Zoho Corporation ADManager Plus has a data falsification vulnerability

ZOHO ManageEngine ADManager Plus is an Active Directory AD management and reporting solution from Zoho, Inc. ZOHO ManageEngine ADManager Plus 7110 and earlier versions are vulnerable to an authorization issue that could be exploited by an attacker to take over an account via SSO...

McAfee McAfee Agent: Data Forgery Vulnerability

Mcafee McAfee Agent MA is a Mcafee client component that provides secure communication between ePolicy Orchestrator antivirus management platform and managed products. A Data Forgery Issue vulnerability previously existed in McAfee Agent for Windows version 5.7.4, which could allow a local user t...

Enbra Ewm Data Forgery Issue Vulnerability

Enbra Ewm is a universal reading device from the Czech company Enbra. It uses a radio to read water meters, heating cost indicators and heat meters. Enbra EWM is vulnerable to a data forgery issue in version 1.7.29, which stems from the fact that the software does not check for or detect replay...

Enbra Ewm data falsification vulnerability

Enbra Ewm is a universal reading device from the Czech company Enbra. It uses a radio to read water meters, heating cost indicators and heat meters. Enbra EWM is vulnerable to a data forgery issue in version 1.7.29, which stems from the fact that the software does not check for or detect replay...

Migration Toolkit For Containers: Data Fabrication Vulnerability

Red Hat Migration Toolkit For Containers Mtc is a container migration toolkit from Red Hat, Inc. It is used to provide a web console and Api based on Kubernetes custom resources to help control migration and minimize application downtime. Migration Toolkit For Containers is vulnerable to a data...

Cisco IOS XR Data Forgery Vulnerability

Cisco IOS XR is an operating system developed by Cisco for its network devices. A data forgery vulnerability exists in Cisco IOS XR Software that could allow an authenticated, remote attacker to overwrite and read files on an arbitrary local device...

Cisco NCS 540 data forgery vulnerability

The Cisco NCS 540 is a router from Cisco USA. The Cisco NCS 540 Series Routers contain a data forgery issue vulnerability that could be exploited by an authenticated, local attacker to execute arbitrary code on the underlying operating system...

Palo Alto Cortex XSOAR data falsification vulnerability

Palo Alto Cortex XSOAR is a software application from Palo Alto, Inc. It provides a security orchestration, automation and response platform with threat intelligence management and a built-in marketplace. A security vulnerability exists in Palo Alto Cortex XSOAR, which can be exploited by attacke...

Rob The Bank data falsification vulnerability

Rob The Bank is a music website. Rob The Bank suffers from a data forgery issue vulnerability that stems from the lack of destination address validation in the BurnMe function in Rob The Bank version 1.0, which allows an attacker to steal tokens from victimized users via a carefully crafted scrip...

GNU Inetutils data manipulation vulnerability

GNU Inetutils is a common set of network programs in the GNU community. A security vulnerability exists in versions of GNU Inetutils prior to 2.2, which stems from a client not validating the addresses returned in a PASV/LSPV response to ensure that they match the server address...

Nvidia Caffe Data Forgery Issue Vulnerability

Nvidia Caffe is a deep learning framework from Nvidia Corporation. versions prior to Nvidia Caffe 0.17.4 are vulnerable to a data forgery issue, which can be exploited by attackers to distribute malicious files to pypi.org, causing users to install the files in NVCaffe...

Cisco Nexus 9000 Series Fabric Switch Data Forgery Vulnerability

The Cisco Nexus 9000 Series Fabric Switches is a 9000 Series Fiber Optic Switch from Cisco. The Cisco Nexus 9000 Series Fabric Switches are vulnerable to a data forgery issue that arises from TCP traffic sent to a specific port on an affected device that is not properly sanitized. The vulnerabili...

Nvidia Caffe data falsification vulnerability

Nvidia Caffe is a deep learning framework from Nvidia Corporation. versions prior to Nvidia Caffe 0.17.4 are vulnerable to a data forgery issue, which can be exploited by attackers to distribute malicious files to pypi.org, causing users to install the files in NVCaffe...

Eclipse Californium data falsification vulnerability

Eclipse Californium is a Java-based codebase from the Eclipse Foundation that provides Coap backend support for the Internet of Things. A data forgery vulnerability exists in Eclipse Californium, which arises when the product on the client side does not validate certificates from the server side...

Cisco Expressway Series and Cisco TelePresence Video Communication Server have vulnerabilities related to data spoofing.

Cisco Expressway Series and Cisco TelePresence Video Communication Server VCS are both products of Cisco, Inc.Cisco Expressway Series is software for accessing devices outside the firewall. The software provides simple, highly secure access for users outside the firewall, helping telecommuters wo...

WolfSSL data forgery vulnerability

Wolfssl CyaSSL is a small, portable embedded SSL programming library for use by embedded systems developers from Wolfssl, Inc. in the United States. A security vulnerability exists in wolfSSL that stems from incorrectly skipping OCSP validation under certain circumstances containing extraneous...

Dell Command Update data falsification vulnerability

Dell Command Update is a tool from Dell USA used to automatically update drivers, BIOS and firmware in Dell products. A data forgery vulnerability exists in Dell Command Update, Dell Update, and Alienware Update 4.3 and earlier versions. An attacker could exploit this vulnerability to modify loca...

Huawei HarmonyOS data falsification vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a microkernel-based, fully distributed operating system. Huawei HarmonyOS has a security vulnerability that could be exploited by an attacker to cause a persistent DOS...

Apple iOS and Apple iPadOS data manipulation vulnerabilities

Apple iOS and Apple iPadOS are products of Apple Inc.Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for iPad tablets.Apple iOS 14.7 and iPadOS 14.7 are vulnerable to a data forgery issue. A data forgery vulnerability exists in Apple iOS 14.7 and...

Dell powerflex presentation server data forgery issue vulnerability

DELL Dell EMC PowerFlex is an application from Dell of America DELL, Inc. Dell powerflex presentation server data forgery issue vulnerability, which originates from the product's websocket in the Presentation Server/WebUI does not do user identity An attacker could hijack the Websocket to trick...