CWE-290: Authentication Bypass by Spoofing
This attack-focused weakness is caused by incorrectly implemented authentication schemes that are subject to spoofing attacks.
A kind of CWE-1390 Weak Authentication.
From the CWE List. © The MITRE Corporation.
Newest
- microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation) +14 more +16 moreWindows DNS Spoofing Vulnerability7.5 High
- caddyserver caddyHeader spoofing in caddy-geo-ip6.5 Medium
- linecorp lineAn issue in PARK DANDAN mini-app on Line v13.6.1 allows attackers to send crafted malicious...8.2 High
- network optix nxcloudServer Spoofing Vulnerability in NxCloud8.3 High
- unitree robotics a1, unitree a1 firmware +1 moreAuthentication Bypass by Spoofing in Unitree Robotics A18.0 High
- huawei emui, harmonyos +1 moreVulnerability of identity verification being bypassed in the face unlock module. Successful...9.1 Critical
- microsoft onenote, office 2019, office ltsc 2021 +3 more +5 moreMicrosoft OneNote Spoofing Vulnerability4.6 Medium
- snort, cisco firepower threat defense software, umbrella insights virtual appliance +2 more +4 moreMultiple Cisco products are affected by a vulnerability in Snort access control policies that...5.8 Medium
- cisco adaptive security appliance (asa) software, adaptive security appliance software, firepower threat defense software +1 more +3 moreMultiple vulnerabilities in the per-user-override feature of Cisco Adaptive Security Appliance ...5.8 Medium
- cisco adaptive security appliance (asa) software, adaptive security appliance software, firepower threat defense software +1 more +3 moreMultiple vulnerabilities in the per-user-override feature of Cisco Adaptive Security Appliance ...5.0 Medium
- zscaler client connectorTraffic being bypassed by ZCC by configuring synthetic IP range as local network5.9 Medium
- solwininfotech user activity log, unknown user-activity-log-pro +1 moreUser Activity Log Pro < 2.3.4 - IP Spoofing7.5 High
- sangfor next-gen application firewall, net-gen application firewall +1 moreSangfor Next-Gen Application Firewall Authentication Bypass9.8 Critical
- rami pretixpretix potential IP address spoofing vulnerability5.3 Medium
- unknown dologin securityDoLogin Security < 3.7 - IP Spoofing5.3 Medium
- activity log project log, unknown activity log +1 moreActivity Log < 2.8.8 - IP Spoofing5.3 Medium
- wiremock studio, wiremock, wiremock docker +1 more +3 moreDomain restrictions bypass via DNS Rebinding in WireMock and WireMock Studio3.9 Low
- neutron smart vmsAuthentication Bypass in Neutron Smart VMS9.8 Critical
- solwininfotech user activity logUser Activity Log < 1.6.7 - IP Spoofing7.5 High
- broadcom brocade sannav, brocade sannav +1 moreWeb authentication and authorization bypass8.1 High
- alexanderschneider user access managerUser Access Manager < 2.2.18 - IP Spoofing5.3 Medium
- palantir foundry campaigns, com.palantir.campaigns:campaigns +1 moreCVE-2023-309506.5 Medium
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Spoofing Vulnerability4.7 Medium
- microsoft edge for android, edge chromium +1 moreMicrosoft Edge for Android Spoofing Vulnerability4.3 Medium
- ami megarac spx12, megarac sp-x +1 moreAuthentication Bypass via HTTP Header Spoofing9.1 Critical
- microsoft edge, edge for ios +1 moreMicrosoft Edge for iOS Spoofing Vulnerability4.3 Medium
- huawei emui, harmonyos +1 moreVulnerability of identity verification being bypassed in the Gallery module. Successful...9.8 Critical
- paxtechnology pax a930, pax a930 firmware +1 morePAX Technology A930 PayDroid_7.1.1_Virgo_V04.5.02_20220722 allows attackers to compile a...6.7 Medium
- western digital my cloud os 5, westerndigital my cloud os +1 moreAuthentication Bypass issue in My Cloud OS 5 devices10.0 Critical
- malwarebytes, malwarebytes endpoint detection and response +1 moreIn Malwarebytes EDR 1.0.11 for Linux, it is possible to bypass the detection layers that depend...5.5 Medium
- alerton bcm-web, honeywell alerton bcm-web firmware +1 more** UNSUPPPORTED WHEN ASSIGNED ** ** UNSUPPORTED WHEN ASSIGNED ** [An attacker can capture an...8.3 High
- apple airpods firmware, airpods firmware update e +1 moreAn authentication issue was addressed with improved state management. This issue is fixed in AirPods Firmware Update 5E133. When your headphones are seeking a connection request to one of your previou…5.4 Medium
- grafana, grafana enterprise +1 moreGrafana vulnerable to Authentication Bypass by Spoofing9.4 Critical
- huawei emui, harmonyos +1 moreVulnerability of spoofing trustlists of Huawei desktop.Successful exploitation of this...5.3 Medium
- huawei emui, harmonyos +1 moreVulnerability of spoofing trustlists of Huawei desktop.Successful exploitation of this...5.3 Medium
- huawei emui, harmonyos +1 moreVulnerability of spoofing trustlists of Huawei desktop.Successful exploitation of this...5.3 Medium
- huawei b535-232a, b535-232a firmware +1 moreThere is a traffic hijacking vulnerability in Huawei routers. Successful exploitation of this...6.5 Medium
- huawei harmonyosVulnerability of HwWatchHealth being hijacked.Successful exploitation of this vulnerability may...10.0 Critical
- microsoft onenote, onenote for universal +1 moreMicrosoft OneNote Spoofing Vulnerability6.5 Medium
- artica pfms pandora fms, pandora fms fms +1 moreAuthentication bypass in password reset process6.4 Medium
- sandisk ibi, western digital my cloud home and my cloud home duo, my cloud os 5 +12 more +14 moreImpersonation attack causing an Authentication Bypass on Western Digital devices10.0 Critical
- gitlabAn issue has been discovered in GitLab CE/EE affecting all versions before 15.10.8, all versions...4.3 Medium
- embyEmby Server < 4.7.12.0 is vulnerable to a login bypass attack by setting the X-Forwarded-For...9.8 Critical
- cbot core, panel, chatbot +2 moreUser Authentication Bypass in CBOT's Chatbot9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreA missing delay in popup notifications could have made it possible for an attacker to trick a...8.8 High
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Spoofing Vulnerability4.3 Medium
- ieee 802.11, sonicwall soho 250 firmware, soho 250w firmware +27 more +29 moreThe IEEE 802.11 specifications through 802.11ax allow physically proximate attackers to intercept...7.5 High
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Spoofing Vulnerability6.1 Medium
- unknown formidable forms, strategy11 formidable form builder +1 moreFormidable Forms < 6.1 - IP Spoofing6.5 Medium
- huawei emui, harmonyos +1 moreThe control component has a spoofing vulnerability. Successful exploitation of this vulnerability...9.1 Critical
- Show moreLoading…