CVE-2022-23507 Light client verification not taking into account chain ID

Tendermint is a high-performance blockchain consensus engine for Byzantine fault tolerant applications. Versions prior to 0.28.0 contain a potential attack via Improper Verification of Cryptographic Signature, affecting anyone using the tendermint-light-client and related packages to perform ligh...

PT-2022-6357 · Dell · Alienware Update +2

Name of the Vulnerable Software and Affected Versions: Dell Command | Update, Dell Update, and Alienware Update versions prior to 4.7 Description: The issue is related to an improper verification of cryptographic signature in the get applicable driver component. This could allow a local malicious...

CVE-2022-41666

A CWE-347: Improper Verification of Cryptographic Signature vulnerability exists that allows adversaries with local user privileges to load a malicious DLL which could lead to execution of malicious code. Affected Products: EcoStruxure Operator Terminal ExpertV3.3 Hotfix 1 or prior, Pro-face...

Information disclosure

A CWE-347: Improper Verification of Cryptographic Signature vulnerability exists that allows adversaries with local user privileges to load a malicious DLL which could lead to execution of malicious code. Affected Products: EcoStruxure Operator Terminal ExpertV3.3 Hotfix 1 or prior, Pro-face...

CVE-2022-41669

Schneider Electric EcoStruxure Operator Terminal Expert and Pro-face BLUE are affected by CVE-2022-41669 due to improper verification of cryptographic signatures in the SGIUtility component. An attacker with local user privileges can load a malicious DLL, potentially executing arbitrary code on t...

CVE-2022-41669

A CWE-347: Improper Verification of Cryptographic Signature vulnerability exists in the SGIUtility component that allows adversaries with local user privileges to load a malicious DLL which could result in execution of malicious code. Affected Products: EcoStruxure Operator Terminal ExpertV3.3...

CVE-2022-41666

A CWE-347: Improper Verification of Cryptographic Signature vulnerability exists that allows adversaries with local user privileges to load a malicious DLL which could lead to execution of malicious code. Affected Products: EcoStruxure Operator Terminal ExpertV3.3 Hotfix 1 or prior, Pro-face...

CVE-2022-41666

A CWE-347: Improper Verification of Cryptographic Signature vulnerability exists that allows adversaries with local user privileges to load a malicious DLL which could lead to execution of malicious code. Affected Products: EcoStruxure Operator Terminal ExpertV3.3 Hotfix 1 or prior, Pro-face...

The vulnerability of the MoTe-Web mechanism in Windows operating systems allows a hacker to bypass security measures and execute arbitrary code.

The vulnerability of the MoTe-Web mechanism in Windows operating systems is related to improper verification of the cryptographic signature. Exploiting this vulnerability allows a malicious actor to bypass security mechanisms and execute arbitrary code...

PT-2022-5228 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a flaw in the Mark-of-the-Web MoTW mechanism of Windows operating systems, specifically concerning incorrect cryptographic signature verification. This could allow a...

The vulnerability of clients for conducting real-time audio and video conferences via Zoom Client for Meetings for Windows allows a perpetrator to compromise the integrity of protected information.

The vulnerability of clients for conducting real-time audio and video conferences using the Zoom Client for Meetings for Windows involves an improper verification of the cryptographic signature. Exploiting this vulnerability can allow attackers to compromise the integrity of the protected...

Improper Verification Of Cryptographic Signature

Node-saml is vulnerable to improper cryptographic signature verification. A remote attacker is able to bypass SAML authentication via an arbitrary IDP signed XML element, due to improper checks for a valid top-level signature in saml.ts...

Improper Verification Of Cryptographic Signature

Passport-saml is vulnerable to improper cryptographic signature verification. A remote attacker is able to bypass SAML authentication via an arbitrary IDP signed XML element, due to improper checks for a valid top-level signature in saml.ts...

PT-2022-6468 · Schneider Electric · Ecostruxure Operator Terminal Expert +1

Name of the Vulnerable Software and Affected Versions: EcoStruxure Operator Terminal Expert versions prior to V3.3 Hotfix 1 Pro-face BLUE versions prior to V3.3 Hotfix 1 Description: The issue is related to an improper verification of cryptographic signature in the SGIUtility component. This coul...

The vulnerability of the implementation of the shim_lock verification mechanism in the Grub2 operating system allows a perpetrator to execute arbitrary code and gain full control over the device.

The vulnerability of the shimlock verification mechanism in the Grub2 operating system’s loader is related to incorrect checking of the cryptographic signature. Exploiting this vulnerability allows an attacker to execute arbitrary code and gain full control over the device...

The vulnerability of clients for conducting real-time audio and video conferences via Zoom Client for Meetings on macOS arises from improper verification of the cryptographic signature. This allows a perpetrator to execute arbitrary commands with root privileges.

The vulnerability of clients for conducting real-time audio and video conferences using Zoom Client for Meetings on macOS is related to an improper verification of the cryptographic signature. Exploiting this vulnerability could allow a perpetrator to execute arbitrary commands with root privileg...

The vulnerability of clients for conducting real-time audio and video conferences via Zoom Client for Meetings on macOS arises from improper verification of the cryptographic signature. This allows a perpetrator to execute arbitrary commands with root privileges.

The vulnerability of clients for conducting real-time audio and video conferences using Zoom Client for Meetings on macOS is related to an improper verification of the cryptographic signature. Exploiting this vulnerability could allow a perpetrator to execute arbitrary commands with root privileg...

CVE-2022-2790

Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulenrable to CWE-347 Improper Verification of Cryptographic Signature, and does not properly verify compiled logic PDT files and data blocks data BLD/BLK files...

Design/Logic Flaw

Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulenrable to CWE-347 Improper Verification of Cryptographic Signature, and does not properly verify compiled logic PDT files and data blocks data BLD/BLK files...

CVE-2022-2790

CVE-2022-2790 affects Emerson Electric’s Proficy Machine Edition, version 9.00 and prior. The issue is an improper verification of cryptographic signatures (CWE-347) that leads to failure to properly verify compiled logic (PDT files) and data blocks data (BLD/BLK files). Reported by multiple sour...