Vulnerabilities > Authentication Bypass by Spoofing

DATE CVE VULNERABILITY TITLE RISK
2019-02-01 CVE-2018-16483 Authentication Bypass by Spoofing vulnerability in Express-Cart Project Express-Cart
A deficiency in the access control in module express-cart <=1.1.5 allows unprivileged users to add new users to the application as administrators.
network
low complexity
express-cart-project CWE-290
6.5
2018-09-19 CVE-2018-3829 Authentication Bypass by Spoofing vulnerability in Elastic Cloud Enterprise
In Elastic Cloud Enterprise (ECE) versions prior to 1.1.4 it was discovered that a user could scale out allocators on new hosts with an invalid roles token.
network
high complexity
elastic CWE-290
5.3
2018-09-13 CVE-2018-8425 Authentication Bypass by Spoofing vulnerability in Microsoft Edge
A spoofing vulnerability exists when Microsoft Edge improperly handles specific HTML content, aka "Microsoft Edge Spoofing Vulnerability." This affects Microsoft Edge.
network
microsoft CWE-290
4.3
2018-09-06 CVE-2018-1695 Authentication Bypass by Spoofing vulnerability in IBM Websphere Application Server 7.0.0.0/8.0.0.0/8.5.5.0
IBM WebSphere Application Server 7.0, 8.0, and 8.5.5 installations using Form Login could allow a remote attacker to conduct spoofing attacks.
network
ibm CWE-290
6.8
2018-08-15 CVE-2018-8388 Authentication Bypass by Spoofing vulnerability in Microsoft Edge
A spoofing vulnerability exists when Microsoft Edge improperly handles specific HTML content, aka "Microsoft Edge Spoofing Vulnerability." This affects Microsoft Edge.
network
microsoft CWE-290
4.3
2018-08-15 CVE-2018-8383 Authentication Bypass by Spoofing vulnerability in Microsoft Edge
A spoofing vulnerability exists when Microsoft Edge does not properly parse HTTP content, aka "Microsoft Edge Spoofing Vulnerability." This affects Microsoft Edge.
network
microsoft CWE-290
4.3
2018-07-11 CVE-2018-8278 Authentication Bypass by Spoofing vulnerability in Microsoft Edge
A spoofing vulnerability exists when Microsoft Edge improperly handles specific HTML content, aka "Microsoft Edge Spoofing Vulnerability." This affects Microsoft Edge.
network
microsoft CWE-290
5.8
2018-06-17 CVE-2018-12331 Authentication Bypass by Spoofing vulnerability in Ecos System Management Appliance 5.2.68
Authentication Bypass by Spoofing vulnerability in ECOS System Management Appliance (aka SMA) 5.2.68 allows a man-in-the-middle attacker to compromise authentication keys and configurations via IP spoofing during "Easy Enrollment."
network
ecos CWE-290
5.8
2018-05-17 CVE-2018-7160 Authentication Bypass by Spoofing vulnerability in Nodejs Node.Js
The Node.js inspector, in 6.x and later is vulnerable to a DNS rebinding attack which could be exploited to perform remote code execution.
network
low complexity
nodejs CWE-290
8.8
2018-05-09 CVE-2018-8153 Authentication Bypass by Spoofing vulnerability in Microsoft Exchange Server 2016
A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access (OWA) fails to properly handle web requests, aka "Microsoft Exchange Spoofing Vulnerability." This affects Microsoft Exchange Server.
network
microsoft CWE-290
5.8