Vulnerabilities > Authentication Bypass by Spoofing

DATE CVE VULNERABILITY TITLE RISK
2019-10-10 CVE-2019-1357 Authentication Bypass by Spoofing vulnerability in Microsoft Edge and Internet Explorer
A spoofing vulnerability exists when Microsoft Browsers improperly handle browser cookies, aka 'Microsoft Browser Spoofing Vulnerability'.
network
low complexity
microsoft CWE-290
4.3
2019-10-10 CVE-2019-1318 Authentication Bypass by Spoofing vulnerability in Microsoft products
A spoofing vulnerability exists when Transport Layer Security (TLS) accesses non- Extended Master Secret (EMS) sessions, aka 'Microsoft Windows Transport Layer Security Spoofing Vulnerability'.
network
microsoft CWE-290
4.3
2019-10-10 CVE-2019-0608 Authentication Bypass by Spoofing vulnerability in Microsoft Edge and Internet Explorer
A spoofing vulnerability exists when Microsoft Browsers does not properly parse HTTP content, aka 'Microsoft Browser Spoofing Vulnerability'.
network
low complexity
microsoft CWE-290
4.3
2019-10-09 CVE-2019-15022 Authentication Bypass by Spoofing vulnerability in Zingbox Inspector
A security vulnerability exists in Zingbox Inspector versions 1.294 and earlier, that allows for the Inspector to be susceptible to ARP spoofing.
network
low complexity
zingbox CWE-290
7.5
2019-09-17 CVE-2019-16378 Authentication Bypass by Spoofing vulnerability in multiple products
OpenDMARC through 1.3.2 and 1.4.x through 1.4.0-Beta1 is prone to a signature-bypass vulnerability with multiple From: addresses, which might affect applications that consider a domain name to be relevant to the origin of an e-mail message.
network
low complexity
trusteddomain debian fedoraproject canonical CWE-290
critical
9.8
2019-08-01 CVE-2019-3884 Authentication Bypass by Spoofing vulnerability in Redhat Openshift
A vulnerability exists in the garbage collection mechanism of atomic-openshift.
network
low complexity
redhat CWE-290
5.4
2019-05-22 CVE-2018-7842 Authentication Bypass by Spoofing vulnerability in Schneider-Electric products
A CWE-290: Authentication Bypass by Spoofing vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause an elevation of privilege by conducting a brute force attack on Modbus parameters sent to the controller.
network
low complexity
schneider-electric CWE-290
7.5
2019-04-10 CVE-2019-0283 Authentication Bypass by Spoofing vulnerability in SAP Netweaver Process Integration
SAP NetWeaver Process Integration (Adapter Engine), fixed in versions 7.10 to 7.11, 7.30, 7.31, 7.40, 7.50; is vulnerable to Digital Signature Spoofing.
network
low complexity
sap CWE-290
5.5
2019-04-05 CVE-2019-10875 Authentication Bypass by Spoofing vulnerability in MI Browser and Mint Browser
A URL spoofing vulnerability was found in all international versions of Xiaomi Mi browser 10.5.6-g (aka the MIUI native browser) and Mint Browser 1.5.3 due to the way they handle the "q" query parameter.
network
mi CWE-290
4.3
2019-02-11 CVE-2018-15588 Authentication Bypass by Spoofing vulnerability in Freron Mailmate
MailMate before 1.11.3 mishandles a suspicious HTML/MIME structure in a signed/encrypted email.
network
low complexity
freron CWE-290
5.0