CWE-290

Authentication Bypass by Spoofing

Parent: CWE-1390 - Weak Authentication

This attack-focused weakness is caused by incorrectly implemented authentication schemes that are subject to spoofing attacks.

575 vulnerabilities with CWE-290
CVE-2023-5616 MEDIUM
gnome-control-center 1.3-1.3.36.5 - Authentication Bypass via SSH Remote Login Status Mismanagement
CVSS 4.9
CVE-2023-51327 MEDIUM
PHPJabbers Cleaning Business Software v1.0 - DoS
CVSS 6.5
CVE-2023-51326 MEDIUM
PHPJabbers Cleaning Business Software <1.0 - DoS
CVSS 6.5
CVE-2023-51323 MEDIUM
PHPJabbers Shared Asset Booking System <1.0 - DoS
CVSS 6.5
CVE-2023-51321 MEDIUM
PHPJabbers Night Club Booking Software v1.0 - DoS
CVSS 6.5
CVE-2023-41133 MEDIUM
Secure Admin IP < 2.0 - Authentication Bypass via IP Spoofing
CVSS 5.3
CVE-2023-30464 HIGH
CoreDNS < 1.10.1 - DNS Cache Poisoning via Birthday Attack
CVSS 7.5
CVE-2023-28452 HIGH
CoreDNS < 1.10.1 and < 1.11.0 - Denial of Service via Spoofed DNS Response
CVSS 7.5
CVE-2023-48396 CRITICAL
Apache SeaTunnel <1.0.1 - Auth Bypass
CVSS 9.1
CVE-2023-40702 HIGH
PingOne MFA Integration Kit - Auth Bypass
CVE-2023-40356 HIGH
PingOne MFA Integration Kit - Privilege Escalation
CVE-2023-52176 MEDIUM
miniorange Malware Scanner <4.7.1 - Auth Bypass
CVSS 5.3
CVE-2023-51667 MEDIUM
FeedbackWP Rate my Post - Auth Bypass
CVSS 5.3
CVE-2023-51543 MEDIUM
Metagauss RegistrationMagic <5.2.5.0 - Auth Bypass
CVSS 5.3
CVE-2023-51542 MEDIUM
WPMU DEV Branda <3.4.14 - Auth Bypass
CVSS 5.3
CVE-2023-49741 LOW
Coming soon and Maintenance mode < 3.7.3 - Authentication Bypass via IP Filtering
CVSS 3.7
CVE-2023-48753 MEDIUM
10up Restricted Site Access <7.4.1 - Auth Bypass
CVSS 5.3
CVE-2023-48271 MEDIUM
Maspik - Spam blacklist <0.10.3 - Auth Bypass
CVSS 5.3
CVE-2023-47769 LOW
WP Maintenance <6.1.3 - Auth Bypass
CVSS 3.7
CVE-2023-41134 MEDIUM
Antispam Bee < 2.11.3 - Authentication Bypass via IP Restriction Spoofing
CVSS 5.3
CVE-2023-40332 MEDIUM
WP-PostRatings <= 1.91 - Rating Limit Bypass
CVSS 5.3
CVE-2023-37865 MEDIUM
IP2Location Country Blocker <= 2.29.1 - Authentication Bypass by Spoofing
CVSS 5.3
CVE-2023-50224 MEDIUM KEV
TP-Link TL-WR841N Firmware - Unauthenticated Authentication Bypass via HTTPD Service
CVSS 6.5
CVE-2023-44447 MEDIUM
TP-Link TL-WR902AC Firmware - Unauthenticated Authentication Bypass via httpd Service
CVSS 6.5
CVE-2023-51747 HIGH
Apache James <3.8.1-3.7.5 - SMTP Smuggling
CVSS 7.1
Details
Vulnerabilities 575
Links
MITRE CWE Entry Search this CWE With Exploits