PT-2023-24685 · Zoom · Zoom

Name of the Vulnerable Software and Affected Versions: Zoom for Windows versions prior to 5.14.0 Description: The issue is related to insufficient verification of data authenticity, which may allow an authenticated user to potentially enable an escalation of privilege via network access...

The vulnerability of the Magento Commerce software platform for developing and managing online stores stems from insufficient verification of data authenticity. This allows attackers to circumvent existing security restrictions.

The vulnerability of the Magento Commerce software platform for developing and managing online stores is related to insufficient verification of data authenticity. Exploiting this vulnerability could allow a malicious actor to circumvent existing security restrictions remotely...

CVE-2023-34113

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority as this is a duplicate of CVE-2023-36541...

CVE-2023-34113

CVE-2023-34113 is rejected/not used; duplicate of CVE-2023-36541.

CVE-2023-34113

...

The vulnerability of the exportXFAData method in the PDF viewer software for electronic documents, Foxit PDF Reader (formerly Foxit Reader), and the PDF editing software, Foxit PDF Editor (formerly Foxit PhantomPDF), allows a perpetrator to execute arbitrary code.

The vulnerability of the exportXFAData method in the PDF document viewing software Foxit PDF Reader formerly Foxit Reader and the PDF file editing software Foxit PDF Editor formerly Foxit PhantomPDF is related to insufficient data authenticity checking. Exploiting this vulnerability could allow a...

CVE-2023-28863

AMI MegaRAC SPx12 and SPx13 devices have Insufficient Verification of Data Authenticity...

CVE-2023-28863

AMI MegaRAC SPx12 and SPx13 devices have Insufficient Verification of Data Authenticity...

CVE-2023-28863

AMI MegaRAC SPx12 and SPx13 devices have Insufficient Verification of Data Authenticity...

Security Issues in FINS protocol

Overview FINS Factory Interface Network Service is a message communication protocol, which is designed to be used in closed FA Factory Automation networks, and is used in FA networks composed of Omron products. FINS commands enable to read/write information, conduct various operations and set the...

CVE-2023-28863

Summary: CVE-2023-28863 affects AMI MegaRAC SPx12/SPx13 IPMI implementations. The issue is Insufficient Verification of Data Authenticity in IPMI 2.0 negotiation, allowing an attacker with network access to bypass negotiated integrity/confidentiality. Affected platforms include iSeries variants (...

CVE-2023-28863

AMI MegaRAC SPx12 and SPx13 devices have Insufficient Verification of Data Authenticity...

PT-2023-22014 · Ami · Megarac Spx13 +1

Name of the Vulnerable Software and Affected Versions: AMI MegaRAC SPx12 and SPx13 devices affected versions not specified Description: The issue concerns insufficient verification of data authenticity in the affected devices. There is no information provided about the estimated number of...

Schneider Electric IGSS

1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Schneider Electric Equipment: IGSS Interactive Graphical SCADA System Vulnerabilities: Missing Authentication for Critical Function, Insufficient Verification of Data Authenticity, Deserialization of...

The vulnerability lies in the executable file IGSSdataServer.exe of the SCADA system’s data server, IGSS Data Server, as well as the executable file DashBoard.exe of the IGSS Dashboard. Additionally, the RMS16.dll library from the report module Custom Reports can also be exploited, allowing an attacker to cause a service failure.

The vulnerability of the IGSSdataServer.exe executable of the SCADA system’s data server, the DashBoard.exe executable of the IGSS Dashboard, and the RMS16.dll library of the report module Custom Reports is related to insufficient verification of data authenticity. Exploiting this vulnerability c...

The vulnerability lies in the executable file IGSSdataServer.exe of the SCADA system’s data server, IGSS Data Server, as well as the executable file DashBoard.exe of the IGSS Dashboard. Additionally, the RMS16.dll library from the report module Custom Reports allows a hacker to delete these files from the report folder.

The vulnerability of the IGSSdataServer.exe executable file of the SCADA system’s data server, the DashBoard.exe executable file of the IGSS Dashboard, and the RMS16.dll library of the report module Custom Reports is related to insufficient verification of data authenticity. Exploiting this...

The vulnerability lies in the executable file IGSSdataServer.exe of the SCADA system’s data server, IGSS Data Server, as well as the executable file DashBoard.exe of the IGSS Dashboard. Additionally, the RMS16.dll library from the report module Custom Reports allows a perpetrator to execute arbitrary code.

The vulnerability of the IGSSdataServer.exe executable of the SCADA system’s data server, the DashBoard.exe executable of the IGSS Dashboard, and the RMS16.dll library of the report module Custom Reports is related to insufficient verification of data authenticity. Exploiting this vulnerability...

Design/Logic Flaw

A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists in the Data Server that could allow the renaming of files in the IGSS project report directory, this could lead to denial of service when an attacker sends specific crafted messages to the Data Server TCP port. Affecte...

CVE-2023-27977

A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists in the Data Server that could cause access to delete files in the IGSS project report directory, this could lead to loss of data when an attacker sends specific crafted messages to the Data Server TCP port. Affected...

Design/Logic Flaw

A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists in the Data Server that could cause access to delete files in the IGSS project report directory, this could lead to loss of data when an attacker sends specific crafted messages to the Data Server TCP port. Affected...