Prisma Cloud Compute Data Forgery Issue Vulnerability

A data forgery issue vulnerability exists in Prisma Cloud Compute that arises from a network system or product that does not adequately validate the origin or authenticity of data. An attacker could exploit the falsified data to conduct an attack...

Multiple Cisco Products Data Forgery Issue Vulnerabilities

The Cisco 8000 Series Router and the Cisco Network Convergence System 540 Series Routers are both router devices from Cisco USA. A data forgery vulnerability exists in Cisco IOS XR on multiple Cisco routers. The vulnerability is due to an unsigned script in the ISO that is verified without...

Multiple Cisco Products Data Forgery Issue Vulnerabilities

The Cisco 8000 Series Router and the Cisco Network Convergence System 540 Series Routers are both router devices from Cisco USA. A data forgery issue vulnerability exists in Cisco IOS XR on multiple Cisco routers. The vulnerability is caused due to an unlocked version of the GRUB bootloader on th...

GNOME Evolution Data Forgery Issue Vulnerability

GNOME Evolution is a suite of email client programs for the Gnome desktop environment for Linux. The program provides Email, calendar, meeting scheduling, contact management, and other features. A data forgery issue vulnerability exists in GNOME Evolution through 3.38.3, which stems from Evolutio...

Github Monal Data Falsification Issue Vulnerability

Github Monal is a cross-platform modern XMPP client for iOS and macOS. Monal before 4.9 suffers from a data forgery issue vulnerability that stems from not properly validating the sender of results. An attacker can use this vulnerability to inject arbitrary messages into local history and take fu...

Rostelecom CS-C2SHW Data Forgery Issue Vulnerability

Rostelecom CS-C2SHW 5.0.082.1 A data forgery issue vulnerability exists, which stems from a firmware update that will automatically run if a special file is inserted on the SD card...

Idpy Pysaml2 Data Forgery Issue Vulnerability

Idpy Pysaml2 is a Python-based SAML server implementation from the Idpy community. Idpy PySAML2 before 6.5.0 suffers from a Data Forgery Issue vulnerability that stems from the presence of a Cryptographic Signature Validation Error vulnerability. An attacker can exploit this vulnerability to...

Idpy Pysaml2 Data Forgery Issue Vulnerability

Idpy Pysaml2 is a Python-based SAML server implementation from the Idpy community. Idpy PySAML2 before 6.5.0 suffers from a data forgery issue vulnerability that stems from a cryptographic signature validation error...

Huawei smartphone data forgery issue vulnerability

Huawei Emui is an Android-based mobile operating system from China's Huawei Corporation.Honor Magic Ui is an Android-based mobile operating system from China's Honor Corporation. Huawei smartphones are vulnerable to a data forgery issue, successful exploitation of this vulnerability may result in...

Dexidp Dex Data Forgery Issue Vulnerability

Dexidp Dex is a Go-based language used for secure authentication via OpenId by the Dexidp team. Versions of Dex prior to 2.27.0 have security vulnerabilities that stem from faulty XML encoding in the underlying Go libraries, which affects the user's ability to utilize the SAML connector. These...

Hyperledger Indy Node Data Forgery Issue Vulnerability

Indy Node is a distributed Ledger implementation based on indy-plenum Byzantine Fault Tolerance Protocol from the Linux Foundation, USA. Versions of Hyperledger Indy prior to 1.12.4 suffer from a data forgery issue vulnerability that stems from the absence of transaction-specific signature...

Xen Data Forgery Issue Vulnerability

Xen is an open source virtual machine monitor product from the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports runtime migration to ensure uptime and avoid downtime. A security vulnerability exists in the Xen...

HUAWEI ws5800-10 Data Forgery Issue Vulnerability

The Huawei ws5800-10 is a wireless router from Huawei China. A security vulnerability exists in some Huawei home routers. The vulnerability stems from improper validation of specific messages, which can be exploited by an attacker to cause specific functionality anomalies...

Facebook HHVM Data Forgery Issue Vulnerability

Facebook HHVM aka HipHop Virtual Machine is a virtual machine from Facebook that significantly improves the performance of loading dynamic pages in PHP. A data forgery issue vulnerability exists in Facebook HHVM versions prior to 3.9.5, 3.10.0 through 3.12.3, and 3.13.0 through 3.14.1, which stem...

JetBrains Toolbox Data Forgery Issue Vulnerability

JetBrains Toolbox is a JetBrains product management application from the Czech company JetBrains. A security vulnerability exists in version 1.17 of JetBrains ToolBox prior to 1.17.6856. No details of the vulnerability are provided at this time...

Apache HTTP Server Data Forgery Issue Vulnerability

Apache HTTP Server is the United States Apache Software Apache Software Foundation of an open source web server . The server is fast, reliable and can be expanded through a simple API. A data forgery vulnerability exists in Apache HTTP Server. The vulnerability arises from a network system or...

Pritunl-client Data Forgery Issue Vulnerability

Pritunl-client is an open source OpenVPN client application from the American company Pritunl. A security vulnerability exists in pritunl-client versions prior to 1.0.1116.6, which stems from a lack of signature verification in the program. An attacker can exploit this vulnerability to obtain...

grub2 data forgery issue vulnerability

grub2 is a Linux system bootloader from the GNU Project. A data forgery issue vulnerability exists in GRUB2 2.04 and earlier versions. The vulnerability stems from the program not verifying kernel signatures when booting directly without shim. An attacker could exploit this vulnerability to bypas...

Grin Data Forgery Issue Vulnerability

Grin is an implementation of the MimbleWimble protocol. A security vulnerability exists in Grin that stems from the program failing to adequately validate data about Mimblewimble. An attacker could exploit the vulnerability to cause the application to crash...

Tendermint Data Forgery Issue Vulnerability

Tendermint is a Byzantine Fault Tolerant BFT style middleware from Tendermint Inc. in the United States. A data forgery vulnerability exists in Tendermint v0.33.0 and later versions fixed in v0.33.6. The vulnerability arises from a network system or product that does not adequately validate the...