65 matches found
The vulnerability of Citrix ADC application delivery controllers (formerly known as Citrix NetScaler Application Delivery Controller), as well as Citrix Gateway access control systems (formerly known as Citrix NetScaler Gateway), stems from insufficient verification of data authenticity. This allows attackers to gain access to servers configured in RDP proxy mode.
The vulnerability of Citrix ADC application delivery controllers formerly known as Citrix NetScaler Application Delivery Controller and Citrix Gateway access control systems formerly known as Citrix NetScaler Gateway is related to insufficient data authentication checks. Exploiting this...
Authorization
Insufficient verification of data authenticity vulnerability in Samsung Gear IconX PC Manager prior to version 2.1.221019.51 allows local attackers to create arbitrary file using symbolic link...
PT-2022-6382 · Nvidia · Nvidia Geforce +5
Name of the Vulnerable Software and Affected Versions: NVIDIA GPU Display Driver for Windows affected versions not specified NVIDIA GeForce, Studio, RTX/Quadro, NVS, and Tesla affected versions not specified Description: The issue is related to insufficient data authentication, which may allow an...
PT-2022-18671 · Emerson Electric · Proficy Machine Edition
Name of the Vulnerable Software and Affected Versions: Emerson Electric's Proficy Machine Edition versions 9.00 and prior Description: The issue concerns insufficient verification of data authenticity, which can cause the software to display logic that differs from the compiled logic...
The vulnerability of the Thunderbird email client, related to insufficient verification of data authenticity, allows attackers to gain unauthorized access to protected information.
The vulnerability of the Thunderbird email client stems from insufficient verification of data authenticity when the space character is used in the Braille table. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information by sendi...
The vulnerability of the check function of the Cisco Adaptive Security Device Manager (ASDM) in the Cisco Adaptive Security Appliance Software (ASA) allows a hacker to execute arbitrary code.
The vulnerability of the Cisco Adaptive Security Device Manager ASDM verification function in the Cisco Adaptive Security Appliance Software ASA lies in insufficient data authentication. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by loading a specially crafte...
PT-2022-3172
Name of the Vulnerable Software and Affected Versions Ovation OCR400 affected versions not specified Ovation OCR1100 affected versions not specified Description The issue is related to insufficient data authentication in the embedded software images of the Ovation systems. This can allow a remote...
PT-2022-4997
Name of the Vulnerable Software and Affected Versions STARDOM FCN/FCJ affected versions not specified Description The issue is related to insufficient data authentication in the programmable logic controller's software, which could allow a remote attacker to execute arbitrary code. Recommendation...
PT-2022-38104
Уязвимость функции create log context модуля drivers/md/dm-log.c драйвера поддержки нескольких устройств RAID и LVM ядра операционной системы Linux связана с недостаточной проверкой подлинности данных. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...
PT-2022-4932
Name of the Vulnerable Software and Affected Versions SAP Business Objects version 420 Description The issue is related to insufficient input validation, allowing an authenticated attacker to submit a malicious request through an allowed operation. This can result in an attacker being able to vie...
The vulnerability of the Datagram TLS implementation in microprogramming-based network interface controllers from Cisco Adaptive Security Appliances (ASA) and Cisco Firepower Threat Defense (FTD) allows attackers to induce service failures.
The vulnerability of the Datagram TLS implementation in Cisco Adaptive Security Appliances ASA and Cisco Firepower Threat Defense FTD lies in insufficient data authentication. Exploiting this vulnerability allows a malicious actor to induce service failure through specially created DTLS traffic...
Dell Client Commercial 数据伪造问题漏洞
Dell Client Commercial is a line of workstation equipment from Dell, Inc. The Dell Client Commercial has a security vulnerability that stems from the device's susceptibility to an insufficient data authentication vulnerability. An authenticated attacker could use this vulnerability to install...
The vulnerability of the Open vSwitch network service provided by Neutron, related to insufficient data authentication checks, allows attackers to access confidential data and cause service failures.
The vulnerability of the Open vSwitch network service provided by Neutron relates to insufficient verification of data authenticity. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, as well as cause service failures through specially crafted packets...
OpenSSL: Timing-based attacks on SSL/TLS with CBC encryption (CVE-2003-0078) - Linux
OpenSSL is prone to timing-based attacks on SSL/TLS with CBC encryption. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is fre...
OpenSSL: Timing-based attacks on SSL/TLS with CBC encryption (CVE-2003-0078) - Windows
OpenSSL is prone to timing-based attacks on SSL/TLS with CBC encryption. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is fre...
PT-2020-5141 · Cncf · Envoy
Name of the Vulnerable Software and Affected Versions: CNCF Envoy versions prior to 1.13.0 Description: The issue is related to insufficient authentication of data in the Envoy network software. It allows a remote attacker to bypass security restrictions by using only TLS 1.3, which could lead to...
PT-2020-1985
Name of the Vulnerable Software and Affected Versions Cisco NX-OS Software affected versions not specified Description The issue is related to insufficient data authentication in the anycast gateway feature of Cisco NX-OS Software. This could allow an unauthenticated, adjacent attacker to cause a...
The vulnerability of the automatic update function of the security service for Umbrella Roaming Client for Windows allows a hacker to install arbitrary applications on the target device.
The vulnerability of the automatic update function for the Umbrella Roaming Client security service for Windows devices relates to insufficient data authentication checks. Exploiting this vulnerability could allow attackers to install arbitrary applications on target devices...
PT-2019-6058
Name of the Vulnerable Software and Affected Versions Adobe Download Manager version 2.0.0.363 Description The issue is related to insecure file permissions and insufficient data authentication, which could allow a remote attacker to escalate privileges. Recommendations For Adobe Download Manager...
