Skip to content
Noroxi

CWE-303 · 101 records

Incorrect Implementation of Authentication Algorithm

CVEs in this class

102 records

  • CVE-2023-29357
    99Now

    Microsoft SharePoint Server Elevation of Privilege Vulnerability

    CriticalCVSS 9.8KEVWeaponizedEPSS 99%

    microsoft · sharepoint serverJun 13, 2023

  • CVE-2020-8863
    58Plan

    This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-867, DIR-878, and DIR-

    HighCVSS 8.8No exploitEPSS 76%

    dlink · dir-878 firmwareMar 23, 2020

  • CVE-2022-20695
    46Plan

    Cisco Wireless LAN Controller Management Interface Authentication Bypass Vulnerability

    CriticalCVSS 10.0No exploitEPSS 19%

    cisco · wireless lan controller 8.10.151.0Apr 15, 2022

  • CVE-2024-4985
    41Plan

    An authentication bypass vulnerability was present in the GitHub Enterprise Server (GHES) when utilizing SAML single sign-on authentication

    CriticalCVSS 10.0No exploitEPSS 2%

    github · enterprise serverMay 20, 2024

  • CVE-2018-4841
    40Plan

    A vulnerability has been identified in TIM 1531 IRC (All versions < V1.1).

    CriticalCVSS 9.8No exploitEPSS 4%

    siemens · tim 1531 irc firmwareMar 29, 2018

  • CVE-2025-13390
    40Plan

    WP Directory Kit <= 1.4.4 - Authentication Bypass to Privilege Escalation via Account Takeover

    CriticalCVSS 9.8Proof of conceptEPSS 4%

    wpdirectorykit · wp directory kitDec 3, 2025

  • CVE-2025-21311
    40Plan

    Windows NTLM V1 Elevation of Privilege Vulnerability

    CriticalCVSS 9.8No exploitEPSS 2%

    microsoft · windows 11 24h2Jan 14, 2025

  • CVE-2021-32691
    39Monitor

    Auto-merging Person Records Compromised

    CriticalCVSS 9.8No exploitEPSS 1%

    apollosapp · data-connector-rockJun 16, 2021

  • CVE-2023-3326
    39Monitor

    Network authentication attack via pam_krb5

    CriticalCVSS 9.8No exploitEPSS 1%

    freebsd · freebsdJun 22, 2023

  • CVE-2022-20923
    39Monitor

    Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers IPSec VPN Server Authentication Bypass Vulnerability

    CriticalCVSS 9.8No exploitEPSS 0%

    cisco · rv110w firmwareSep 8, 2022

  • CVE-2023-29129
    39Monitor

    A vulnerability has been identified in Mendix SAML (Mendix 7 compatible) (All versions >= V1.17.3 < V1.18.0), Mendix SAML (Mendix 7 compatib

    CriticalCVSS 9.8No exploitEPSS 0%

    mendix · samlJun 13, 2023

  • CVE-2025-66489
    39Monitor

    Cal.com Authentication Bypass via bad TOTP + password checks

    CriticalCVSS 9.9No exploitEPSS 0%

    cal · cal.comDec 3, 2025

  • CVE-2026-59309
    39Monitor

    vCenter authentication-bypass vulnerability

    CriticalCVSS 9.8No exploitEPSS 0%

    vmware · vcenter serverJul 30, 2026

  • CVE-2025-12419
    39Monitor

    Account takeover on OAuth/OpenID-enabled servers

    CriticalCVSS 9.9No exploitEPSS 0%

    mattermost · mattermost serverNov 27, 2025

  • CVE-2025-12421
    39Monitor

    Account Takeover via Code Exchange Endpoint

    CriticalCVSS 9.9No exploitEPSS 0%

    mattermost · mattermost serverNov 27, 2025

  • CVE-2023-4860
    38Monitor

    Inappropriate implementation in Skia in Google Chrome prior to 115.0.5790.98 allowed a remote attacker who had compromised the renderer proc

    CriticalCVSS 9.6No exploitEPSS 0%

    google · chromeJul 16, 2024

  • CVE-2020-8861
    37Monitor

    This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-1330 1.10B01 BETA Wi-F

    HighCVSS 8.8No exploitEPSS 6%

    dlink · dap-1330 firmwareFeb 21, 2020

  • CVE-2026-29515
    37Monitor

    MiCode FileExplorer SwiFTP Server Authentication Bypass

    CriticalCVSS 9.3No exploitEPSS 1%

    xiaomi · fileexplorerMar 11, 2026

  • CVE-2024-4332
    37Monitor

    Improper Authentication in Tripwire Enterprise 9.1.0 APIs

    CriticalCVSS 9.3No exploitEPSS 0%

    fortra · tripwire enterpriseJun 3, 2024

  • CVE-2020-15632
    36Monitor

    This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-842 3.13B05 routers.

    HighCVSS 8.8No exploitEPSS 3%

    dlink · dir-842 firmwareJul 23, 2020

  • CVE-2026-28446
    36Monitor

    OpenClaw < 2026.2.1 - Inbound Allowlist Policy Bypass in voice-call Extension via Empty Caller ID and Suffix Matching

    CriticalCVSS 9.2No exploitEPSS 1%

    openclaw · openclawMar 5, 2026

  • CVE-2026-41103
    36Monitor

    Microsoft SSO Plugin for Jira & Confluence Elevation of Privilege Vulnerability

    CriticalCVSS 9.1No exploitEPSS 0%

    microsoft · confluence saml ssoMay 12, 2026

  • CVE-2024-10127
    36Monitor

    Support for authentication bypass condition in M-Files LDAP authentication

    CriticalCVSS 9.2No exploitEPSS 0%

    m-files · m-files serverNov 20, 2024

  • CVE-2026-3869
    36Monitor

    CWE-303 : Incorrect Implementation of Authentication Algorithm vulnerability exists that could cause loss of confidentiality, integrity and

    CriticalCVSS 9.2No exploitEPSS 0%

    schneider electric · modicon m580Sep 11, 2026

  • CVE-2025-14510
    36Monitor

    ABB Ability OPTIMAX Authentication Bypass in Single-Sign On

    CriticalCVSS 9.2No exploitEPSS 0%

    abb · abb ability optimaxJan 16, 2026

All vulnerability classes