CWE-290 · Authentication Bypass by Spoofing (page 6)
Page 6 of 7 — CVEs classified under CWE-290, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-0030 | High | 8.1 | 2022-10-12 | An authentication bypass vulnerability in the Palo Alto Networks PAN-OS 8.1 web interface allows a network-based attacker with specific knowledge of the target… |
CVE-2022-35770 | Medium | 6.5 | 2022-10-11 | Windows NTLM Spoofing Vulnerability |
CVE-2022-34689 | High | 7.5 | 2022-10-11 | Windows CryptoAPI Spoofing Vulnerability |
CVE-2021-27862 | Medium | 4.7 | 2022-09-27 | Layer 2 network filtering capabilities such as IPv6 RA guard can be bypassed using LLC/SNAP headers with invalid length and Ethernet to Wifi frame conversion (… |
CVE-2021-27861 | Medium | 4.7 | 2022-09-27 | Layer 2 network filtering capabilities such as IPv6 RA guard can be bypassed using LLC/SNAP headers with invalid length (and optionally VLAN0 headers) |
CVE-2021-27854 | Medium | 4.7 | 2022-09-27 | Layer 2 network filtering capabilities such as IPv6 RA guard can be bypassed using combinations of VLAN 0 headers, LLC/SNAP headers, and converting frames from… |
CVE-2021-27853 | Medium | 4.7 | 2022-09-27 | Layer 2 network filtering capabilities such as IPv6 RA guard or ARP inspection can be bypassed using combinations of VLAN 0 headers and LLC/SNAP headers. |
CVE-2022-39227 | Critical | 9.1 | 2022-09-23 | python-jwt is a module for generating and verifying JSON Web Tokens. Versions prior to 3.3.4 are subject to Authentication Bypass by Spoofing, resulting in ide… |
CVE-2022-23949 | High | 7.5 | 2022-09-21 | In Keylime before 6.3.0, unsanitized UUIDs can be passed by a rogue agent and can lead to log spoofing on the verifier and registrar. |
CVE-2021-43310 | Critical | 9.8 | 2022-09-21 | A vulnerability in Keylime before 6.3.0 allows an attacker to craft a request to the agent that resets the U and V keys as if the agent were being re-added to… |
CVE-2022-35957 | Medium | 6.6 | 2022-09-20 | Grafana is an open-source platform for monitoring and observability. Versions prior to 9.1.6 and 8.5.13 are vulnerable to an escalation from admin to server ad… |
CVE-2022-37709 | Medium | 5.3 | 2022-09-16 | Tesla Model 3 V11.0(2022.4.5.1 6b701552d7a6) Tesla mobile app v4.23 is vulnerable to Authentication Bypass by spoofing. Tesla Model 3's Phone Key authenticatio… |
CVE-2022-31149 | High | 8.8 | 2022-09-07 | ActivityWatch open-source automated time tracker. Versions prior to 0.12.0b2 are vulnerable to DNS rebinding attacks. This vulnerability impacts everyone runni… |
CVE-2022-32744 | High | 8.8 | 2022-08-25 | A flaw was found in Samba. The KDC accepts kpasswd requests encrypted with any key known to it. By encrypting forged kpasswd requests with its own key, a user… |
CVE-2022-33991 | Medium | 5.3 | 2022-08-15 | dproxy-nexgen (aka dproxy nexgen) forwards and caches DNS queries with the CD (aka checking disabled) bit set to 1. This leads to disabling of DNSSEC protectio… |
CVE-2022-34716 | Medium | 5.9 | 2022-08-09 | .NET Spoofing Vulnerability |
CVE-2022-2324 | High | 7.5 | 2022-07-29 | Improperly Implemented Security Check vulnerability in the SonicWall Hosted Email Security leads to bypass of Capture ATP security service in the appliance. Th… |
CVE-2022-35629 | Medium | 5.4 | 2022-07-29 | Due to a bug in the handling of the communication between the client and server, it was possible for one client, already registered with their own client ID, t… |
CVE-2022-30319 | High | 8.1 | 2022-07-28 | Saia Burgess Controls (SBC) PCD through 2022-05-06 allows Authentication bypass. According to FSCT-2022-0062, there is a Saia Burgess Controls (SBC) PCD S-Bus… |
CVE-2022-2310 | Critical | 10.0 | 2022-07-27 | An authentication bypass vulnerability in Skyhigh SWG in main releases 10.x prior to 10.2.12, 9.x prior to 9.2.23, 8.x prior to 8.2.28, and controlled release… |
CVE-2022-1495 | Medium | 4.3 | 2022-07-26 | Incorrect security UI in Downloads in Google Chrome on Android prior to 101.0.4951.41 allowed a remote attacker to spoof the APK downloads dialog via a crafted… |
CVE-2022-1307 | Medium | 4.3 | 2022-07-25 | Inappropriate implementation in full screen in Google Chrome on Android prior to 100.0.4896.88 allowed a remote attacker to spoof the contents of the Omnibox (… |
CVE-2022-1306 | Medium | 4.3 | 2022-07-25 | Inappropriate implementation in compositing in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) vi… |
CVE-2022-1129 | Medium | 6.5 | 2022-07-23 | Inappropriate implementation in Full Screen Mode in Google Chrome on Android prior to 100.0.4896.60 allowed a remote attacker to spoof the contents of the Omni… |
CVE-2022-2368 | Medium | 6.5 | 2022-07-11 | Authentication Bypass by Spoofing in GitHub repository microweber/microweber prior to 1.2.20. |
CVE-2022-22476 | High | 8.8 | 2022-07-08 | IBM WebSphere Application Server Liberty 17.0.0.3 through 22.0.0.7 and Open Liberty are vulnerable to identity spoofing by an authenticated user using a specia… |
CVE-2022-1745 | Medium | 6.8 | 2022-06-24 | The authentication mechanism used by technicians on the tested version of Dominion Voting Systems ImageCast X is susceptible to forgery. An attacker with physi… |
CVE-2022-32983 | Medium | 5.3 | 2022-06-20 | Knot Resolver through 5.5.1 may allow DNS cache poisoning when there is an attempt to limit forwarding actions by filters. |
CVE-2022-29165 | Critical | 10.0 | 2022-05-20 | Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. A critical vulnerability has been discovered in Argo CD starting with version 1.4.0 a… |
CVE-2022-29218 | High | 7.7 | 2022-05-13 | RubyGems is a package registry used to supply software for the Ruby language ecosystem. An ordering mistake in the code that accepts gem uploads allowed some g… |
CVE-2022-25989 | High | 8.8 | 2022-05-05 | An authentication bypass vulnerability exists in the libxm_av.so getpeermac() functionality of Anker Eufy Homebase 2 2.1.8.5h. A specially-crafted DHCP packet… |
CVE-2022-24858 | Medium | 6.1 | 2022-04-19 | next-auth v3 users before version 3.29.2 are impacted. next-auth version 4 users before version 4.3.2 are also impacted. Upgrading to 3.29.2 or 4.3.2 will patc… |
CVE-2022-26910 | Medium | 5.3 | 2022-04-15 | Skype for Business and Lync Spoofing Vulnerability |
CVE-2022-26505 | High | 7.4 | 2022-03-06 | A DNS rebinding issue in ReadyMedia (formerly MiniDLNA) before 1.3.1 allows a remote web server to exfiltrate media files. |
CVE-2022-21142 | Critical | 9.8 | 2022-02-24 | Authentication bypass vulnerability in a-blog cms Ver.2.8.x series versions prior to Ver.2.8.74, Ver.2.9.x series versions prior to Ver.2.9.39, Ver.2.10.x seri… |
CVE-2022-24112 | Critical | 9.8 | 2022-02-11 | An attacker can abuse the batch-requests plugin to send requests to bypass the IP restriction of Admin API. A default configuration of Apache APISIX (with defa… |
CVE-2022-23131 | Critical | 9.1 | 2022-01-13 | In the case of instances where the SAML SSO authentication is enabled (non-default), session data can be modified by a malicious actor, because a user login st… |
CVE-2021-42320 | High | 8.0 | 2021-12-15 | Microsoft SharePoint Server Spoofing Vulnerability |
CVE-2021-43807 | High | 7.5 | 2021-12-14 | Opencast is an Open Source Lecture Capture & Video Management for Education. Opencast versions prior to 9.10 allow HTTP method spoofing, allowing to change the… |
CVE-2021-40288 | High | 7.5 | 2021-12-07 | A denial-of-service attack in WPA2, and WPA3-SAE authentication methods in TP-Link AX10v1 before V1_211014, allows a remote unauthenticated attacker to disconn… |
CVE-2021-43220 | Low | 3.1 | 2021-11-24 | Microsoft Edge for iOS Spoofing Vulnerability |
CVE-2021-42308 | Low | 3.1 | 2021-11-24 | Microsoft Edge (Chromium-based) Spoofing Vulnerability |
CVE-2021-41130 | Medium | 6.4 | 2021-10-07 | Extensible Service Proxy, a.k.a. ESP is a proxy which enables API management capabilities for JSON/REST or gRPC API services. ESPv1 can be configured to authen… |
CVE-2020-19003 | Medium | 5.3 | 2021-10-06 | An issue in Gate One 1.2.0 allows attackers to bypass to the verification check done by the origins list and connect to Gate One instances used by hosts not on… |
CVE-2021-41753 | High | 7.5 | 2021-09-27 | A denial-of-service attack in WPA2, and WPA3-SAE authentication methods in D-Link DIR-X1560, v1.04B04, and DIR-X6060, v1.11B04 allows a remote unauthenticated… |
CVE-2021-40824 | Medium | 5.9 | 2021-09-13 | A logic error in the room key sharing functionality of Element Android before 1.2.2 and matrix-android-sdk2 (aka Matrix SDK for Android) before 1.2.2 allows a… |
CVE-2021-40823 | Medium | 5.9 | 2021-09-13 | A logic error in the room key sharing functionality of matrix-js-sdk (aka Matrix Javascript SDK) before 12.4.1 allows a malicious Matrix homeserver present in… |
CVE-2020-27970 | Medium | 5.3 | 2021-09-13 | Yandex Browser before 20.10.0 allows remote attackers to spoof the address bar |
CVE-2021-40867 | High | 7.8 | 2021-09-13 | Certain NETGEAR smart switches are affected by an authentication hijacking race-condition vulnerability by an unauthenticated attacker who uses the same source… |
CVE-2021-30621 | Medium | 6.5 | 2021-09-03 | Chromium: CVE-2021-30621 UI Spoofing in Autofill |
CVE-2021-30619 | Medium | 6.5 | 2021-09-03 | Chromium: CVE-2021-30619 UI Spoofing in Autofill |
CVE-2021-34646 | Critical | 9.8 | 2021-08-30 | Versions up to, and including, 5.4.3, of the Booster for WooCommerce WordPress plugin are vulnerable to authentication bypass via the process_email_verificatio… |
CVE-2021-32076 | Medium | 5.3 | 2021-08-26 | Access Restriction Bypass via referrer spoof was discovered in SolarWinds Web Help Desk 12.7.2. An attacker can access the 'Web Help Desk Getting Started Wizar… |
CVE-2021-38598 | Critical | 9.1 | 2021-08-23 | OpenStack Neutron before 16.4.1, 17.x before 17.1.3, and 18.0.0 allows hardware address impersonation when the linuxbridge driver with ebtables-nft is used on… |
CVE-2021-28372 | High | 8.3 | 2021-08-17 | ThroughTek's Kalay Platform 2.0 network allows an attacker to impersonate an arbitrary ThroughTek (TUTK) device given a valid 20-byte uniquely assigned identif… |
CVE-2021-32631 | Medium | 6.5 | 2021-07-26 | Common is a package of common modules that can be accessed by NIMBLE services. Common before commit number 3b96cb0293d3443b870351945f41d7d55cb34b53 did not pro… |
CVE-2020-7388 | Critical | 10.0 | 2021-07-22 | Sage X3 Unauthenticated Remote Command Execution (RCE) as SYSTEM in AdxDSrv.exe component. By editing the client side authentication request, an attacker can b… |
CVE-2021-34466 | Medium | 5.7 | 2021-07-16 | Windows Hello Security Feature Bypass Vulnerability |
CVE-2021-22779 | Critical | 9.1 | 2021-07-14 | Authentication Bypass by Spoofing vulnerability exists in EcoStruxure Control Expert (all versions prior to V15.0 SP1, including all versions of Unity Pro), Ec… |
CVE-2021-34548 | High | 7.5 | 2021-06-29 | An issue was discovered in Tor before 0.4.6.5, aka TROVE-2021-003. An attacker can forge RELAY_END or RELAY_RESOLVED to bypass the intended access control for… |
CVE-2021-28810 | High | 7.5 | 2021-06-08 | If exploited, this vulnerability allows an attacker to access resources which are not otherwise accessible without proper authentication. Roon Labs has already… |
CVE-2021-20278 | Medium | 6.5 | 2021-05-28 | An authentication bypass vulnerability was found in Kiali in versions before 1.31.0 when the authentication strategy `OpenID` is used. When RBAC is enabled, Ki… |
CVE-2021-31209 | Medium | 6.5 | 2021-05-11 | Microsoft Exchange Server Spoofing Vulnerability |
CVE-2021-31195 | Medium | 6.5 | 2021-05-11 | Microsoft Exchange Server Remote Code Execution Vulnerability |
CVE-2021-31172 | High | 7.1 | 2021-05-11 | Microsoft SharePoint Server Spoofing Vulnerability |
CVE-2021-28478 | High | 7.6 | 2021-05-11 | Microsoft SharePoint Server Spoofing Vulnerability |
CVE-2021-26418 | Medium | 4.6 | 2021-05-11 | Microsoft SharePoint Server Spoofing Vulnerability |
CVE-2020-13529 | Medium | 6.1 | 2021-05-10 | An exploitable denial-of-service vulnerability exists in Systemd 245. A specially crafted DHCP FORCERENEW packet can cause a server running the DHCP client to… |
CVE-2020-36128 | High | 8.2 | 2021-05-07 | Pax Technology PAXSTORE v7.0.8_20200511171508 and lower is affected by a token spoofing vulnerability. Each payment terminal has a session token (called X-Term… |
CVE-2021-29441 | High | 8.6 | 2021-04-27 | Nacos is a platform designed for dynamic service discovery and configuration and service management. In Nacos before version 1.4.1, when configured to use auth… |
CVE-2020-22001 | Critical | 9.8 | 2021-04-27 | HomeAutomation 3.3.2 suffers from an authentication bypass vulnerability when spoofing client IP address using the X-Forwarded-For header with the local (loopb… |
CVE-2021-21216 | Medium | 6.5 | 2021-04-26 | Inappropriate implementation in Autofill in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to spoof security UI via a crafted HTML page. |
CVE-2021-21215 | Medium | 6.5 | 2021-04-26 | Inappropriate implementation in Autofill in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to spoof security UI via a crafted HTML page. |
CVE-2021-0232 | High | 7.4 | 2021-04-22 | An authentication bypass vulnerability in the Juniper Networks Paragon Active Assurance Control Center may allow an attacker with specific information about th… |
CVE-2021-21492 | Medium | 4.3 | 2021-04-13 | SAP NetWeaver Application Server Java(HTTP Service), versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently validate logon group in URLs, r… |
CVE-2021-22890 | Low | 3.7 | 2021-04-01 | curl 7.63.0 to and including 7.75.0 includes vulnerability that allows a malicious HTTPS proxy to MITM a connection due to bad handling of TLS 1.3 session tick… |
CVE-2021-23984 | Medium | 6.5 | 2021-03-31 | A malicious extension could have opened a popup window lacking an address bar. The title of the popup lacking an address bar should not be fully controllable… |
CVE-2019-25023 | Medium | 6.5 | 2021-02-27 | An issue was discovered in Scytl sVote 2.1. Because the IP address from an X-Forwarded-For header (which can be manipulated client-side) is used for the intern… |
CVE-2021-21310 | Medium | 6.1 | 2021-02-11 | NextAuth.js (next-auth) is am open source authentication solution for Next.js applications. In next-auth before version 3.3.0 there is a token verification vul… |
CVE-2021-21134 | Medium | 6.5 | 2021-02-09 | Incorrect security UI in Page Info in Google Chrome on iOS prior to 88.0.4324.96 allowed a remote attacker to spoof security UI via a crafted HTML page. |
CVE-2020-17516 | High | 7.5 | 2021-02-03 | Apache Cassandra versions 2.1.0 to 2.1.22, 2.2.0 to 2.2.19, 3.0.0 to 3.0.23, and 3.11.0 to 3.11.9, when using 'dc' or 'rack' internode_encryption setting, allo… |
CVE-2020-25686 | Low | 3.7 | 2021-01-20 | A flaw was found in dnsmasq before version 2.83. When receiving a query, dnsmasq does not check for an existing pending request for the same name and forwards… |
CVE-2020-27276 | Medium | 5.7 | 2021-01-19 | SOOIL Developments Co Ltd DiabecareRS,AnyDana-i & AnyDana-A, the communication protocol of the insulin pump and its AnyDana-i & AnyDana-A mobile apps doesn't u… |
CVE-2021-1677 | Medium | 5.5 | 2021-01-12 | Azure Active Directory Pod Identity Spoofing Vulnerability |
CVE-2020-26276 | Critical | 10.0 | 2020-12-17 | Fleet is an open source osquery manager. In Fleet before version 3.5.1, due to issues in Go's standard library XML parsing, a valid SAML response may be mutate… |
CVE-2020-28856 | High | 7.5 | 2020-12-14 | OpenAsset Digital Asset Management (DAM) through 12.0.19 does not correctly determine the HTTP request's originating IP address, allowing attackers to spoof it… |
CVE-2020-26254 | High | 7.7 | 2020-12-08 | omniauth-apple is the OmniAuth strategy for "Sign In with Apple" (RubyGem omniauth-apple). In omniauth-apple before version 1.0.1 attackers can fake their emai… |
CVE-2020-4864 | Medium | 4.3 | 2020-10-29 | IBM Resilient SOAR V38.0 could allow an attacker on the internal net work to provide the server with a spoofed source IP address. IBM X-Force ID: 190567. |
CVE-2020-24375 | Medium | 6.5 | 2020-10-19 | A DNS rebinding vulnerability in the UPnP MediaServer implementation in Freebox Server before 4.2.3. |
CVE-2020-7327 | Medium | 6.0 | 2020-10-15 | Improperly implemented security check in McAfee MVISION Endpoint Detection and Response Client (MVEDR) prior to 3.2.0 may allow local administrators to execute… |
CVE-2020-7326 | Medium | 6.0 | 2020-10-15 | Improperly implemented security check in McAfee Active Response (MAR) prior to 2.4.4 may allow local administrators to execute malicious code via stopping a co… |
CVE-2019-18991 | Medium | 5.4 | 2020-09-30 | A partial authentication bypass vulnerability exists on Atheros AR9132 3.60(AMX.8), AR9283 1.85, and AR9285 1.0.0.12NA devices. The vulnerability allows sendin… |
CVE-2019-18990 | Medium | 5.4 | 2020-09-30 | A partial authentication bypass vulnerability exists on Realtek RTL8812AR 1.21WW, RTL8196D 1.0.0, RTL8192ER 2.10, and RTL8881AN 1.09 devices. The vulnerability… |
CVE-2019-18989 | Medium | 5.4 | 2020-09-30 | A partial authentication bypass vulnerability exists on Mediatek MT7620N 1.06 devices. The vulnerability allows sending an unencrypted data frame to a WPA2-pro… |
CVE-2018-5354 | High | 8.8 | 2020-09-30 | The custom GINA/CP module in ANIXIS Password Reset Client before version 3.22 allows remote attackers to execute code and escalate privileges via spoofing. Whe… |
CVE-2018-5353 | Critical | 9.8 | 2020-09-30 | The custom GINA/CP module in Zoho ManageEngine ADSelfService Plus before 5.5 build 5517 allows remote attackers to execute code and escalate privileges via spo… |
CVE-2020-16250 | High | 8.2 | 2020-08-26 | HashiCorp Vault and Vault Enterprise versions 0.7.1 and newer, when configured with the AWS IAM auth method, may be vulnerable to authentication bypass. Fixed… |
CVE-2020-5415 | Critical | 10.0 | 2020-08-12 | Concourse, versions prior to 6.3.1 and 6.4.1, in installations which use the GitLab auth connector, is vulnerable to identity spoofing by way of configuring a… |
CVE-2020-2033 | Medium | 5.3 | 2020-06-10 | When the pre-logon feature is enabled, a missing certification validation in Palo Alto Networks GlobalProtect app can disclose the pre-logon authentication coo… |
CVE-2020-1331 | Medium | 5.4 | 2020-06-09 | A spoofing vulnerability exists when System Center Operations Manager (SCOM) does not properly sanitize a specially crafted web request to an affected SCOM ins… |