Authentication Bypass by Spoofing

This attack-focused weakness is caused by incorrectly implemented authentication schemes that are subject to spoofing attacks.

CVEs (627)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2017-14375 2Dell Emc 4Emc Unisphere Solutions EnablerVasa+1 more May 13, 2026 Nov 1, 2017 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 EMC Unisphere for VMAX Virtual Appliance (vApp) versions prior to 8.4.0.15, EMC Solutions Enabler Virtual Appliance versions prior to 8.4.0.15, EMC VASA Virtual Appliance versions prior to 8.4.0.512, and EMC VMAX Embedde...Show more EMC Unisphere for VMAX Virtual Appliance (vApp) versions prior to 8.4.0.15, EMC Solutions Enabler Virtual Appliance versions prior to 8.4.0.15, EMC VASA Virtual Appliance versions prior to 8.4.0.512, and EMC VMAX Embedded Management (eManagement) versions prior to and including 1.4 (Enginuity Release 5977.1125.1125 and earlier) contain an authentication bypass vulnerability that may potentially be exploited by malicious users to compromise the affected system.Show less
CVE-2017-14003 1Lavalink 1Ether Serial Link Firmware May 13, 2026 Oct 11, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 An Authentication Bypass by Spoofing issue was discovered in LAVA Ether-Serial Link (ESL) running firmware versions 6.01.00/29.03.2007 and prior versions. An improper authentication vulnerability has been identified, whi...Show more An Authentication Bypass by Spoofing issue was discovered in LAVA Ether-Serial Link (ESL) running firmware versions 6.01.00/29.03.2007 and prior versions. An improper authentication vulnerability has been identified, which, if exploited, would allow an attacker with the same IP address to bypass authentication by accessing a specific uniform resource locator.Show less
CVE-2017-11717 1Metinfo Project 1Metinfo May 13, 2026 Jul 28, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 MetInfo through 5.3.17 accepts the same CAPTCHA response for 120 seconds, which makes it easier for remote attackers to bypass intended challenge requirements by modifying the client-server data stream, as demonstrated b...Show more MetInfo through 5.3.17 accepts the same CAPTCHA response for 120 seconds, which makes it easier for remote attackers to bypass intended challenge requirements by modifying the client-server data stream, as demonstrated by the login/findpass page.Show less
CVE-2017-8422 1Kde 2Kauth Kdelibs May 13, 2026 May 17, 2017 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 KDE kdelibs before 4.14.32 and KAuth before 5.34 allow local users to gain root privileges by spoofing a callerID and leveraging a privileged helper app.
CVE-2017-6405 1Veritas 2Netbackup Netbackup Appliance May 13, 2026 Mar 2, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 An issue was discovered in Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier. Hostname-based security is open to DNS spoofing.
CVE-2009-1048 1Snom 5Snom 300 Firmware Snom 320 FirmwareSnom 360 Firmware+2 more Apr 23, 2026 Aug 14, 2009 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 The web interface on the snom VoIP phones snom 300, snom 320, snom 360, snom 370, and snom 820 with firmware 6.5 before 6.5.20, 7.1 before 7.1.39, and 7.3 before 7.3.14 allows remote attackers to bypass authentication, a...Show more The web interface on the snom VoIP phones snom 300, snom 320, snom 360, snom 370, and snom 820 with firmware 6.5 before 6.5.20, 7.1 before 7.1.39, and 7.3 before 7.3.14 allows remote attackers to bypass authentication, and reconfigure the phone or make arbitrary use of the phone, via a (1) http or (2) https request with 127.0.0.1 in the Host header.Show less
CVE-1999-0012 2Microsoft Netscape 5Enterprise Server Fasttrack ServerFrontpage+2 more Apr 16, 2026 Feb 6, 1998 N/A· v4 7.0 HIGH· v3 5.0 MEDIUM· v2 Some web servers under Microsoft Windows allow remote attackers to bypass access restrictions for files with long file names.

Previous 1...28 29 30 3132