Palo Alto Networks PAN-OS Data Forgery Issue Vulnerability

Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks for its firewall appliances. A data forgery issue vulnerability exists in SAML authentication in Palo Alto Networks PAN-OS, which arises from the program failing to properly verify signatures. An attacker could explo...

jsrsasign package data forgery issue vulnerability

jsrsasign package is an open source encryption library from the Japanese software developer Kenji Urashima . A security vulnerability exists in jsrsasign package version 8.0.18 and earlier Node.js. No detailed vulnerability details are provided at this time...

Mattermost Server Data Forgery Issue Vulnerability

Mattermost Server is the United States Mattermost company's set of open source messaging platform. A data forgery vulnerability exists in Mattermost Server versions prior to 5.21.0, which can be exploited by an attacker to cause a denial of service...

fwupd Data Forgery Issue Vulnerability

fwupd is a plugin that supports firmware updates for session software on Linux platforms. A data forgery issue vulnerability exists in fwupd. The vulnerability stems from a network system or product that does not adequately validate the origin or authenticity of data. An attacker could exploit th...

Crypt::Perl Data Forgery Issue Vulnerability

Perl is a general-purpose, interpreted, dynamic, cross-platform programming language from the Perl community.Crypt:: Perl is one of the cryptographic modules. A data forgery issue vulnerability exists in Crypt::Perl::ECDSA in versions of Crypt::Perl prior to 0.32 Perl, which stems from a program...

Cisco 4300 Series Integrated Services Routers and Cisco Catalyst 9800-L Wireless Controllers IOS XE Data Forgery Issue Vulnerability

Cisco IOS XE is the United States Cisco Cisco company's set of operating system developed for its network equipment. A data forgery vulnerability exists in Cisco IOS XE IPsec VPN in Cisco 4300 Series Integrated Services Routers and Cisco Catalyst 9800-L Wireless Controllers, which arises from the...

Linux kernel data forgery problem vulnerability

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A data forgery issue vulnerability exists in the implementation of hook in the SELinux LSM of the Linux kernel. An attacker can exploit this vulnerability to bypass SELinux...

Aviatrix Systems Controller Data Forgery Issue Vulnerability

Aviatrix Systems Controller is a centralized control panel for business processes and management of Aviatrix Systems solutions from Aviatrix Systems, USA. A security vulnerability exists in Aviatrix Systems Controller 5.1 and prior versions. The vulnerability can be exploited by an attacker to...

Naver Whale Browser Installer Data Forgery Issue Vulnerability

Naver Whale Browser is a web browser with a user-defined interface from Naver, Korea.Installer is the installer. A data forgery vulnerability exists in Naver Whale Browser Installer versions prior to 1.2.0.5, which originates from a Flash installer that does not support signature checking. An...

Opto 22 SoftPAC Project Data Forgery Issue Vulnerability

Opto 22 SoftPAC Project is an automation software suite from Opto 22 USA. The product is capable of providing industrial automation, process control, building automation, remote monitoring, data acquisition and industrial IoT. A data forgery issue vulnerability exists in Opto 22 SoftPAC Project...

Opto 22 SoftPAC Project Data Forgery Issue Vulnerability (CNVD-2020-29560)

Opto 22 SoftPAC Project is an automation software suite from Opto 22 USA. The product is capable of providing industrial automation, process control, building automation, remote monitoring, data acquisition and industrial IoT. A data forgery issue vulnerability exists in Opto 22 SoftPAC Project...

VMware Spring Security Data Forgery Issue Vulnerability

VMware Spring Security is a set of security frameworks from VMware that provide illustrative security for Spring-based applications. A data forgery issue vulnerability exists in VMware Spring Security versions 5.2.x prior to 5.2.4 and 5.3.x prior to 5.3.2. A remote attacker could exploit this...

Cisco Firepower Threat Defense Data Forgery Issue Vulnerability

Cisco Firepower Threat Defense FTD is a suite of unified software from the U.S. company Cisco Cisco that provides next-generation firewall services. Cisco Firepower Threat Defense is vulnerable to a data forgery issue that stems from incorrect electronic signature verification. An attacker could...

Postfix Data Forgery Issue Vulnerability

Postfix is an open source mail transfer agent. A security vulnerability exists in Postfix version 2.10.1-7. An attacker can exploit the vulnerability to send mail by spoofing the sender...

Multiple Schneider Electric Products Data Forgery Issue Vulnerabilities

Schneider Electric Modicon M218 Logic Controller, etc. are a programmable logic controller from Schneider Electric France. A data forgery vulnerability exists in multiple Schneider Electric products, which can be exploited by attackers to execute malicious code...

Cisco Webex Business Suite Data Forgery Issue Vulnerability

Cisco Webex Business Suite is a set of video conferencing solutions from the U.S. company Cisco Cisco. A data forgery vulnerability exists in Cisco Webex Business Suite versions prior to 39.1.0, which stems from the program failing to properly validate the 'host' field in the message header. An...

Google Chrome Developer Tools Data Forgery Issue Vulnerability

Google Chrome is a web browser from Google, and Developer Tools is one of the developer tools components. A data forgery vulnerability exists in Google Chrome Developer Tools. The vulnerability can be exploited to execute arbitrary code via specially crafted HTML pages...

Samsung Mobile Device Data Forgery Issue Vulnerability

Android is a free and open source operating system from Google based on the Linux kernel without GNU components. Samsung mobile devices are vulnerable to a data forgery issue that can be exploited by attackers to load malicious firmware...

Eclipse Theia Data Forgery Issue Vulnerability

Eclipse Theia is the Eclipse Foundation's set of Visual Studio Code-based open source integrated development environment for desktop and Web applications framework. A data forgery vulnerability exists in Eclipse Theia versions 0.3.9 through 0.15.0. A remote attacker can exploit this vulnerability...

CloudBees Jenkins Mac Plugin Data Falsification Issue Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed execution of the task . Mac Plugin is used in one of...