Lucene search
+L

771 matches found

OSV
OSV
added 2025/04/08 6:16 p.m.6 views

CVE-2025-27735

Insufficient verification of data authenticity in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to bypass a security feature locally...

6CVSS7.3AI score0.00385EPSS
SaveExploits0References1
CVE
CVE
added 2025/04/08 5:24 p.m.114 views

CVE-2025-27735

CVE-2025-27735 affects Windows Virtualization-Based Security (VBS) Enclave. The root cause is insufficient verification of data authenticity, enabling an authorized local attacker to bypass a security feature. The connected NCSC listing labels the impact as bypassing a security measure with CVSS ...

6CVSS7.1AI score0.00385EPSS
SaveExploits0References1Affected Software13
Microsoft CVE
Microsoft CVE
added 2025/04/08 7:0 a.m.17 views

Windows Virtualization-Based Security (VBS) Security Feature Bypass Vulnerability

Insufficient verification of data authenticity in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to bypass a security feature locally...

6CVSS6.9AI score0.00385EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2025/04/08 12:0 a.m.5 views

PT-2025-15558 · Microsoft · Windows Virtualization-Based Security (Vbs) Enclave +1

Name of the Vulnerable Software and Affected Versions: Windows Virtualization-Based Security VBS Enclave affected versions not specified Description: The issue is related to insufficient verification of data authenticity, allowing an authorized attacker to bypass a security feature locally. There...

6.2CVSS8.3AI score0.00385EPSS
SaveExploits0References7
HackRead
HackRead
added 2025/04/03 6:57 p.m.41 views

Hacker Claims Twilio’s SendGrid Data Breach, Selling 848,000 Records (UPDATED)

This article has been updated with a statement from a Twilio spokesperson in response to Hackread.com's request. A statement from the hacker has also been added claiming that the data is authentic...

7.2AI score
SaveExploits0
CNVD
CNVD
added 2025/03/28 12:0 a.m.6 views

Zoom Workplace Denial of Service Vulnerability

Zoom Workplace is an AI-first collaboration platform from Zoom that integrates core features such as team communication, meetings, document collaboration, and a built-in AI Companion smart assistant to boost productivity. Zoom Workplace suffers from a denial-of-service vulnerability that stems fr...

7.5CVSS6.7AI score0.00231EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/03/14 12:14 p.m.11 views

CVE-2025-0149

Insufficient verification of data authenticity in some Zoom Workplace Apps may allow an unprivileged user to conduct a denial of service via network access...

6.5CVSS6.7AI score0.00231EPSS
SaveExploits0References3
Veracode
Veracode
added 2025/03/13 3:28 a.m.11 views

Insufficient Verification Of Data Authenticity

PickleScan is vulnerable to Insufficient Verification of Data Authenticity. The vulnerability is due to a discrepancy in filename handling due to differences between ZIP header filenames and directory listing filenames, which allows an attacker to bypass detection by causing PickleScan to crash...

6.5CVSS6.6AI score0.00305EPSS
SaveExploits1References7Affected Software1
RedhatCVE
RedhatCVE
added 2025/03/12 8:15 p.m.11 views

CVE-2025-27257

Insufficient Verification of Data Authenticity vulnerability in GE Vernova UR IED family devices allows an authenticated user to install a modified firmware. The firmware signature verification is enforced only on the client-side dedicated software Enervista UR Setup, allowing the integration che...

6.1CVSS6.7AI score0.0017EPSS
SaveExploits0References1
OSV
OSV
added 2025/03/11 5:16 p.m.6 views

CVE-2025-0149

Insufficient verification of data authenticity in some Zoom Workplace Apps may allow an unprivileged user to conduct a denial of service via network access...

7.5CVSS5.8AI score0.00231EPSS
SaveExploits0References1
NVD
NVD
added 2025/03/11 5:16 p.m.12 views

CVE-2025-0149

Insufficient verification of data authenticity in some Zoom Workplace Apps may allow an unprivileged user to conduct a denial of service via network access...

7.5CVSS0.00231EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/03/11 5:4 p.m.27 views

CVE-2025-0149 Zoom Apps - Insufficient Verification of Data Authenticity

Insufficient verification of data authenticity in some Zoom Workplace Apps may allow an unprivileged user to conduct a denial of service via network access...

6.5CVSS0.00231EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/03/11 5:4 p.m.21 views

CVE-2025-0149 Zoom Apps - Insufficient Verification of Data Authenticity

Insufficient verification of data authenticity in some Zoom Workplace Apps may allow an unprivileged user to conduct a denial of service via network access...

6.5CVSS6.4AI score0.00231EPSS
SaveExploits0References1
CVE
CVE
added 2025/03/11 5:4 p.m.62 views

CVE-2025-0149

CVE-2025-0149 affects Zoom Workplace Apps. The issue is insufficient verification of data authenticity, potentially allowing an unauthenticated, network-connected user to cause a denial-of-service. CVSS describes high availability impact (A: HIGH) with network access and no user interaction requi...

7.5CVSS6.4AI score0.00231EPSS
SaveExploits0References1Affected Software6
CNNVD
CNNVD
added 2025/03/11 12:0 a.m.7 views

Zoom Workplace 数据伪造问题漏洞

Zoom Workplace is an AI-first collaboration platform from Zoom that integrates core features such as team communication, meetings, document collaboration, and a built-in AI Companion smart assistant to boost productivity. Zoom Workplace suffers from a denial-of-service vulnerability that stems fr...

7.5CVSS6.6AI score0.00231EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/03/11 12:0 a.m.9 views

PT-2025-10794 · Zoom · Zoom Workplace Apps

Name of the Vulnerable Software and Affected Versions: Zoom Workplace Apps affected versions not specified Description: Insufficient verification of data authenticity in some Zoom Workplace Apps may allow an unprivileged user to conduct a denial of service via network access. Recommendations: At...

7.5CVSS7AI score0.00231EPSS
SaveExploits0References7
Snyk
Snyk
added 2025/03/10 12:30 p.m.5 views

Insufficient Verification of Data Authenticity

Overview picklescan is a Security scanner detecting Python Pickle files performing suspicious actions Affected versions of this package are vulnerable to Insufficient Verification of Data Authenticity due to improper handling of modified ZIP file flag bits. Attackers can exploit this by altering...

9.8CVSS6.9AI score0.00507EPSS
SaveExploits1References2
NVD
NVD
added 2025/03/10 9:15 a.m.8 views

CVE-2025-27257

Insufficient Verification of Data Authenticity vulnerability in GE Vernova UR IED family devices allows an authenticated user to install a modified firmware. The firmware signature verification is enforced only on the client-side dedicated software Enervista UR Setup, allowing the integration che...

6.1CVSS0.0017EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/03/10 9:5 a.m.4 views

CVE-2025-27257

Insufficient Verification of Data Authenticity vulnerability in GE Vernova UR IED family devices allows an authenticated user to install a modified firmware. The firmware signature verification is enforced only on the client-side dedicated software Enervista UR Setup, allowing the integration che...

6.1CVSS7AI score0.0017EPSS
SaveExploits0References2
CVE
CVE
added 2025/03/10 9:5 a.m.73 views

CVE-2025-27257

CVE-2025-27257 affects the GE Vernova UR IED family devices. The root cause is insufficient data authenticity verification, with firmware signature checks enforced only by the client-side Enervista UR Setup, enabling an authenticated user to bypass integration checks and install modified firmware...

6.1CVSS7AI score0.0017EPSS
SaveExploits0References2
Rows per page
Query Builder