… |
CVE-2024-8878 | Critical | 9.8 | 2024-09-25 | The password recovery mechanism for the forgotten password in Riello Netman 204 allows an attacker to reset the admin password and take over control of the dev… |
CVE-2024-8692 | Medium | 5.3 | 2024-09-11 | A vulnerability classified as critical was found in TDuckCloud TDuckPro up to 6.3. Affected by this vulnerability is an unknown functionality. The manipulation… |
CVE-2024-42915 | High | 8.0 | 2024-08-23 | A host header injection vulnerability in Staff Appraisal System v1.0 allows attackers to obtain the password reset token via user interaction with a crafted pa… |
CVE-2024-6203 | High | 8.3 | 2024-08-06 | HaloITSM versions up to 2.146.1 are affected by a Password Reset Poisoning vulnerability. Poisoned password reset links can be sent to existing HaloITSM users… |
CVE-2024-38287 | Critical | 9.8 | 2024-07-25 | The password-reset mechanism in the Forgot Password functionality in R-HUB TurboMeeting through 8.x allows unauthenticated remote attackers to force the applic… |
CVE-2024-6125 | High | 8.1 | 2024-06-19 | The Login with phone number plugin for WordPress is vulnerable to unauthorized password resets in versions up to, and including 1.7.34. This is due to the plug… |
CVE-2024-38468 | Critical | 9.8 | 2024-06-16 | Shenzhen Guoxin Synthesis image system before 8.3.0 allows unauthorized password resets via the resetPassword API. |
CVE-2023-7264 | High | 8.1 | 2024-06-11 | The Build App Online plugin for WordPress is vulnerable to account takeover due to a weak password reset mechanism in all versions up to, and including, 1.0.22… |
CVE-2024-36407 | Low | 3.7 | 2024-06-10 | SuiteCRM is an open-source Customer Relationship Management (CRM) software application. In versions prior to 7.14.4 and 8.6.1, a user password can be reset fro… |
CVE-2024-5277 | High | 7.5 | 2024-06-06 | In lunary-ai/lunary version 1.2.4, a vulnerability exists in the password recovery mechanism where the reset password token is not invalidated after use. This… |
CVE-2024-5404 | Critical | 9.8 | 2024-06-03 | An unauthenticated remote attacker can change the admin password in a moneo appliance due to weak password recovery mechanism. |
CVE-2023-35717 | High | 8.8 | 2024-05-03 | TP-Link Tapo C210 Password Recovery Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affec… |
CVE-2024-33530 | High | 7.5 | 2024-05-02 | In Jitsi Meet before 9391, a logic flaw in password-protected Jitsi meetings (that make use of a lobby) leads to the disclosure of the meeting password when a… |
CVE-2024-27899 | High | 8.8 | 2024-04-09 | Self-Registration and Modify your own profile in User Admin Application of NetWeaver AS Java does not enforce proper security requirements for the content of t… |
CVE-2024-2862 | Critical | 9.1 | 2024-03-25 | This vulnerability allows remote attackers to reset the password of anonymous users without authorization on the affected LG LED Assistant. |
CVE-2024-2463 | High | 8.0 | 2024-03-21 | Weak password recovery mechanism in CDeX application allows to retrieve password reset token.This issue affects CDeX application versions through 5.7.1. |
CVE-2024-24903 | High | 8.0 | 2024-03-01 | Dell Secure Connect Gateway (SCG) Policy Manager, version 5.10+, contain a weak password recovery mechanism for forgotten passwords. An adjacent network low pr… |
CVE-2021-29038 | Medium | 6.3 | 2024-02-20 | Liferay Portal 7.2.0 through 7.3.5, and older unsupported versions, and Liferay DXP 7.3 before fix pack 1, 7.2 before fix pack 17, and older unsupported versio… |
CVE-2024-22454 | High | 8.8 | 2024-02-13 | Dell PowerProtect Data Manager, version 19.15 and prior versions, contain a weak password recovery mechanism for forgotten passwords. A remote unauthenticated… |
CVE-2024-0491 | Medium | 5.3 | 2024-01-13 | A vulnerability classified as problematic has been found in Huaxia ERP up to 3.1. Affected is an unknown function of the file src/main/java/com/jsh/erp/control… |
CVE-2023-7028 | Critical | 10.0 | 2024-01-12 | An issue has been discovered in GitLab CE/EE affecting all versions from 16.1 prior to 16.1.6, 16.2 prior to 16.2.9, 16.3 prior to 16.3.7, 16.4 prior to 16.4.5… |
CVE-2024-0425 | Medium | 5.3 | 2024-01-11 | A vulnerability classified as critical was found in ForU CMS up to 2020-06-23. This vulnerability affects unknown code of the file /admin/index.php?act=reset_a… |
CVE-2023-50172 | Medium | 5.3 | 2024-01-10 | A recovery notification bypass vulnerability exists in the userRecoverPass.php captcha validation functionality of WWBN AVideo dev master commit 15fed957fb. A… |
CVE-2023-49589 | High | 8.8 | 2024-01-10 | An insufficient entropy vulnerability exists in the userRecoverPass.php recoverPass generation functionality of WWBN AVideo dev master commit 15fed957fb. A spe… |
CVE-2024-0186 | Low | 3.7 | 2024-01-02 | A vulnerability classified as problematic has been found in HuiRan Host Reseller System up to 2.0.0. Affected is an unknown function of the file /user/index/fi… |
CVE-2023-42481 | High | 8.1 | 2023-12-12 | In SAP Commerce Cloud - versions HY_COM 1905, HY_COM 2005, HY_COM2105, HY_COM 2011, HY_COM 2205, COM_CLOUD 2211, a locked B2B user can misuse the forgotten pas… |
CVE-2023-49097 | High | 8.1 | 2023-11-30 | ZITADEL is an identity infrastructure system. ZITADEL uses the notification triggering requests Forwarded or X-Forwarded-Host header to build the button link s… |
CVE-2023-4214 | High | 8.1 | 2023-11-18 | The AppPresser plugin for WordPress is vulnerable to unauthorized password resets in versions up to, and including 4.2.5. This is due to the plugin generating… |
CVE-2023-5959 | Medium | 4.3 | 2023-11-11 | A vulnerability, which was classified as problematic, was found in Byzoro Smart S85F Management Platform V31R02B10-01. Affected is an unknown function of the f… |
CVE-2023-47107 | High | 8.8 | 2023-11-08 | PILOS is an open source front-end for BigBlueButton servers with a built-in load balancer. The password reset component deployed within PILOS uses the hostname… |
CVE-2023-46138 | Low | 3.7 | 2023-10-31 | JumpServer is an open source bastion host and maintenance security audit system that complies with 4A specifications. Prior to version 3.8.0, the default email… |
CVE-2023-5840 | High | 8.8 | 2023-10-29 | Weak Password Recovery Mechanism for Forgotten Password in GitHub repository linkstackorg/linkstack prior to v4.2.9. |
CVE-2023-44399 | Medium | 5.3 | 2023-10-10 | ZITADEL provides identity infrastructure. In versions 2.37.2 and prior, ZITADEL administrators can enable a setting called "Ignoring unknown usernames" which h… |
CVE-2023-5296 | Medium | 4.3 | 2023-09-29 | A vulnerability was found in Xinhu RockOA 1.1/2.3.2/15.X3amdi and classified as problematic. Affected by this issue is some unknown functionality of the file a… |
CVE-2023-43650 | High | 8.2 | 2023-09-27 | JumpServer is an open source bastion host. The verification code for resetting user's password is vulnerable to brute-force attacks due to the absence of rate… |
CVE-2023-4096 | High | 8.6 | 2023-09-19 | Weak password recovery mechanism vulnerability in Fujitsu Arconte Áurea version 1.5.0.0, which exploitation could allow an attacker to perform a brute force at… |
CVE-2023-34357 | High | 7.8 | 2023-09-07 | Soar Cloud Ltd. HR Portal has a weak Password Recovery Mechanism for Forgotten Password. The reset password link sent out through e-mail, and the link will re… |
CVE-2023-3222 | High | 7.5 | 2023-09-04 | Vulnerability in the password recovery mechanism of Password Recovery plugin for Roundcube, in its 1.2 version, which could allow a remote attacker to change a… |
CVE-2023-4448 | Medium | 6.3 | 2023-08-21 | A vulnerability was found in OpenRapid RapidCMS 1.3.1 and classified as critical. This issue affects some unknown processing of the file admin/run-movepass.php… |
CVE-2023-35134 | High | 7.4 | 2023-07-19 | Weintek Weincloud v0.13.6 could allow an attacker to reset a password with the corresponding account’s JWT token only. |
CVE-2023-29145 | High | 7.8 | 2023-06-30 | The Malwarebytes EDR 1.0.11 for Linux driver doesn't properly ensure whitelisting of executable libraries loaded by executable files, allowing arbitrary code e… |
CVE-2023-36487 | Critical | 9.8 | 2023-06-29 | The password reset function in ILIAS 7.0_beta1 through 7.20 and 8.0_beta1 through 8.1 allows remote attackers to take over the account. |
CVE-2023-26615 | High | 7.5 | 2023-06-28 | D-Link DIR-823G firmware version 1.02B05 has a password reset vulnerability, which originates from the SetMultipleActions API, allowing unauthorized attackers… |
CVE-2023-28202 | Medium | 5.5 | 2023-06-23 | This issue was addressed with improved state management. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5, tvOS 16.5, macOS Ventura 13.4. An app fi… |
CVE-2022-42807 | Medium | 4.3 | 2023-06-23 | A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13. A user may accidentally add a participant to a Shared Albu… |
CVE-2023-3007 | Medium | 6.5 | 2023-05-31 | A vulnerability was found in ningzichun Student Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of t… |
CVE-2023-31459 | High | 8.8 | 2023-05-24 | A vulnerability in the Connect Mobility Router component of Mitel MiVoice Connect versions 9.6.2208.101 and earlier could allow an unauthenticated attacker wit… |
CVE-2023-28821 | Medium | 5.3 | 2023-04-28 | Concrete CMS (previously concrete5) before 9.1 did not have a rate limit for password resets. |
CVE-2023-30466 | Critical | 9.8 | 2023-04-28 | This vulnerability exists in Milesight 4K/H.265 Series NVR models (MS-Nxxxx-xxG, MS-Nxxxx-xxE, MS-Nxxxx-xxT, MS-Nxxxx-xxH and MS-Nxxxx-xxC), due to a weak pass… |
CVE-2023-31287 | High | 7.8 | 2023-04-27 | An issue was discovered in Serenity Serene (and StartSharp) before 6.7.0. Password reset links are sent by email. A link contains a token that is used to reset… |
CVE-2021-36436 | Medium | 5.3 | 2023-04-20 | An issue in Mobicint Backend for Credit Unions v3 allows attackers to retrieve partial email addresses and user entered information via submission to the forgo… |
CVE-2022-45637 | Critical | 9.8 | 2023-03-21 | An insecure password reset issue discovered in MEGAFEIS, BOFEI DBD+ Application for IOS & Android v1.4.4 service via insecure expiry mechanism. |
CVE-2022-47697 | Critical | 9.8 | 2023-01-31 | COMFAST (Shenzhen Sihai Zhonglian Network Technology Co., Ltd) CF-WR623N Router firmware V2.3.0.1 and before is vulnerable to Account takeover. Anyone can rese… |
CVE-2022-26872 | High | 8.3 | 2023-01-30 | AMI Megarac Password reset interception via API |
CVE-2015-10071 | Low | 2.6 | 2023-01-19 | A vulnerability was found in gitter-badger ezpublish-modern-legacy. It has been rated as problematic. This issue affects some unknown processing of the file ke… |
CVE-2022-25027 | High | 7.5 | 2023-01-12 | The Forgotten Password functionality of Rocket TRUfusion Portal v7.9.2.1 allows remote attackers to bypass authentication and access restricted pages by valida… |
CVE-2020-12067 | High | 7.5 | 2022-12-26 | In Pilz PMC programming tool 3.x before 3.5.17 (based on CODESYS Development System), a user's password may be changed by an attacker without knowledge of the… |
CVE-2022-47377 | Critical | 9.8 | 2022-12-16 | Password recovery vulnerability in SICK SIM2000ST Partnumber 2086502 with firmware version <1.13.4 allows an unprivileged remote attacker to gain access to the… |
CVE-2022-3485 | Critical | 9.8 | 2022-12-12 | In IFM Moneo Appliance with version up to 1.9.3 an unauthenticated remote attacker can reset the administrator password by only supplying the serial number and… |
CVE-2022-44004 | Critical | 9.8 | 2022-11-16 | An issue was discovered in BACKCLICK Professional 5.9.63. Due to insecure design or lack of authentication, unauthenticated attackers can complete the password… |
CVE-2022-37300 | Critical | 9.8 | 2022-09-12 | A CWE-640: Weak Password Recovery Mechanism for Forgotten Password vulnerability exists that could cause unauthorized access in read and write mode to the cont… |
CVE-2022-34530 | Medium | 5.3 | 2022-08-01 | An issue in the login and reset password functionality of Backdrop CMS v1.22.0 allows attackers to enumerate usernames via password reset requests and distinct… |
CVE-2022-23172 | Medium | 5.5 | 2022-07-06 | An attacker can access to "Forgot my password" button, as soon as he puts users is valid in the system, the system would issue a message that a password reset… |
CVE-2022-29174 | High | 8.1 | 2022-05-17 | countly-server is the server-side part of Countly, a product analytics solution. Prior to versions 22.03.7 and 21.11.4, a malicious actor who knows an account… |