CWE-290: Authentication Bypass by Spoofing
This attack-focused weakness is caused by incorrectly implemented authentication schemes that are subject to spoofing attacks.
A kind of CWE-1390 Weak Authentication.
From the CWE List. © The MITRE Corporation.
Newest
- coredns.io corednsCoreDNS vulnerable to TuDoor Attacks7.5 High
- google chromeInappropriate implementation in Autofill in Google Chrome prior to 129.0.6668.58 allowed a remote...4.3 Medium
- gitlabAuthentication Bypass by Spoofing in GitLab9.9 Critical
- ivanti workspace control, automation +1 moreAn incorrectly implemented authentication scheme that is subjected to a spoofing attack in the...8.8 High
- mozilla focus for ios, firefox focus +1 moreWebsites could utilize Javascript links to spoof URL addresses in the Focus navigation bar This...4.7 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreIf a site had been granted the permission to open popup windows, it could cause Select elements...6.1 Medium
- ilyasine maintenance & coming soon redirect animationWordPress Maintenance & Coming Soon Redirect Animation plugin <= 2.3.3 - Bypass Vulnerability vulnerability3.7 Low
- progress ws ftp serverMulti-Factor Authentication Bypass in Progress WS_FTP Server6.5 Medium
- gethomepage homepagehomepage DNS rebinding vulnerability (GHSL-2024-096)6.5 Medium
- spring bootCVE-2024-38807: Signature Forgery Vulnerability in Spring Boot's Loader6.3 Medium
- google chromeInappropriate implementation in Views in Google Chrome prior to 128.0.6613.84 allowed a remote...4.3 Medium
- typecho, typecho cms +1 moreTypecho v1.3.0 was discovered to contain a race condition vulnerability in the post commenting...6.5 Medium
- typechoTypecho v1.3.0 was discovered to contain a Client IP Spoofing vulnerability, which allows...5.3 Medium
- likeshopAn IP Spoofing vulnerability has been discovered in Likeshop up to 2.5.7.20210811. This issue...5.3 Medium
- apache seatunnel, apache software foundation seatunnel web +1 moreApache SeaTunnel Web: Authentication bypass9.1 Critical
- apple macosThis issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.4. A...4.4 Medium
- apache cloudstackApache CloudStack: SAML Signature Exclusion8.1 High
- ping identity pingone mfa integration kit for pingfederate, pingone mfa intergration kit for pingfederate +1 morePingOne MFA Integration Kit MFA bypass8.7 High
- pingidentity pingone mfa integration kit, ping identity pingone mfa integration kit for pingfederate +1 morePingOne MFA Integration Kit MFA bypass7.7 High
- patreon wordpressWordPress Patreon WordPress plugin <= 1.9.0 - Image Protection Bypass vulnerability5.3 Medium
- checkmklocal IP restriction of internal HTTP endpoints5.3 Medium
- cloud foundry haproxy-boshreleaseSecurity check loophole in HAProxy release (in combination with routing release) in Cloud Foundry...9.1 Critical
- synology camera firmware, bc500 firmware, tc500 firmware +2 moreA vulnerability regarding authentication bypass by spoofing is found in the RTSP functionality. This allows man-in-the-middle attackers to obtain privileges without consent via unspecified vectors. Th…7.5 High
- No product listedDESIGNA ABACUS v.18 and before allows an attacker to bypass the payment process via a crafted QR...6.3 Medium
- devolutions serverAuthentication bypass in the 2FA feature in Devolutions Server 2024.1.14.0 and earlier allows an...6.3 Medium
- No product listedClick Studios Passwordstate Core before 9.8 build 9858 allows Authentication Bypass.6.5 Medium
- opencartZip slip in opencart7.2 High
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Spoofing Vulnerability5.4 Medium
- No product listedAn issue in Annonshop.app DecentralizeJustice/ anonymousLocker commit 2b2b4 allows attackers to...6.5 Medium
- beyondtrust beyondinsight passwordsafe, beyondinsight password safe +1 moreSmart Rule Overwrite Bypass in BeyondInsight PasswordSafe3.3 Low
- acurax under construction / maintenance mode from acurax, under construction \/ maintenance mode +1 moreWordPress Under Construction / Maintenance Mode from Acurax plugin <= 2.6 - IP Bypass vulnerability3.7 Low
- red hat logging subsystem for red hat openshift, openshift container platform 4.12, openshift container platform 4.13 +7 more +9 moreOpenshift/telemeter: iss check during jwt authentication can be bypassed7.5 High
- miniorange malware scannerWordPress Malware Scanner plugin <= 4.7.1 - IP Restriction Bypass vulnerability5.3 Medium
- blazzdev rate my post, feedbackwp rate my post – wp rating system +1 moreWordPress Rate my Post – WP Rating System plugin <= 3.4.2 - Broken Access Control vulnerability5.3 Medium
- metagauss registrationmagicWordPress RegistrationMagic plugin <= 5.2.5.0 - IP Limit Bypass vulnerability5.3 Medium
- wpmu dev brandaWordPress Branda plugin <= 3.4.14 - IP Restriction Bypass vulnerability5.3 Medium
- wpdevart coming soon and maintenance modeWordPress Coming soon and Maintenance mode plugin <= 3.7.3 - IP Filtering Bypass vulnerability3.7 Low
- 10up restricted site access, elasticpress +1 moreWordPress Restricted Site Access plugin <= 7.4.1 - IP Restriction Bypass vulnerability5.3 Medium
- yonifre maspik – spam blacklistWordPress Maspik – Spam Blacklist plugin <= 0.10.3 - IP Filtering Bypass vulnerability5.3 Medium
- florent maillefaud wp maintenanceWordPress WP Maintenance plugin <= 6.1.3 - IP Filtering Bypass vulnerability3.7 Low
- pluginkollektiv antispam beeWordPress Antispam Bee plugin <= 2.11.3 - Country IP Restriction Bypass vulnerability5.3 Medium
- lester ‘gamerz’ chan wp-postratingsWordPress WP-PostRatings plugin <= 1.91 - Rating limit Bypass vulnerability5.3 Medium
- ip2location country blocker, download ip2location country blocker +1 moreWordPress IP2Location Country Blocker plugin <= 2.29.1 - IP Bypass Vulnerability vulnerability5.3 Medium
- progress telerik report server, telerik report server 2024 +1 moreRegistration Authentication Bypass Vulnerability9.8 Critical
- cisco snort, snort intrusion prevention system, firepower threat defense software +4 more +6 moreMultiple Cisco products are affected by a vulnerability in the Snort Intrusion Prevention System ...5.8 Medium
- rafflepress giveaways and contests, giveaways and contests by rafflepress +1 moreWordPress Giveaways and Contests by RafflePress plugin <= 1.12.7 - IP Restriction Bypass vulnerability5.3 Medium
- royal-elementor-addons royal elementor addons, wproyal royal elementor addons and templates +1 moreWordPress Royal Elementor Addons and Templates plugin <= 1.3.93 - IP Bypass vulnerability5.3 Medium
- helderk maintenance modeWordPress Maintenance Mode plugin <= 3.0.1 - IP Bypass vulnerability3.7 Low
- filipe seabra wordpress manutençãoWordPress WordPress Manutenção plugin <= 1.0.6 - Bypass vulnerability3.7 Low
- roxnor wp ultimate reviewWordPress Wp Ultimate Review plugin <= 2.3.6 - IP limit Bypass vulnerability5.3 Medium
- Show moreLoading…