61 matches found
The vulnerability of the verify_dnskey_rrset() function in the Hickory DNS client (formerly Trust-DNS) allows a attacker to circumvent security restrictions and gain unauthorized access to protected information.
The vulnerability of the verifydnskeyrrset function in the Hickory DNS client formerly Trust-DNS is related to insufficient verification of data authenticity. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and gain unauthorized access to protected informati...
Vulnerability of Google Chrome and Microsoft Edge browser installers, allowing attackers to increase their privileges
The vulnerability of Google Chrome and Microsoft Edge browsers is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created link...
Vulnerability of Google Chrome and Microsoft Edge browser installers, allowing attackers to increase their privileges
The vulnerability of Google Chrome and Microsoft Edge browsers is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially crafted link...
The vulnerability of the Dawn component in browsers Google Chrome and Microsoft Edge on Android operating systems allows a hacker to execute arbitrary code.
The vulnerability of the Dawn component in Google Chrome and Microsoft Edge browsers on Android operating systems is related to insufficient verification of data authenticity. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created HTML page from...
The vulnerability of the scanLib.bin library in the microprogramming software for programmable logic controllers AutomationDirect P3-550E allows a intruder to execute arbitrary code or cause a service failure.
The vulnerability of the scanLib.bin library in the microprogramming software for AutomationDirect P3-550E controllers is related to insufficient data authenticity checks. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause service failures...
The vulnerability of the Postscript File Handler component in Lexmark’s microprogramming printing software allows a hacker to execute arbitrary code.
The vulnerability of the Postscript File Handler component in Lexmark’s microprogramming printing software exists due to the lack of authenticity checks before access to functions is granted. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of the XWiki platform for creating collaborative web applications lies in the insufficient verification of the authenticity of executed queries. This allows attackers to obtain the rights of the current user.
The vulnerability of the XWiki Platform lies in the insufficient verification of the authenticity of executed queries. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain the privileges of the current user through a specially created URL...
CVE-2023-23773
Motorola EBTS/MBTS Base Radio fails to check firmware authenticity. The Motorola MBTS Base Radio lacks cryptographic signature validation for firmware update packages, allowing an authenticated attacker to gain arbitrary code execution, extract secret key material, and/or leave a persistent impla...
ABB (CVE-2019-7229)
The ABB CP635 HMI uses two different transmission methods to upgrade its firmware and its software components: Utilization of USB/SD Card to flash the device and Remote provisioning process via ABB Panel Builder 600 over FTP. Neither of these transmission methods implements any form of encryption...
Phoenix Contact Classic Line Controllers Insufficient Verification of Data Authenticity (CVE-2022-31800)
An unauthenticated, remote attacker could upload malicious logic to devices based on ProConOS/ProConOS eCLR in order to gain full control over the device. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C...
The vulnerability of Fortinet’s antivirus scanning system for FortiOS operating systems and FortiMail email protection systems allows attackers to bypass security restrictions.
The vulnerability of Fortinet’s antivirus software for FortiOS operating systems and the FortiMail email protection system is related to insufficient verification of data authenticity. Exploiting this vulnerability allows a malicious actor to circumvent security restrictions using MIME content wi...
CVE-2022-36360
A vulnerability has been identified in LOGO! 8 BM incl. SIPLUS variants All versions V8.3. Affected devices load firmware updates without checking the authenticity. Furthermore the integrity of the unencrypted firmware is only verified by a non-cryptographic method. This could allow an attacker t...
The vulnerabilities of the microprogramming software for the OPC UA Modicon Communication Module (BMENUA0100) and the X80 advanced RTU Communication Module (BMENOR2200H) allow attackers to cause service interruptions.
The vulnerability of the microprogramming software for the OPC UA Modicon Communication Module BMENUA0100 and the X80 advanced RTU Communication Module BMENOR2200H is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow an attacker operating remotely ...
The vulnerability of the built-in formats of Ovation OCR400 and Ovation OCR1100 allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service interruptions.
The vulnerability of the built-in formats of Ovation OCR400 and Ovation OCR1100 is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow an attacker operating remotely to gain access to confidential data, compromise its integrity, and cause service...
The vulnerability of the implementation of the Safety Builder protocol for Safety Manager controller devices allows a intruder to execute arbitrary code.
The vulnerability of the implementation of the Safety Builder protocol for Safety Manager controllers is related to insufficient verification of data authenticity. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code...
The vulnerability of microprogrammed software in programmable logic controllers such as AXC 1050, AXC 1050 XC, AXC 3050, FC 350 PCI ETH, ILC1x0, ILC1x1, ILC 1x1 GSM/GPRS, ILC 3xx, PC WORX RT BASIC, PC WORX SRT, RFC 430 ETH-IB, RFC 450 ETH-IB, RFC 460R PN 3TX, RFC 460R PN 3TX-S, RFC 470 PN 3TX, RFC 470S PN 3TX, RFC 480S PN 4TX arises from insufficient data authenticity checks. This allows attackers to gain full control over the device.
The vulnerabilities of microprogrammed software in programmable logic controllers such as AXC 1050, AXC 1050 XC, AXC 3050, FC 350 PCI ETH, ILC1x0, ILC1x1, ILC 1x1 GSM/GPRS, ILC 3xx, PC WORX RT BASIC, PC WORX SRT, RFC 430 ETH-IB, RFC 450 ETH-IB, RFC 460R PN 3TX, RFC 460R PN 3TX-S, RFC 470 PN 3TX,...
Pexip Infinity licensing issue vulnerability
Pexip Infinity is a cloud collaboration platform for video conferencing from Pexip, a Norwegian company. A security vulnerability exists in Pexip Infinity Connect versions prior to 1.8.0, which stems from the omission of certain resource provisioning authenticity checks. An attacker could exploit...
CVE-2021-29655
Pexip Infinity Connect before 1.8.0 omits certain provisioning authenticity checks. Thus, untrusted code may execute...
