SCALANCE SSH Network Protocol Insufficient Data Authentication

The vulnerability of the SSH network protocol implementation in microprogrammable industrial network interfaces such as SCALANCE SC622-2C, SC626-2C, SC632-2C, SC636-2C, SC642-2C, and SC646-2C is related to insufficient resource control during their lifespan. Exploiting this vulnerability could...

Citrix ADC Gateway RDP Proxy Access

The vulnerability of Citrix ADC application delivery controllers formerly known as Citrix NetScaler Application Delivery Controller and Citrix Gateway access control systems formerly known as Citrix NetScaler Gateway is related to insufficient data authentication checks. Exploiting this...

Authorization

Insufficient verification of data authenticity vulnerability in Samsung Gear IconX PC Manager prior to version 2.1.221019.51 allows local attackers to create arbitrary file using symbolic link...

PT-2022-6382 · Nvidia · Nvidia Geforce +5

Name of the Vulnerable Software and Affected Versions: NVIDIA GPU Display Driver for Windows affected versions not specified NVIDIA GeForce, Studio, RTX/Quadro, NVS, and Tesla affected versions not specified Description: The issue is related to insufficient data authentication, which may allow an...

PT-2022-18671 · Emerson Electric · Proficy Machine Edition

Name of the Vulnerable Software and Affected Versions: Emerson Electric's Proficy Machine Edition versions 9.00 and prior Description: The issue concerns insufficient verification of data authenticity, which can cause the software to display logic that differs from the compiled logic...

Thunderbird Unauthenticated Access

The vulnerability of the Thunderbird email client stems from insufficient verification of data authenticity when the space character is used in the Braille table. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information by sendi...

Cisco Adaptive Security Device Manager Check Code Execution

The vulnerability of the Cisco Adaptive Security Device Manager ASDM verification function in the Cisco Adaptive Security Appliance Software ASA lies in insufficient data authentication. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by loading a specially crafte...

PT-2022-3172

Name of the Vulnerable Software and Affected Versions Ovation OCR400 affected versions not specified Ovation OCR1100 affected versions not specified Description The issue is related to insufficient data authentication in the embedded software images of the Ovation systems. This can allow a remote...

PT-2022-4997

Name of the Vulnerable Software and Affected Versions STARDOM FCN/FCJ affected versions not specified Description The issue is related to insufficient data authentication in the programmable logic controller's software, which could allow a remote attacker to execute arbitrary code. Recommendation...

PT-2022-38104

Уязвимость функции create log context модуля drivers/md/dm-log.c драйвера поддержки нескольких устройств RAID и LVM ядра операционной системы Linux связана с недостаточной проверкой подлинности данных. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

PT-2022-4932

Name of the Vulnerable Software and Affected Versions SAP Business Objects version 420 Description The issue is related to insufficient input validation, allowing an authenticated attacker to submit a malicious request through an allowed operation. This can result in an attacker being able to vie...

Cisco ASA Datagram TLS DoS

The vulnerability of the Datagram TLS implementation in Cisco Adaptive Security Appliances ASA and Cisco Firepower Threat Defense FTD lies in insufficient data authentication. Exploiting this vulnerability allows a malicious actor to induce service failure through specially created DTLS traffic...

Dell Client Commercial Data Forgery Vulnerability

Dell Client Commercial is a line of workstation equipment from Dell, Inc. The Dell Client Commercial has a security vulnerability that stems from the device's susceptibility to an insufficient data authentication vulnerability. An authenticated attacker could use this vulnerability to install...

Open vSwitch Network Service Confidential Data Access DoS

The vulnerability of the Open vSwitch network service provided by Neutron relates to insufficient verification of data authenticity. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, as well as cause service failures through specially crafted packets...

OpenSSL: Timing-based attacks on SSL/TLS with CBC encryption (CVE-2003-0078) - Linux

OpenSSL is prone to timing-based attacks on SSL/TLS with CBC encryption. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is fre...

OpenSSL: Timing-based attacks on SSL/TLS with CBC encryption (CVE-2003-0078) - Windows

OpenSSL is prone to timing-based attacks on SSL/TLS with CBC encryption. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is fre...

PT-2020-5141 · Cncf · Envoy

Name of the Vulnerable Software and Affected Versions: CNCF Envoy versions prior to 1.13.0 Description: The issue is related to insufficient authentication of data in the Envoy network software. It allows a remote attacker to bypass security restrictions by using only TLS 1.3, which could lead to...

PT-2020-1985

Name of the Vulnerable Software and Affected Versions Cisco NX-OS Software affected versions not specified Description The issue is related to insufficient data authentication in the anycast gateway feature of Cisco NX-OS Software. This could allow an unauthenticated, adjacent attacker to cause a...

Umbrella Roaming Client Automatic Update Arbitrary Application Installation

The vulnerability of the automatic update function for the Umbrella Roaming Client security service for Windows devices relates to insufficient data authentication checks. Exploiting this vulnerability could allow attackers to install arbitrary applications on target devices...

PT-2019-6058

Name of the Vulnerable Software and Affected Versions Adobe Download Manager version 2.0.0.363 Description The issue is related to insecure file permissions and insufficient data authentication, which could allow a remote attacker to escalate privileges. Recommendations For Adobe Download Manager...