CVE-2021-43171: Improper Verification of Cryptographic Signature

Improper verification of applications' cryptographic signatures in the /e/OS app store client App Lounge before 0.19q allows attackers in control of the application server to install malicious applications on user's systems by altering the server's API response...

PT-2023-12420

Name of the Vulnerable Software and Affected Versions App Lounge versions prior to 0.19q Description The issue arises from improper verification of applications' cryptographic signatures in the App Lounge client. This allows attackers who control the application server to install malicious...

CVE-2023-39392: Improper Verification of Cryptographic Signature

Vulnerability of insecure signatures in the OsuLogin module. Successful exploitation of this vulnerability may cause OsuLogin to be maliciously modified and overwritten...

CVE-2023-39969: Improper Verification of Cryptographic Signature

uthenticode is a small cross-platform library for partially verifying Authenticode digital signatures. Version 1.0.9 of uthenticode hashed the entire file rather than hashing sections by virtual address, in violation of the Authenticode specification. As a result, an attacker could modify code...

CVE-2023-38418: Improper Verification of Cryptographic Signature

The BIG-IP Edge Client Installer on macOS does not follow best practices for elevating privileges during the installation process. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2023-3347: Improper Verification of Cryptographic Signature

A vulnerability was found in Samba's SMB2 packet signing mechanism. The SMB2 packet signing is not enforced if an admin configured "server signing = required" or for SMB2 connections to Domain Controllers where SMB2 packet signing is mandatory. This flaw allows an attacker to perform attacks, suc...

CVE-2023-32449

Dell PowerStore versions prior to 3.5 contain an improper verification of cryptographic signature vulnerability. An attacker can trick a high privileged user to install a malicious binary by bypassing the existing cryptographic signature checks...

CVE-2023-32449

Dell PowerStore versions prior to 3.5 contain an improper verification of cryptographic signature vulnerability. An attacker can trick a high privileged user to install a malicious binary by bypassing the existing cryptographic signature checks...

CVE-2023-32449

Dell PowerStore versions prior to 3.5 contain an improper verification of cryptographic signature vulnerability. An attacker can trick a high privileged user to install a malicious binary by bypassing the existing cryptographic signature checks...

CVE-2023-32449

Dell PowerStore before 3.5 contains an improper verification of cryptographic signatures, allowing a local attacker to trick a high-privilege user into installing a malicious binary by bypassing signature checks. Affected product: Dell PowerStore (versions prior to 3.5). Root cause: incorrect cry...

CVE-2023-32449: Improper Verification of Cryptographic Signature

Dell PowerStore versions prior to 3.5 contain an improper verification of cryptographic signature vulnerability. An attacker can trick a high privileged user to install a malicious binary by bypassing the existing cryptographic signature checks...

CVE-2023-3325

The CMS Commander plugin for WordPress is vulnerable to authorization bypass due to the use of an insufficiently unique cryptographic signature on the 'cmscaddsite' function in versions up to, and including, 2.287. This makes it possible for unauthenticated attackers to the plugin to change the...

Authorization

The CMS Commander plugin for WordPress is vulnerable to authorization bypass due to the use of an insufficiently unique cryptographic signature on the 'cmscaddsite' function in versions up to, and including, 2.287. This makes it possible for unauthenticated attackers to the plugin to change the...

CVE-2023-3325 CMS Commander <= 2.287 - Authorization Bypass through Use of Insufficiently Unique Cryptographic Signature

The CMS Commander plugin for WordPress is vulnerable to authorization bypass due to the use of an insufficiently unique cryptographic signature on the 'cmscaddsite' function in versions up to, and including, 2.287. This makes it possible for unauthenticated attackers to the plugin to change the...

CVE-2023-3325

CVE-2023-3325 : The CMS Commander plugin for WordPress (versions ≤ 2.287) has an authorization bypass caused by a non-unique cryptographic signature on cmsc_add_site, enabling unauthenticated attackers to modify the _cmsc_public_key and gain access to the plugin’s remote-control capabilities (e.g...

CMS Commander < 2.288 - Unauthenticated Authorisation Bypass

The plugin does not use a sufficient unique cryptographic signature in its cmscaddsite feature, which could allow unauthenticated users to update the cmscpublickey settings when the plugin has not been configured yet, and get access to the plugin's remote control features such as creating an...

CVE-2023-28602

Zoom for Windows clients prior to 5.13.5 contain an improper verification of cryptographic signature vulnerability. A malicious user may potentially downgrade Zoom Client components to previous versions...

CVE-2023-28602

Zoom Client for Windows versions before 5.13.5 are affected by an improper verification of cryptographic signatures, enabling potential downgrades of Zoom Client components. Affected component: Zoom Client for Meetings/Zoom Client (Windows). Root cause: inadequate cryptographic signature verifica...

PT-2023-3756

Name of the Vulnerable Software and Affected Versions Zoom versions prior to 5.13.5 Description The issue is related to an improper verification of cryptographic signature, which may allow a malicious user to downgrade Zoom Client components to previous versions. Recommendations For versions prio...

Zoom Client for Meetings < 5.13.5 Vulnerability (ZSB-23010)

The version of Zoom Client for Meetings installed on the remote host is prior to 5.13.5. It is, therefore, affected by a vulnerability as referenced in the ZSB-23010 advisory. - Zoom for Windows clients prior to 5.13.5 contain an improper verification of cryptographic signature vulnerability. A...