Lucene search
+L

807 matches found

BDU FSTEC
BDU FSTEC
added 2025/03/05 12:0 a.m.9 views

The vulnerability of the Thunderbird email client, specifically Thunderbird ESR, arises from insufficient verification of data authenticity, allowing attackers to influence the integrity of the data.

The vulnerability of the Thunderbird email client, specifically Thunderbird ESR, is related to insufficient verification of data authenticity. Exploiting this vulnerability could allow a malicious actor to influence the integrity of data...

7.8CVSS7.7AI score0.00237EPSS
SaveExploits0References11Affected Software6
RedhatCVE
RedhatCVE
added 2025/03/02 5:19 p.m.7 views

CVE-2025-24843

Insecure file retrieval process that facilitates potential for file manipulation to affect product stability and confidentiality, integrity, authenticity, and attestation of stored data...

5.1CVSS6.7AI score0.00149EPSS
SaveExploits0References1
NVD
NVD
added 2025/02/28 5:15 p.m.10 views

CVE-2025-24843

Insecure file retrieval process that facilitates potential for file manipulation to affect product stability and confidentiality, integrity, authenticity, and attestation of stored data...

5.1CVSS0.00149EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/02/28 12:0 a.m.5 views

Dario Health 安全漏洞

Dario Health is a software from Dario Health that provides digital health solutions for people with chronic conditions. Dario Health has a security vulnerability that stems from an insecure file retrieval process that could lead to file manipulation, impacting product stability and data...

5.1CVSS6.6AI score0.00149EPSS
SaveExploits0References3
IBM Security Bulletins
IBM Security Bulletins
added 2025/02/26 6:42 p.m.9 views

Security Bulletin: IBM watsonx Orchestrate Cartridge affected by vulnerability in Certifi python-certifi

Summary IBM watsonx Orchestrate Cartridge contains a vulnerable version of Certifi python-certifi Vulnerability Details CVEID:CVE-2024-39689 DESCRIPTION: Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS...

7.5CVSS7.4AI score0.01049EPSS
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/02/20 12:0 a.m.15 views

The vulnerability of the Xerox Workplace Suite print management server, related to insufficient verification of data authenticity, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the Xerox Workplace Suite print management server is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

5CVSS5.5AI score0.00185EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2025/02/12 10:15 p.m.30 views

CVE-2024-39805

Insufficient verification of data authenticity in some IntelR DSA software before version 23.4.39 may allow an authenticated user to potentially enable escalation of privilege via local access...

7.8CVSS0.00128EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/02/12 9:19 p.m.24 views

CVE-2024-39805

Insufficient verification of data authenticity in some IntelR DSA software before version 23.4.39 may allow an authenticated user to potentially enable escalation of privilege via local access...

7.8CVSS0.00128EPSS
SaveExploits0References1
CVE
CVE
added 2025/02/12 9:19 p.m.68 views

CVE-2024-39805

Intel® DSA software prior to version 23.4.39 is affected by insufficient verification of data authenticity, which may allow an authenticated user to escalate privileges via local access. Affected product: Intel® Driver Support Assistant (DSA) software before 23.4.39. Root cause: data authenticity...

7.8CVSS7.1AI score0.00128EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/02/11 12:0 a.m.7 views

PT-2025-6671 · Intel · Intel Dsa

Name of the Vulnerable Software and Affected Versions: IntelR DSA software versions prior to 23.4.39 Description: The issue is related to insufficient verification of data authenticity in some IntelR DSA software, which may allow an authenticated user to potentially enable escalation of privilege...

7.8CVSS7.4AI score0.00128EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2025/02/08 4:51 a.m.10 views

CVE-2025-23415

An insufficient verification of data authenticity vulnerability exists in BIG-IP APM Access Policy endpoint inspection that may allow an attacker to bypass endpoint inspection checks for VPN connection initiated thru BIG-IP APM browser network access VPN client for Windows, macOS and Linux. Note:...

3.1CVSS7AI score0.00137EPSS
SaveExploits0References3
NVD
NVD
added 2025/02/07 2:15 p.m.50 views

CVE-2025-1108

Insufficient data authenticity verification vulnerability in Janto, versions prior to r12. This allows an unauthenticated attacker to modify the content of emails sent to reset the password. To exploit the vulnerability, the attacker must create a POST request by injecting malicious content into...

8.6CVSS0.00207EPSS
SaveExploits0References1
CVE
CVE
added 2025/02/07 1:40 p.m.67 views

CVE-2025-1108

CVE-2025-1108 affects Janto, versions prior to r12. The issue is an insufficient data authenticity verification vulnerability that lets an unauthenticated attacker modify the content of password-reset emails by sending a crafted POST request that injects malicious content into the Xml parameter a...

8.6CVSS7AI score0.00207EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/02/07 1:40 p.m.41 views

CVE-2025-1108 Insufficient data authenticity vulnerability in Janto

Insufficient data authenticity verification vulnerability in Janto, versions prior to r12. This allows an unauthenticated attacker to modify the content of emails sent to reset the password. To exploit the vulnerability, the attacker must create a POST request by injecting malicious content into...

8.6CVSS0.00207EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/02/07 1:40 p.m.14 views

CVE-2025-1108 Insufficient data authenticity vulnerability in Janto

Insufficient data authenticity verification vulnerability in Janto, versions prior to r12. This allows an unauthenticated attacker to modify the content of emails sent to reset the password. To exploit the vulnerability, the attacker must create a POST request by injecting malicious content into...

8.6CVSS8.5AI score0.00207EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/02/07 12:0 a.m.7 views

PT-2025-5973 · Janto · Janto

Name of the Vulnerable Software and Affected Versions: Janto versions prior to r12 Description: The issue concerns an insufficient data authenticity verification vulnerability. This vulnerability allows an unauthenticated attacker to modify the content of emails sent to reset the password. To...

8.6CVSS6.5AI score0.00207EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2025/02/05 8:43 p.m.16 views

CVE-2022-37928

Insufficient Verification of Data Authenticity vulnerability in Hewlett Packard Enterprise HPE Nimble Storage Hybrid Flash Arrays and Nimble Storage Secondary Flash Arrays...

8CVSS6.9AI score0.00286EPSS
SaveExploits0
OSV
OSV
added 2025/02/05 6:15 p.m.9 views

CVE-2025-23415

An insufficient verification of data authenticity vulnerability exists in BIG-IP APM Access Policy endpoint inspection that may allow an attacker to bypass endpoint inspection checks for VPN connection initiated thru BIG-IP APM browser network access VPN client for Windows, macOS and Linux. Note:...

3.1CVSS5.8AI score0.00137EPSS
SaveExploits0References1
NVD
NVD
added 2025/02/05 6:15 p.m.17 views

CVE-2025-23415

An insufficient verification of data authenticity vulnerability exists in BIG-IP APM Access Policy endpoint inspection that may allow an attacker to bypass endpoint inspection checks for VPN connection initiated thru BIG-IP APM browser network access VPN client for Windows, macOS and Linux. Note:...

3.1CVSS0.00137EPSS
SaveExploits0References1
CVE
CVE
added 2025/02/05 5:31 p.m.65 views

CVE-2025-23415

CVE-2025-23415 affects BIG-IP APM, specifically the endpoint inspection in the APM access policy, where a missing integrity check could allow bypassing endpoint inspection checks for VPN connections initiated via the BIG-IP APM browser network access VPN client (Windows, macOS, Linux). The issue ...

3.1CVSS3.9AI score0.00137EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder