Lucene search
+L

971 matches found

Vulnrichment
Vulnrichment
•added 2022/11/03 3:51 p.m.•12 views

CVE-2022-37928

Insufficient Verification of Data Authenticity vulnerability in Hewlett Packard Enterprise HPE Nimble Storage Hybrid Flash Arrays and Nimble Storage Secondary Flash Arrays...

8CVSS7.9AI score0.00297EPSS
SaveExploits0References1
CVE
CVE
•added 2022/11/03 3:51 p.m.•77 views

CVE-2022-37928

CVE-2022-37928 describes Insufficient Verification of Data Authenticity in Hewlett Packard Enterprise HPE Nimble Storage Hybrid Flash Arrays and Nimble Storage Secondary Flash Arrays. Root cause: inadequate validation of data authenticity. Impact per sources indicates high risk to integrity, conf...

8CVSS6.5AI score0.00297EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2022/11/03 3:51 p.m.•33 views

CVE-2022-37928

Insufficient Verification of Data Authenticity vulnerability in Hewlett Packard Enterprise HPE Nimble Storage Hybrid Flash Arrays and Nimble Storage Secondary Flash Arrays...

8CVSS8.1AI score0.00297EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/11/03 12:00 a.m.•27 views

PT-2022-24159 · Hewlett Packard · Hpe Nimble Storage Secondary Flash Arrays +1

Name of the Vulnerable Software and Affected Versions: HPE Nimble Storage Hybrid Flash Arrays affected versions not specified HPE Nimble Storage Secondary Flash Arrays affected versions not specified Description: The issue is related to Insufficient Verification of Data Authenticity. It affects...

8CVSS6.3AI score0.00297EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/03 12:00 a.m.•2 views

CVE-2022-37928: Insufficient Verification of Data Authenticity

Insufficient Verification of Data Authenticity vulnerability in Hewlett Packard Enterprise HPE Nimble Storage Hybrid Flash Arrays and Nimble Storage Secondary Flash Arrays...

8CVSS6.7AI score0.00297EPSS
SaveExploits0References3
OSV
OSV
•added 2022/11/02 12:15 p.m.•17 views

CVE-2022-26122

An insufficient verification of data authenticity vulnerability CWE-345 in FortiClient, FortiMail and FortiOS AV engines version 6.2.168 and below and version 6.4.274 and below may allow an attacker to bypass the AV engine via manipulating MIME attachment with junk and pad characters in base64...

8.6CVSS5.8AI score0.00478EPSS
SaveExploits0References1
NVD
NVD
•added 2022/11/02 12:15 p.m.•41 views

CVE-2022-26122

An insufficient verification of data authenticity vulnerability CWE-345 in FortiClient, FortiMail and FortiOS AV engines version 6.2.168 and below and version 6.4.274 and below may allow an attacker to bypass the AV engine via manipulating MIME attachment with junk and pad characters in base64...

8.6CVSS0.00478EPSS
SaveExploits0References1
Prion
Prion
•added 2022/11/02 12:15 p.m.•29 views

Authorization

An insufficient verification of data authenticity vulnerability CWE-345 in FortiClient, FortiMail and FortiOS AV engines version 6.2.168 and below and version 6.4.274 and below may allow an attacker to bypass the AV engine via manipulating MIME attachment with junk and pad characters in base64...

5CVSS8.5AI score0.00478EPSS
SaveExploits0References1Affected Software3
attackerkb
attackerkb
•added 2022/11/02 12:15 p.m.•13 views

CVE-2022-26122

An insufficient verification of data authenticity vulnerability CWE-345 in FortiClient, FortiMail and FortiOS AV engines version 6.2.168 and below and version 6.4.274 and below may allow an attacker to bypass the AV engine via manipulating MIME attachment with junk and pad characters in base64...

8.6CVSS5.9AI score0.00478EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2022/11/02 12:00 a.m.•20 views

CVE-2022-26122

An insufficient verification of data authenticity vulnerability CWE-345 in FortiClient, FortiMail and FortiOS AV engines version 6.2.168 and below and version 6.4.274 and below may allow an attacker to bypass the AV engine via manipulating MIME attachment with junk and pad characters in base64...

4.7CVSS6.9AI score0.00478EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2022/11/02 12:00 a.m.•47 views

CVE-2022-26122

An insufficient verification of data authenticity vulnerability CWE-345 in FortiClient, FortiMail and FortiOS AV engines version 6.2.168 and below and version 6.4.274 and below may allow an attacker to bypass the AV engine via manipulating MIME attachment with junk and pad characters in base64...

4.7CVSS8.7AI score0.00478EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2022/11/02 12:00 a.m.•14 views

Fortinet FortiMail和FortiClient 数据伪造问题漏洞

Fortinet FortiMail and FortiClient are both products of the U.S. Fitta Fortinet. fortiMail is a set of e-mail security gateway products. The product provides e-mail security and data protection features. FortiClient is a structure agent. Used to provide protection, compliance, and secure access i...

8.6CVSS7.8AI score0.00478EPSS
SaveExploits0References3
CVE
CVE
•added 2022/11/02 12:00 a.m.•110 views

CVE-2022-26122

CVE-2022-26122 affects Fortinet products FortiClient, FortiMail and FortiOS AV engines. The vulnerability, CWE-345, arises from insufficient verification of data authenticity and can allow bypass of the AV engine by manipulating MIME attachments encoded in base64. Affected versions are FortiClien...

8.6CVSS8.5AI score0.00478EPSS
SaveExploits0References1Affected Software3
BDU FSTEC
BDU FSTEC
•added 2022/10/12 12:00 a.m.•12 views

The vulnerability of microprogrammed software in STARDOM FCN/FCJ programmable logic controllers lies in insufficient data authenticity checking, allowing a intruder to execute arbitrary code.

The vulnerability of microprogrammed software in STARDOM FCN/FCJ programmable logic controllers is related to insufficient verification of data authenticity. Exploiting this vulnerability could allow an attacker operating remotely to execute arbitrary code...

10CVSS5.8AI score
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2022/10/04 12:00 a.m.•13 views

The vulnerability of the SAP Business Objects Business Intelligence Platform, related to insufficient verification of data authenticity, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the SAP Business Objects Business Intelligence Platform is related to insufficient verification of data authenticity. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to protected information...

5.4CVSS5.9AI score0.00243EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/09/09 12:00 a.m.•18 views

The vulnerability of the “Private Browsing” function in the Mozilla Firefox browser, which allows a hacker to trigger a service failure.

The vulnerability of the “Private Browsing” function in the Mozilla Firefox browser is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow an attacker to induce a service failure...

4.3CVSS6.4AI score0.00334EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/08/29 12:00 a.m.•19 views

The vulnerability of microprogrammed software in STARDOM FCN/FCJ programmable logic controllers is related to insufficient verification of data authenticity, allowing an intruder to gain full control over the device.

The vulnerability of microprogrammed software in STARDOM FCN/FCJ programmable logic controllers is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow an attacker operating remotely to gain full control over the device...

10CVSS5.5AI score
SaveExploits0References1
NVD
NVD
•added 2022/08/19 11:15 p.m.•38 views

CVE-2022-2789

Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulnerable to CWE-345 Insufficient Verification of Data Authenticity, and can display logic that is different than the compiled logic...

5.5CVSS0.00122EPSS
SaveExploits0References1
OSV
OSV
•added 2022/08/19 11:15 p.m.•15 views

CVE-2022-2789

Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulnerable to CWE-345 Insufficient Verification of Data Authenticity, and can display logic that is different than the compiled logic...

5.5CVSS5.8AI score0.00122EPSS
SaveExploits0References1
Prion
Prion
•added 2022/08/19 11:15 p.m.•28 views

Design/Logic Flaw

Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulnerable to CWE-345 Insufficient Verification of Data Authenticity, and can display logic that is different than the compiled logic...

1.9CVSS6AI score0.00122EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder