Lucene search
+L

771 matches found

BDU FSTEC
BDU FSTEC
added 2023/09/13 12:0 a.m.10 views

The vulnerability of the IOCTL component of the AMD uProf software profiling tool allows a hacker to load an unsigned driver and execute arbitrary code.

The vulnerability of the IOCTL component of the AMD uProf software profiling tool is related to insufficient verification of data authenticity. Exploiting this vulnerability could allow an attacker to load unsigned drivers and execute arbitrary code...

7.8CVSS7.5AI score0.0115EPSS
SaveExploits2References3Affected Software1
CVE
CVE
added 2023/09/06 11:48 a.m.36 views

CVE-2023-4589

Delinea Secret Server 10.9.000002 is affected by an insufficient verification of data authenticity vulnerability in its update mechanism. The root cause is that software updates lack digital signatures and do not validate update package integrity, allowing an attacker with administrator privilege...

9.1CVSS7.4AI score0.00267EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2023/09/06 5:15 a.m.24 views

Authentication flaw

ManageEngine ADSelfService Plus GINA Client Insufficient Verification of Data Authenticity Authentication Bypass Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of ManageEngine ADSelfService Plus. Authentication is not...

4.6CVSS7AI score0.26426EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/09/06 4:3 a.m.14 views

CVE-2023-35719 ManageEngine ADSelfService Plus GINA Client Insufficient Verification of Data Authenticity Authentication Bypass Vulnerability

ManageEngine ADSelfService Plus GINA Client Insufficient Verification of Data Authenticity Authentication Bypass Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of ManageEngine ADSelfService Plus. Authentication is not...

6.8CVSS7.6AI score0.26426EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2023/09/06 4:3 a.m.43 views

CVE-2023-35719 ManageEngine ADSelfService Plus GINA Client Insufficient Verification of Data Authenticity Authentication Bypass Vulnerability

ManageEngine ADSelfService Plus GINA Client Insufficient Verification of Data Authenticity Authentication Bypass Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of ManageEngine ADSelfService Plus. Authentication is not...

6.8CVSS7.2AI score0.26426EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2023/09/05 12:0 a.m.20 views

Honeywell Experion PKS, LX and PlantCruise Insufficient Verification of Data Authenticity (CVE-2023-25178)

Controller may be loaded with malicious firmware which could enable remote code execution This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid501611;...

9.8CVSS8.5AI score0.0052EPSS
SaveExploits0References3
GithubExploit
GithubExploit
added 2023/08/28 10:8 p.m.20 views

Exploit for Insufficient Verification of Data Authenticity in Rarlab Winrar

CVE-2023-38831-winrar-expoit-simple-Poc Very important I h...

7.8CVSS7.2AI score0.97811EPSS
SaveExploits49
GithubExploit
GithubExploit
added 2023/08/28 2:48 p.m.103 views

Exploit for Insufficient Verification of Data Authenticity in Rarlab Winrar

CVE-2023-38831 Vulnerable: WinRAR = 6.22 https://www.wi...

7.8CVSS7.3AI score0.97811EPSS
SaveExploits49
ICS
ICS
added 2023/08/24 6:0 a.m.42 views

CODESYS Development System

1. EXECUTIVE SUMMARY CVSS v3 9.6 ATTENTION: Exploitable remotely/low attack complexity Vendor: CODESYS, GmbH Equipment: CODESYS Development System Vulnerability: Insufficient Verification of Data Authenticity. 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an...

8.8CVSS9.2AI score0.01034EPSS
SaveExploits0References10
OSV
OSV
added 2023/08/08 6:15 p.m.4 views

CVE-2023-36541

Insufficient verification of data authenticity in Zoom Desktop Client for Windows before 5.14.5 may allow an authenticated user to enable an escalation of privilege via network access...

8.8CVSS5.8AI score0.00455EPSS
SaveExploits0References1
NVD
NVD
added 2023/08/08 6:15 p.m.28 views

CVE-2023-36541

Insufficient verification of data authenticity in Zoom Desktop Client for Windows before 5.14.5 may allow an authenticated user to enable an escalation of privilege via network access...

8.8CVSS8.5AI score0.00455EPSS
SaveExploits0References1
Prion
Prion
added 2023/08/08 6:15 p.m.29 views

Authorization

Insufficient verification of data authenticity in Zoom Desktop Client for Windows before 5.14.5 may allow an authenticated user to enable an escalation of privilege via network access...

6.5CVSS8.7AI score0.00455EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/08/08 5:27 p.m.53 views

CVE-2023-36541

CVE-2023-36541 affects Zoom Desktop Client for Windows prior to 5.14.5. The issue is described as insufficient verification of data authenticity, enabling an authenticated user to escalate privileges via network access. Affected component: Zoom Desktop Client for Windows (Windows builds before 5....

8.8CVSS8.8AI score0.00455EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/08/08 5:27 p.m.14 views

CVE-2023-36541

Insufficient verification of data authenticity in Zoom Desktop Client for Windows before 5.14.5 may allow an authenticated user to enable an escalation of privilege via network access...

8CVSS7.1AI score0.00455EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2023/08/08 12:0 a.m.14 views

The vulnerability of the CODESYS Development System, a programming platform for applications, stems from insufficient verification of data authenticity. This allows attackers to modify the content of notifications received via HTTP from the CODESYS notification server.

The vulnerability of the CODESYS Development System, a programming platform for applications, is related to insufficient verification of data authenticity. Exploiting this vulnerability could allow an attacker to modify the content of notifications received through HTTP from the CODESYS...

10CVSS7.2AI score0.01034EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/08/07 12:0 a.m.7 views

The vulnerability of the DevTools set of tools for web development in Google Chrome allows a hacker to circumvent existing navigation restrictions.

The vulnerability of the DevTools set of tools for web development in Google Chrome is related to insufficient verification of data authenticity. Exploiting this vulnerability could allow an attacker to circumvent existing navigation restrictions remotely...

7.8CVSS6.5AI score0.00372EPSS
SaveExploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/07/26 12:0 a.m.8 views

The vulnerability of the Advantech WebAccess remote monitoring software lies in its insufficient verification of data authenticity, allowing a intruder to execute arbitrary code.

The vulnerability of Advantech WebAccess remote monitoring software is related to insufficient verification of data authenticity. Exploiting this vulnerability allows a malicious actor operating remotely to execute arbitrary code...

7.8CVSS7.6AI score0.00142EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/07/20 12:0 a.m.9 views

The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit, related to insufficient validation of data authenticity, allows attackers to compromise data integrity.

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit is related to insufficient validation of data authenticity. Exploiting this vulnerability allows attackers to compromise data integrity...

5.5CVSS6.6AI score0.00202EPSS
SaveExploits0References12Affected Software5
ICS
ICS
added 2023/07/13 6:0 a.m.90 views

BD Alaris System with Guardrails Suite MX

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 8.2 ATTENTION : Low attack complexity Vendor : Becton, Dickinson and Company BD Equipment : Alaris PCU, Guardrails Editor, Systems Manager, Calculation Services, CQI Reporter Vulnerabilities : Insufficient Verification of Data Authenticity, Missing...

9.8CVSS8.5AI score0.17366EPSS
SaveExploits0References10
BDU FSTEC
BDU FSTEC
added 2023/07/04 12:0 a.m.10 views

The vulnerability of the WebApp Installs component of Google Chrome allows attackers to circumvent security restrictions.

The vulnerability of the WebApp Installs component of Google Chrome is related to insufficient verification of data authenticity. Exploiting this vulnerability allows a malicious actor to bypass security restrictions through a specially created HTML page...

10CVSS7.6AI score0.00681EPSS
SaveExploits0References10Affected Software5
Rows per page
Query Builder