CWE-290

Inappropriate implementation in full screen in Google Chrome on Android prior to 100.0.4896.88 allowed a remote attacker

Incorrect security UI in Downloads in Google Chrome on Android prior to 101.0.4951.41 allowed a remote attacker to spoof

Sage X3 Unauthenticated Remote Command Execution (RCE) as SYSTEM in AdxDSrv.exe component. By editing the client side au

HomeAutomation 3.3.2 suffers from an authentication bypass vulnerability when spoofing client IP address using the X-For

Versions up to, and including, 5.4.3, of the Booster for WooCommerce WordPress plugin are vulnerable to authentication b

Authentication Bypass by Spoofing vulnerability exists in EcoStruxure Control Expert (all versions prior to V15.0 SP1, i

OpenStack Neutron before 16.4.1, 17.x before 17.1.3, and 18.0.0 allows hardware address impersonation when the linuxbrid

Nacos is a platform designed for dynamic service discovery and configuration and service management. In Nacos before ver

ThroughTek's Kalay Platform 2.0 network allows an attacker to impersonate an arbitrary ThroughTek (TUTK) device given a

Pax Technology PAXSTORE v7.0.8_20200511171508 and lower is affected by a token spoofing vulnerability. Each payment term

Microsoft SharePoint Server Spoofing Vulnerability

Certain NETGEAR smart switches are affected by an authentication hijacking race-condition vulnerability by an unauthenti

Microsoft SharePoint Server Spoofing Vulnerability

Apache Cassandra versions 2.1.0 to 2.1.22, 2.2.0 to 2.2.19, 3.0.0 to 3.0.23, and 3.11.0 to 3.11.9, when using 'dc' or 'r

If exploited, this vulnerability allows an attacker to access resources which are not otherwise accessible without prope

An issue was discovered in Tor before 0.4.6.5, aka TROVE-2021-003. An attacker can forge RELAY_END or RELAY_RESOLVED to

A denial-of-service attack in WPA2, and WPA3-SAE authentication methods in D-Link DIR-X1560, v1.04B04, and DIR-X6060, v1

A denial-of-service attack in WPA2, and WPA3-SAE authentication methods in TP-Link AX10v1 before V1_211014, allows a rem

Opencast is an Open Source Lecture Capture & Video Management for Education. Opencast versions prior to 9.10 allow HTTP

An authentication bypass vulnerability in the Juniper Networks Paragon Active Assurance Control Center may allow an atta

Microsoft SharePoint Server Spoofing Vulnerability

Incorrect security UI in Page Info in Google Chrome on iOS prior to 88.0.4324.96 allowed a remote attacker to spoof secu

An issue was discovered in Scytl sVote 2.1. Because the IP address from an X-Forwarded-For header (which can be manipula

A malicious extension could have opened a popup window lacking an address bar. The title of the popup lacking an address

Inappropriate implementation in Autofill in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to spoof secur

Inappropriate implementation in Autofill in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to spoof secur

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Exchange Server Spoofing Vulnerability

An authentication bypass vulnerability was found in Kiali in versions before 1.31.0 when the authentication strategy `Op

Common is a package of common modules that can be accessed by NIMBLE services. Common before commit number 3b96cb0293d34

Chromium: CVE-2021-30619 UI Spoofing in Autofill

Chromium: CVE-2021-30621 UI Spoofing in Autofill

Extensible Service Proxy, a.k.a. ESP is a proxy which enables API management capabilities for JSON/REST or gRPC API serv

NextAuth.js (next-auth) is am open source authentication solution for Next.js applications. In next-auth before version

An exploitable denial-of-service vulnerability exists in Systemd 245. A specially crafted DHCP FORCERENEW packet can cau

A logic error in the room key sharing functionality of matrix-js-sdk (aka Matrix Javascript SDK) before 12.4.1 allows a

A logic error in the room key sharing functionality of Element Android before 1.2.2 and matrix-android-sdk2 (aka Matrix

SOOIL Developments Co Ltd DiabecareRS,AnyDana-i & AnyDana-A, the communication protocol of the insulin pump and its AnyD

Windows Hello Security Feature Bypass Vulnerability

Azure Active Directory Pod Identity Spoofing Vulnerability

Access Restriction Bypass via referrer spoof was discovered in SolarWinds Web Help Desk 12.7.2. An attacker can access t

Yandex Browser before 20.10.0 allows remote attackers to spoof the address bar

An issue in Gate One 1.2.0 allows attackers to bypass to the verification check done by the origins list and connect to

Microsoft SharePoint Server Spoofing Vulnerability

SAP NetWeaver Application Server Java(HTTP Service), versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not suffi

A flaw was found in dnsmasq before version 2.83. When receiving a query, dnsmasq does not check for an existing pending

curl 7.63.0 to and including 7.75.0 includes vulnerability that allows a malicious HTTPS proxy to MITM a connection due

Microsoft Edge (Chromium-based) Spoofing Vulnerability

Microsoft Edge for iOS Spoofing Vulnerability

Concourse, versions prior to 6.3.1 and 6.4.1, in installations which use the GitLab auth connector, is vulnerable to ide