Dell NetWorker Management Console Trust Management Issues Vulnerability

Dell NetWorker Management Console is a backup and recovery software from Dell USA. A trust management issue vulnerability exists in Dell NetWorker Management Console version 19.11, which stems from the presence of improper cryptographic signature validation, and can be exploited by an attacker to...

Cisco 7940/7960 IP Phones Improper Verification of Cryptographic Signature (CVE-2005-2181)

Cisco 7940/7960 Voice over IP VoIP phones do not properly check the Call-ID, branch, and tag values in a NOTIFY message to verify a subscription, which allows remote attackers to spoof messages such as the Messages waiting message. This plugin only works with Tenable.ot. Please visit...

CVE-2024-47476

Dell NetWorker Management Console, versions 19.11, contains an Improper Verification of Cryptographic Signature vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Code execution...

CVE-2024-47476

Dell NetWorker Management Console, versions 19.11, contains an Improper Verification of Cryptographic Signature vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Code execution...

CVE-2024-47476

CVE-2024-47476 concerns Dell NetWorker Management Console (version 19.11). The vulnerability is an improper verification of cryptographic signatures, which could allow an unauthenticated, locally privileged attacker to execute code on affected systems. Connected sources consistently describe the ...

CVE-2024-49413

Improper Verification of Cryptographic Signature in SmartSwitch prior to SMR Dec-2024 Release 1 allows local attackers to install malicious applications...

CVE-2024-49413

Improper Verification of Cryptographic Signature in SmartSwitch prior to SMR Dec-2024 Release 1 allows local attackers to install malicious applications...

CVE-2024-49413

CVE-2024-49413 concerns Samsung SmartSwitch (PC) prior to the SMR December 2024 Release 1. The issue is an improper verification of cryptographic signatures when installing applications, enabling local attackers to install malicious software via SmartSwitch. Multiple sources corroborate: PT-Secur...

CVE-2024-49413

Improper Verification of Cryptographic Signature in SmartSwitch prior to SMR Dec-2024 Release 1 allows local attackers to install malicious applications...

The vulnerability in the `loadManifestFromFile` function of Mozilla Firefox, Firefox ESR, and the email client Thunderbird allows a hacker to circumvent security restrictions.

The vulnerability of the loadManifestFromFile function in Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to errors in checking the cryptographic signature. Exploiting this vulnerability could allow an attacker to circumvent security restrictions...

CVE-2024-52958

A improper verification of cryptographic signature vulnerability in plugin management in iota C.ai Conversational Platform from 1.0.0 through 2.1.3 allows remote authenticated users to load a malicious DLL via upload plugin function...

CVE-2024-52958

The CVE-2024-52958 entry concerns iota C.ai Conversational Platform (versions 1.0.0–2.1.3) with an issue in plugin management: improper verification of cryptographic signatures. This vulnerability enables remote authenticated users to load a malicious DLL via the plugin upload function. The CVSS-...

CVE-2024-52958 iota C.ai Conversational Platform - Improper Verification of Cryptographic Signature

A improper verification of cryptographic signature vulnerability in plugin management in iota C.ai Conversational Platform from 1.0.0 through 2.1.3 allows remote authenticated users to load a malicious DLL via upload plugin function...

The vulnerability of the VPN server for corporate networks of Ivanti Secure Access Client (ISAC), previously known as Pulse Secure Desktop Client, on Windows operating systems arises from incorrect verification of the cryptographic signature. This vulnerability allows attackers to escalate their privileges.

The vulnerability of the Ivanti Secure Access Client ISAC, previously known as Pulse Secure Desktop Client, for corporate networks running on Windows operating systems is related to an improper verification of the cryptographic signature. Exploiting this vulnerability can allow attackers to...

Fortinet FortiClient Data Forgery Issue Vulnerability (CNVD-2024-49647)

Fortinet FortiClient is a mobile endpoint security solution from Fortinet. The solution provides IPsec and SSL encryption, WAN optimization, endpoint compliance and two-factor authentication when connected to a FortiGate firewall appliance. The Fortinet FortiClient is vulnerable to a data forgery...

CVE-2024-40592

An improper verification of cryptographic signature vulnerability CWE-347 in FortiClient MacOS version 7.4.0, version 7.2.4 and below, version 7.0.10 and below, version 6.4.10 and below may allow a local authenticated attacker to swap the installer with a malicious package via a race condition...

CVE-2024-40592

An improper verification of cryptographic signature vulnerability CWE-347 in FortiClient MacOS version 7.4.0, version 7.2.4 and below, version 7.0.10 and below, version 6.4.10 and below may allow a local authenticated attacker to swap the installer with a malicious package via a race condition...

CVE-2024-40592

Summary: CVE-2024-40592 affects FortiClient for macOS. FortiClient MacOS versions 7.4.0, 7.2.4 and below, 7.0.10 and below, 6.4.10 and below are vulnerable due to improper verification of a cryptographic signature, which may allow a local authenticated attacker to swap the installer with a malici...

CVE-2024-40592

An improper verification of cryptographic signature vulnerability CWE-347 in FortiClient MacOS version 7.4.0, version 7.2.4 and below, version 7.0.10 and below, version 6.4.10 and below may allow a local authenticated attacker to swap the installer with a malicious package via a race condition...

Mutt 安全漏洞

Mutt is a text-based e-mail client for Unix-like systems developed by Michael Elkins. A security vulnerability exists in Mutt that stems from the In-Reply-To email header field not being protected by a cryptographic signature, which allows an attacker to reuse unencrypted but signed email message...