CWE-303 · 97 kayıt
Incorrect Implementation of Authentication Algorithm
Bu sınıftaki CVE’ler
97 kayıt
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
99Hemen | CVE-2023-29357Silahlaştırılmış | Microsoft SharePoint Server Elevation of Privilege Vulnerabilitymicrosoft · sharepoint server · CWE-303 | Kritik9,8 | KEV | %100,0 | 13 Haz 2023 |
58Planlayın | CVE-2020-8863İstismar yok | This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-867, DIR-878, and DIR-dlink · dir-878 firmware · CWE-303 | Yüksek8,8 | — | %76,7 | 23 Mar 2020 |
46Planlayın | CVE-2022-20695İstismar yok | Cisco Wireless LAN Controller Management Interface Authentication Bypass Vulnerabilitycisco · wireless lan controller 8.10.151.0 · CWE-303 | Kritik10,0 | — | %19,8 | 15 Nis 2022 |
41Planlayın | CVE-2024-4985İstismar yok | An authentication bypass vulnerability was present in the GitHub Enterprise Server (GHES) when utilizing SAML single sign-on authentication github · enterprise server · CWE-303 | Kritik10,0 | — | %2,6 | 20 May 2024 |
40Planlayın | CVE-2018-4841İstismar yok | A vulnerability has been identified in TIM 1531 IRC (All versions < V1.1).siemens · tim 1531 irc firmware · CWE-303 | Kritik9,8 | — | %4,7 | 29 Mar 2018 |
40Planlayın | CVE-2025-13390Kavram kanıtı | WP Directory Kit <= 1.4.4 - Authentication Bypass to Privilege Escalation via Account Takeoverwpdirectorykit · wp directory kit · CWE-303 | Kritik9,8 | — | %4,6 | 3 Ara 2025 |
40Planlayın | CVE-2025-21311İstismar yok | Windows NTLM V1 Elevation of Privilege Vulnerabilitymicrosoft · windows 11 24h2 · CWE-303 | Kritik9,8 | — | %2,2 | 14 Oca 2025 |
39İzleyin | CVE-2021-32691İstismar yok | Auto-merging Person Records Compromisedapollosapp · data-connector-rock · CWE-303 | Kritik9,8 | — | %1,5 | 16 Haz 2021 |
39İzleyin | CVE-2023-3326İstismar yok | Network authentication attack via pam_krb5freebsd · freebsd · CWE-303 | Kritik9,8 | — | %1,1 | 22 Haz 2023 |
39İzleyin | CVE-2022-20923İstismar yok | Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers IPSec VPN Server Authentication Bypass Vulnerabilitycisco · rv110w firmware · CWE-303 | Kritik9,8 | — | %0,9 | 8 Eyl 2022 |
39İzleyin | CVE-2023-29129İstismar yok | A vulnerability has been identified in Mendix SAML (Mendix 7 compatible) (All versions >= V1.17.3 < V1.18.0), Mendix SAML (Mendix 7 compatibmendix · saml · CWE-303 | Kritik9,8 | — | %0,9 | 13 Haz 2023 |
39İzleyin | CVE-2025-66489İstismar yok | Cal.com Authentication Bypass via bad TOTP + password checkscal · cal.com · CWE-303 | Kritik9,9 | — | %0,8 | 3 Ara 2025 |
39İzleyin | CVE-2026-59309İstismar yok | vCenter authentication-bypass vulnerabilityvmware · vcenter server · CWE-303 | Kritik9,8 | — | %0,6 | 30 Tem 2026 |
39İzleyin | CVE-2025-12421İstismar yok | Account Takeover via Code Exchange Endpointmattermost · mattermost server · CWE-303 | Kritik9,9 | — | %0,3 | 27 Kas 2025 |
39İzleyin | CVE-2025-12419İstismar yok | Account takeover on OAuth/OpenID-enabled serversmattermost · mattermost server · CWE-303 | Kritik9,9 | — | %0,3 | 27 Kas 2025 |
38İzleyin | CVE-2023-4860İstismar yok | Inappropriate implementation in Skia in Google Chrome prior to 115.0.5790.98 allowed a remote attacker who had compromised the renderer procgoogle · chrome · CWE-303 | Kritik9,6 | — | %0,4 | 16 Tem 2024 |
37İzleyin | CVE-2020-8861İstismar yok | This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-1330 1.10B01 BETA Wi-Fdlink · dap-1330 firmware · CWE-303 | Yüksek8,8 | — | %6,5 | 21 Şub 2020 |
37İzleyin | CVE-2026-29515İstismar yok | MiCode FileExplorer SwiFTP Server Authentication Bypassxiaomi · fileexplorer · CWE-303 | Kritik9,3 | — | %1,0 | 11 Mar 2026 |
37İzleyin | CVE-2024-4332İstismar yok | Improper Authentication in Tripwire Enterprise 9.1.0 APIsfortra · tripwire enterprise · CWE-303 | Kritik9,3 | — | %0,6 | 3 Haz 2024 |
36İzleyin | CVE-2020-15632İstismar yok | This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-842 3.13B05 routers.dlink · dir-842 firmware · CWE-303 | Yüksek8,8 | — | %3,3 | 23 Tem 2020 |
36İzleyin | CVE-2026-28446İstismar yok | OpenClaw < 2026.2.1 - Inbound Allowlist Policy Bypass in voice-call Extension via Empty Caller ID and Suffix Matchingopenclaw · openclaw · CWE-303 | Kritik9,2 | — | %1,0 | 5 Mar 2026 |
36İzleyin | CVE-2026-41103İstismar yok | Microsoft SSO Plugin for Jira & Confluence Elevation of Privilege Vulnerabilitymicrosoft · confluence saml sso · CWE-303 | Kritik9,1 | — | %0,8 | 12 May 2026 |
36İzleyin | CVE-2024-10127İstismar yok | Support for authentication bypass condition in M-Files LDAP authenticationm-files · m-files server · CWE-303 | Kritik9,2 | — | %0,6 | 20 Kas 2024 |
36İzleyin | CVE-2026-3869İstismar yok | CWE-303 : Incorrect Implementation of Authentication Algorithm vulnerability exists that could cause loss of confidentiality, integrity and schneider electric · modicon m580 · CWE-303 | Kritik9,2 | — | %0,5 | 11 Eyl 2026 |
36İzleyin | CVE-2025-14510İstismar yok | ABB Ability OPTIMAX Authentication Bypass in Single-Sign Onabb · abb ability optimax · CWE-303 | Kritik9,2 | — | %0,4 | 16 Oca 2026 |
- CVE-2023-2935799Hemen
Microsoft SharePoint Server Elevation of Privilege Vulnerability
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %100microsoft · sharepoint server13 Haz 2023
- CVE-2020-886358Planlayın
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-867, DIR-878, and DIR-
YüksekCVSS 8,8İstismar yokEPSS %77dlink · dir-878 firmware23 Mar 2020
- CVE-2022-2069546Planlayın
Cisco Wireless LAN Controller Management Interface Authentication Bypass Vulnerability
KritikCVSS 10,0İstismar yokEPSS %20cisco · wireless lan controller 8.10.151.015 Nis 2022
- CVE-2024-498541Planlayın
An authentication bypass vulnerability was present in the GitHub Enterprise Server (GHES) when utilizing SAML single sign-on authentication
KritikCVSS 10,0İstismar yokEPSS %3github · enterprise server20 May 2024
- CVE-2018-484140Planlayın
A vulnerability has been identified in TIM 1531 IRC (All versions < V1.1).
KritikCVSS 9,8İstismar yokEPSS %5siemens · tim 1531 irc firmware29 Mar 2018
- CVE-2025-1339040Planlayın
WP Directory Kit <= 1.4.4 - Authentication Bypass to Privilege Escalation via Account Takeover
KritikCVSS 9,8Kavram kanıtıEPSS %5wpdirectorykit · wp directory kit3 Ara 2025
- CVE-2025-2131140Planlayın
Windows NTLM V1 Elevation of Privilege Vulnerability
KritikCVSS 9,8İstismar yokEPSS %2microsoft · windows 11 24h214 Oca 2025
- CVE-2021-3269139İzleyin
Auto-merging Person Records Compromised
KritikCVSS 9,8İstismar yokEPSS %1apollosapp · data-connector-rock16 Haz 2021
- CVE-2023-332639İzleyin
Network authentication attack via pam_krb5
KritikCVSS 9,8İstismar yokEPSS %1freebsd · freebsd22 Haz 2023
- CVE-2022-2092339İzleyin
Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers IPSec VPN Server Authentication Bypass Vulnerability
KritikCVSS 9,8İstismar yokEPSS %1cisco · rv110w firmware8 Eyl 2022
- CVE-2023-2912939İzleyin
A vulnerability has been identified in Mendix SAML (Mendix 7 compatible) (All versions >= V1.17.3 < V1.18.0), Mendix SAML (Mendix 7 compatib
KritikCVSS 9,8İstismar yokEPSS %1mendix · saml13 Haz 2023
- CVE-2025-6648939İzleyin
Cal.com Authentication Bypass via bad TOTP + password checks
KritikCVSS 9,9İstismar yokEPSS %1cal · cal.com3 Ara 2025
- CVE-2026-5930939İzleyin
vCenter authentication-bypass vulnerability
KritikCVSS 9,8İstismar yokEPSS %1vmware · vcenter server30 Tem 2026
- CVE-2025-1242139İzleyin
Account Takeover via Code Exchange Endpoint
KritikCVSS 9,9İstismar yokEPSS %0mattermost · mattermost server27 Kas 2025
- CVE-2025-1241939İzleyin
Account takeover on OAuth/OpenID-enabled servers
KritikCVSS 9,9İstismar yokEPSS %0mattermost · mattermost server27 Kas 2025
- CVE-2023-486038İzleyin
Inappropriate implementation in Skia in Google Chrome prior to 115.0.5790.98 allowed a remote attacker who had compromised the renderer proc
KritikCVSS 9,6İstismar yokEPSS %0google · chrome16 Tem 2024
- CVE-2020-886137İzleyin
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-1330 1.10B01 BETA Wi-F
YüksekCVSS 8,8İstismar yokEPSS %7dlink · dap-1330 firmware21 Şub 2020
- CVE-2026-2951537İzleyin
MiCode FileExplorer SwiFTP Server Authentication Bypass
KritikCVSS 9,3İstismar yokEPSS %1xiaomi · fileexplorer11 Mar 2026
- CVE-2024-433237İzleyin
Improper Authentication in Tripwire Enterprise 9.1.0 APIs
KritikCVSS 9,3İstismar yokEPSS %1fortra · tripwire enterprise3 Haz 2024
- CVE-2020-1563236İzleyin
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-842 3.13B05 routers.
YüksekCVSS 8,8İstismar yokEPSS %3dlink · dir-842 firmware23 Tem 2020
- CVE-2026-2844636İzleyin
OpenClaw < 2026.2.1 - Inbound Allowlist Policy Bypass in voice-call Extension via Empty Caller ID and Suffix Matching
KritikCVSS 9,2İstismar yokEPSS %1openclaw · openclaw5 Mar 2026
- CVE-2026-4110336İzleyin
Microsoft SSO Plugin for Jira & Confluence Elevation of Privilege Vulnerability
KritikCVSS 9,1İstismar yokEPSS %1microsoft · confluence saml sso12 May 2026
- CVE-2024-1012736İzleyin
Support for authentication bypass condition in M-Files LDAP authentication
KritikCVSS 9,2İstismar yokEPSS %1m-files · m-files server20 Kas 2024
- CVE-2026-386936İzleyin
CWE-303 : Incorrect Implementation of Authentication Algorithm vulnerability exists that could cause loss of confidentiality, integrity and
KritikCVSS 9,2İstismar yokEPSS %1schneider electric · modicon m58011 Eyl 2026
- CVE-2025-1451036İzleyin
ABB Ability OPTIMAX Authentication Bypass in Single-Sign On
KritikCVSS 9,2İstismar yokEPSS %0abb · abb ability optimax16 Oca 2026