Ivanti Endpoint Manager data manipulation vulnerability

Ivanti Endpoint Manager EPM is a suite of endpoint security managers from Ivanti USA. A data forgery issue vulnerability exists in versions prior to Ivanti Endpoint Manager 2024 SU4 SR1 that stems from improper cryptographic signature validation and could lead to remote code execution...

Node-JWS data forgery vulnerability

node-jws is a JSON Web signature library open-sourced by Auth0. A data forgery issue vulnerability exists in node-jws versions 3.2.2 and earlier and 4.0.0, which stems from improper HS256 algorithm signature validation and could lead to signature validation bypass...

OrangeHRM data falsification vulnerability

OrangeHRM is a human resource management system HRM from OrangeHRM, Inc. in the United States. The system supports personnel information management, leave management, attendance management and recruitment management. OrangeHRM versions 5.0 through 5.7 are vulnerable to a data forgery issue that...

cggmp21 data falsification vulnerability

cggmp21 is a Rust library open-sourced by Lockness. A data forgery issue vulnerability exists in versions prior to cggmp21 0.6.3, which stems from a missing check in the ZK proof that could lead to a malicious signer reconstructing the full private key...

WordPress plugin “Subscriptions & Memberships for PayPal” has a vulnerability related to data manipulation.

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A data forgery...

NVIDIA GPU Display Driver Uncontrolled Search Path

The vulnerability of the NVIDIA GPU Display Driver is related to an uncontrolled element in the search process. Exploiting this vulnerability allows a hacker to cause system failures, gain unauthorized privileges, execute arbitrary code, and forge protected information...

NVIDIA GPU Display Driver Memory Reclamation Privilege Escalation

The vulnerability of the NVIDIA GPU Display Driver is related to a memory reclamation error. Exploiting this vulnerability allows an attacker to cause system failures, gain elevated privileges, execute arbitrary code, forge and disclose sensitive information...

NVIDIA GPU Display Driver Use-After-Free Privilege Escalation Disclosure

The vulnerability of the NVIDIA GPU Display Driver is related to the use of memory after it is freed. Exploiting this vulnerability allows a hacker to cause system failures, increase their privileges, execute arbitrary code, forge data, and disclose sensitive information...

Evervault Go SDK data manipulation vulnerability

Evervault Go SDK is an open source development toolkit from Evervault. A Data Forgery Issue vulnerability exists in Evervault Go SDK versions prior to 1.3.2, which stems from incomplete validation logic that could lead to trusting an enclave operator that does not meet integrity guarantees...

JetBrains ReSharper data falsification issue vulnerability

JetBrains ReSharper is a Visual Studio extension for .NET development from the Czech company JetBrains. The program is mainly used for code quality analysis, code error alerts and other functions. A data forgery issue vulnerability exists in JetBrains ReSharper versions prior to 2025.2.4, which...

Always Encrypted Kubernetes Data Forgery Vulnerability

Always Encrypted Kubernetes is a container encryption software open source by Edgeless Systems. A data forgery issue vulnerability exists in versions prior to Always Encrypted Kubernetes 2.24.0 that stems from insecure handling of the empty key slot algorithm, which could lead to unencrypted...

D-Link DAP-2695 has vulnerabilities related to data forgery.

The D-Link DAP-2695 is a high-performance dual-band wireless access point from China AUO D-Link. A data forgery issue vulnerability exists in the D-Link DAP-2695 version 2.00RC13, which stems from the function sub40C6B8 in the Firmware Update Handler component not properly verifying the...

Fortinet FortiClient MacOS installer data forgery issue vulnerability

Fortinet FortiClient MacOS installer is a client installer from Fortinet. The Fortinet FortiClient MacOS installer suffers from a data forgery issue vulnerability that stems from improper cryptographic signature validation, which can be exploited by an attacker to cause elevation of privilege for...

Microsoft Playwright data manipulation vulnerability

Microsoft Playwright is an automation framework from Microsoft Corporation USA. Microsoft Playwright suffers from a Data Forgery Issue vulnerability, which can be exploited by an attacker to perform spoofing attacks...

Fortinet FortiClient MacOS installer has a vulnerability related to data manipulation.

Fortinet FortiClient MacOS installer is a client installer from Fortinet. The Fortinet FortiClient MacOS installer suffers from a data forgery issue vulnerability that stems from improper cryptographic signature validation, which can be exploited by an attacker to cause elevation of privilege for...

EUVD-2019-16035

Malware in sbrugna...

WordPress plugin OAuth Single Sign On – SSO (OAuth Client) has a vulnerability related to data manipulation.

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A data forgery issue...

Rancher data falsification vulnerability

Rancher is an open source container management platform from the US-based Rancher Open Source, built for organizations deploying containers in production environments. Rancher suffers from a Data Forgery Issue vulnerability that stems from a flaw in the SAML authentication protocol that could lea...

Rapid7 AppSpider Pro has a vulnerability related to data falsification.

Rapid7 AppSpider Pro is a dynamic application security testing solution from Rapid7, Inc. that allows you to scan Web and mobile applications for vulnerabilities. A data forgery issue vulnerability exists in Rapid7 AppSpider Pro versions prior to 7.5.021, which stems from insufficient project nam...

matrix-js-sdk data manipulation vulnerability

matrix-js-sdk is an application component of Matrix open source. A data forgery issue vulnerability exists in matrix-js-sdk versions prior to 38.2.0, which stems from insufficient validation of room predecessor links in MatrixClient::getJoinedRooms, which could lead to an attacker replacing a...