807 matches found
CVE-2026-1195
Summary: CVE-2026-1195 affects MineAdmin 1.x/2.x, specifically the JWT Token Handler’s /system/refresh function. The issue is insufficient verification of data authenticity, enabling a remote attack with high complexity; exploitation has been publicly disclosed. Multiple sources consistently desc...
MineAdmin Data Forgery Vulnerability
MineAdmin is an open-source permission management system developed by MineAdmin. Versions 1.x and 2.x of MineAdmin have a vulnerability related to data falsification, which stems from insufficient verification of data authenticity...
PT-2026-3519
Name of the Vulnerable Software and Affected Versions MineAdmin versions 1.x and 2.x Description A weakness exists due to insufficient verification of data authenticity within the JWT Token Handler component. This issue affects the refresh function of the /system/refresh file. The attack can be...
CVE-2021-33887
Insufficient verification of data authenticity in Peloton TTR01 up to and including PTV55G allows an attacker with physical access to boot into a modified kernel/ramdisk without unlocking the bootloader...
CVE-2021-22460
A component of the HarmonyOS has a Insufficient Verification of Data Authenticity vulnerability. Local attackers may exploit this vulnerability to bypass the control mechanism...
CVE-2024-39805
Insufficient verification of data authenticity in some IntelR DSA software before version 23.4.39 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2025-15385
Insufficient Verification of Data Authenticity vulnerability in TECNO Mobile com.Afmobi.Boomplayer allows Authentication Bypass.This issue affects com.Afmobi.Boomplayer: 7.4.63...
CVE-2025-15385
Insufficient Verification of Data Authenticity vulnerability in TECNO Mobile com.Afmobi.Boomplayer allows Authentication Bypass.This issue affects com.Afmobi.Boomplayer: 7.4.63...
CVE-2025-15385
Insufficient Verification of Data Authenticity vulnerability in TECNO Mobile com.Afmobi.Boomplayer allows Authentication Bypass.This issue affects com.Afmobi.Boomplayer: 7.4.63...
CVE-2025-15385
Insufficient Verification of Data Authenticity vulnerability in TECNO Mobile com.Afmobi.Boomplayer allows Authentication Bypass.This issue affects com.Afmobi.Boomplayer: 7.4.63...
CVE-2025-15385
CVE-2025-15385 affects TECNO Mobile com.Afmobi.Boomplayer v7.4.63. The Red Hat/NVD/CVE clusters and related sources describe an Insufficient Verification of Data Authenticity that permits authentication bypass. The CVSS 3.1 vector indicates a network-exposed, high-severity flaw with no privileges...
CVE-2025-15385
Insufficient Verification of Data Authenticity vulnerability in TECNO Mobile com.Afmobi.Boomplayer allows Authentication Bypass.This issue affects com.Afmobi.Boomplayer: 7.4.63...
PT-2026-1364
Name of the Vulnerable Software and Affected Versions TECNO Mobile com.Afmobi.Boomplayer version 7.4.63 Description A flaw exists in TECNO Mobile com.Afmobi.Boomplayer that allows for authentication bypass due to insufficient verification of data authenticity. Recommendations At the moment, there...
Security Bulletin: IBM Storage Ceph is vulnerable to Insufficient Verification of Data Authenticity in RGW (CVE-2024-48916)
Summary Ceph Rados Gateway RadosGW OIDC provider is used by IBM Storage Ceph in RGW. CVE-2024-48916 This bulletin identifies the steps to take to address the vulnerability in Ceph. Vulnerability Details CVEID:CVE-2024-48916 DESCRIPTION: Ceph is a distributed object, block, and file storage...
The vulnerability of the atmtcp_recv_control() function in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the atmtcprecvcontrol function in the Linux operating system is related to insufficient verification of data authenticity. Exploiting this vulnerability allows a remote attacker to cause service failures...
Siemens SIMATIC S7-1500 Insufficient Verification of Data Authenticity (CVE-2021-4122)
It was found that a specially crafted LUKS header could trick cryptsetup into disabling encryption during the recovery of the device. An attacker with physical access to the medium, such as a flash disk, could use this flaw to force a user into permanently disabling the encryption layer of that...
Siemens SIMATIC S7-1500 Insufficient Verification of Data Authenticity (CVE-2021-22947)
When curl = 7.20.0 and = 7.20.0 and = 7.78.0 connects to an IMAP or POP3 server to retrieve data using STARTTLS to upgrade...
Insufficient Verification of Data Authenticity
Overview mantisbt/mantisbt is a mantis bug tracker. Affected versions of this package are vulnerable to Insufficient Verification of Data Authenticity in the email address change. An attacker can cause unauthorized disclosure of information by updating their profile with an email address they do...
The vulnerability of Moxa TN-4500A, TN-5500A, TN-G4500, and TN-G6500 series router microprogramming software lies in the insufficient verification of data authenticity. This allows attackers to inject invalid node headers, redirect users to another website.
The vulnerability of Moxa’s TN-4500A, TN-5500A, TN-G4500, and TN-G6500 series router microprogramming software lies in the insufficient verification of data authenticity during the processing of HTTP headers. Exploiting this vulnerability allows a malicious actor to inject invalid node headers,...
