CWE-287 · Improper Authentication (page 53)
Page 53 of 53 — CVEs classified under CWE-287, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2003-1489 | | 2003-12-31 | upload.php in Truegalerie 1.0 allows remote attackers to read arbitrary files by specifying the target filename in the file cookie in form.php, then downloadin… | |
CVE-2003-1475 | | 2003-12-31 | Netbus 1.5 through 1.7 allows more than one client to be connected at the same time, but only prompts the first connection for authentication, which allows rem… | |
CVE-2003-1442 | | 2003-12-31 | The web administration page for the Ericsson HM220dp ADSL modem does not require authentication, which could allow remote attackers to gain access from the LAN… | |
CVE-2003-1434 | | 2003-12-31 | login_ldap 3.1 and 3.2 allows remote attackers to initiate unauthenticated bind requests if (1) bind_anon_dn is on, which allows a bind with no password provid… | |
CVE-2003-1433 | | 2003-12-31 | Epic Games Unreal Engine 226f through 436 does not validate the challenge key, which allows remote attackers to exhaust the player limit by joining the game mu… | |
CVE-2003-1343 | | 2003-12-31 | Trend Micro ScanMail for Exchange (SMEX) before 3.81 and before 6.1 might install a back door account in smg_Smxcfg30.exe, which allows remote attackers to gai… | |
CVE-2003-0216 | | 2003-05-12 | Unknown vulnerability in Cisco Catalyst 7.5(1) allows local users to bypass authentication and gain access to the enable mode without a password. | |
CVE-2002-2417 | | 2002-12-31 | acFTP 1.4 does not properly handle when an invalid password is provided by the user during authentication, which allows remote attackers to hide or misrepresen… | |
CVE-2002-2397 | | 2002-12-31 | Sygate personal firewall 5.0 could allow remote attackers to bypass firewall filters via spoofed (1) source IP address of 127.0.0.1 or (2) network address of 1… | |
CVE-2002-2279 | | 2002-12-31 | Unspecified vulnerability in the bind function in config.inc of aldap 0.09 allows remote attackers to authenticate with Manager permissions. | |
CVE-2002-0507 | | 2002-08-12 | An interaction between Microsoft Outlook Web Access (OWA) with RSA SecurID allows local users to bypass the SecurID authentication for a previous user via seve… | |
CVE-2002-0563 | | 2002-07-03 | The default configuration of Oracle 9i Application Server 1.0.2.x allows remote anonymous users to access sensitive services without authentication, including… | |
CVE-2001-1585 | | 2001-12-31 | SSH protocol 2 (aka SSH-2) public key authentication in the development snapshot of OpenSSH 2.3.1, available from 2001-01-18 through 2001-02-08, does not perfo… | |
CVE-2001-0537 | | 2001-07-21 | HTTP server for Cisco IOS 11.3 to 12.2 allows attackers to bypass authentication and execute arbitrary commands, when local authorization is being used, by spe… | |
CVE-1999-0987 | | 1999-11-18 | Windows NT does not properly download a system policy if the domain user logs into the domain with a space at the end of the domain name. | |
CVE-1999-0680 | | 1999-08-09 | Windows NT Terminal Server performs extra work when a client opens a new connection but before it is authenticated, allowing for a denial of service. | |
CVE-1999-0366 | | 1999-02-08 | In some cases, Service Pack 4 for Windows NT 4.0 can allow access to network shares using a blank password, through a problem with a null NT hash value. |