Lucene search
+L

975 matches found

BDU FSTEC
BDU FSTEC
•added 2020/04/16 12:00 a.m.•9 views

The vulnerability of the RADIUS server FreeRADIUS, related to insufficient verification of data authenticity, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the RADIUS-server FreeRADIUS is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

10CVSS7.7AI score0.03566EPSS
SaveExploits0References12Affected Software5
BDU FSTEC
BDU FSTEC
•added 2020/04/06 12:00 a.m.•13 views

A vulnerability in the anycast function of the Cisco NX-OS operating system, which allows a attacker to compromise the integrity of protected information.

The vulnerability in the anycast function of the Cisco NX-OS operating system is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow a malicious actor to compromise the integrity of protected information...

4.7CVSS5.5AI score0.00292EPSS
SaveExploits0References4
OSV
OSV
•added 2020/04/03 11:15 a.m.•15 views

CVE-2019-18905

A Insufficient Verification of Data Authenticity vulnerability in autoyast2 of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15 allows remote attackers to MITM connections when deprecated and unused functionality of autoyast is used to create images. This issue affects: SUSE Linux...

5.9CVSS6.3AI score0.0073EPSS
SaveExploits0References2
NVD
NVD
•added 2020/04/03 11:15 a.m.•35 views

CVE-2019-18905

A Insufficient Verification of Data Authenticity vulnerability in autoyast2 of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15 allows remote attackers to MITM connections when deprecated and unused functionality of autoyast is used to create images. This issue affects: SUSE Linux...

5.9CVSS5.3AI score0.0073EPSS
SaveExploits0References2
Prion
Prion
•added 2020/04/03 11:15 a.m.•23 views

Design/Logic Flaw

A Insufficient Verification of Data Authenticity vulnerability in autoyast2 of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15 allows remote attackers to MITM connections when deprecated and unused functionality of autoyast is used to create images. This issue affects: SUSE Linux...

4.3CVSS5.7AI score0.0073EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2020/04/03 11:00 a.m.•47 views

CVE-2019-18905 Deprecated functionality in autoyast2 automatically imports gpg keys without checking them

A Insufficient Verification of Data Authenticity vulnerability in autoyast2 of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15 allows remote attackers to MITM connections when deprecated and unused functionality of autoyast is used to create images. This issue affects: SUSE Linux...

4.8CVSS5.6AI score0.0073EPSS
SaveExploits0References2
CVE
CVE
•added 2020/04/03 11:00 a.m.•183 views

CVE-2019-18905

CVE-2019-18905 describes an insufficient verification of data authenticity in autoyast2 for SUSE Linux Enterprise Server 12 (autoyast2 4.1.9-3.9.1 and earlier) and SLES 15 (autoyast2 4.0.70-3.20.1 and earlier). This could enable a remote attacker to perform MITM when deprecated/unused autoyast fu...

5.9CVSS6.3AI score0.0073EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/04/03 12:00 a.m.•3 views

CVE-2019-18905: Insufficient Verification of Data Authenticity

A Insufficient Verification of Data Authenticity vulnerability in autoyast2 of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15 allows remote attackers to MITM connections when deprecated and unused functionality of autoyast is used to create images. This issue affects: SUSE Linux...

5.9CVSS6.3AI score0.0073EPSS
SaveExploits0References3
NVD
NVD
•added 2020/03/15 11:15 p.m.•35 views

CVE-2019-17654

An Insufficient Verification of Data Authenticity vulnerability in FortiManager 6.2.1, 6.2.0, 6.0.6 and below may allow an unauthenticated attacker to perform a Cross-Site WebSocket Hijacking CSWSH attack...

8.8CVSS8.6AI score0.00467EPSS
SaveExploits0References1
OSV
OSV
•added 2020/03/15 11:15 p.m.•15 views

CVE-2019-17654

An Insufficient Verification of Data Authenticity vulnerability in FortiManager 6.2.1, 6.2.0, 6.0.6 and below may allow an unauthenticated attacker to perform a Cross-Site WebSocket Hijacking CSWSH attack...

8.8CVSS7.3AI score0.00467EPSS
SaveExploits0References1
Prion
Prion
•added 2020/03/15 11:15 p.m.•22 views

Cross site scripting

An Insufficient Verification of Data Authenticity vulnerability in FortiManager 6.2.1, 6.2.0, 6.0.6 and below may allow an unauthenticated attacker to perform a Cross-Site WebSocket Hijacking CSWSH attack...

6.8CVSS8.5AI score0.00467EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2020/03/15 10:20 p.m.•48 views

CVE-2019-17654

An Insufficient Verification of Data Authenticity vulnerability in FortiManager 6.2.1, 6.2.0, 6.0.6 and below may allow an unauthenticated attacker to perform a Cross-Site WebSocket Hijacking CSWSH attack...

8.6AI score0.00467EPSS
SaveExploits0References1
CVE
CVE
•added 2020/03/15 10:20 p.m.•85 views

CVE-2019-17654

CVE-2019-17654 pertains to FortiManager: an insufficient verification of data authenticity vulnerability could allow an unauthenticated attacker to perform a Cross-Site WebSocket Hijacking (CSWSH) attack. Affected products/versions are FortiManager 6.2.1, 6.2.0, 6.0.6 and below. The connected doc...

8.8CVSS8.6AI score0.00467EPSS
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2020/03/10 8:39 p.m.•69 views

Insufficient Verification of Data Authenticity in python-keystoneclient

python-keystoneclient version 0.2.3 to 0.2.5 has middleware memcache signing bypass...

9.8CVSS5.3AI score0.0197EPSS
SaveExploits1References13Affected Software1
OSV
OSV
•added 2020/03/10 8:39 p.m.•33 views

GHSA-9VG3-CF92-H2H7 Insufficient Verification of Data Authenticity in python-keystoneclient

python-keystoneclient version 0.2.3 to 0.2.5 has middleware memcache signing bypass...

9.8CVSS9.3AI score0.0197EPSS
SaveExploits1References14
BDU FSTEC
BDU FSTEC
•added 2020/03/04 12:00 a.m.•15 views

The vulnerability of the Cisco AnyConnect Secure Mobility Client cryptographic protection mechanism is related to insufficient verification of data authenticity, which allows attackers to trigger service failures or disclose protected information.

The vulnerability of the Cisco AnyConnect Secure Mobility Client encryption method is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow attackers to cause service failures or expose the protected information...

6.6CVSS6.5AI score0.0036EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/02/19 12:00 a.m.•3 views

CVE-2016-1000004: Insufficient Verification of Data Authenticity

Insufficient type checks were employed prior to casting input data in SimpleXMLElementexportNode and simplexmlimportdom. This issue affects HHVM versions prior to 3.9.5, all versions between 3.10.0 and 3.12.3 inclusive, and all versions between 3.13.0 and 3.14.1 inclusive...

9.8CVSS8.2AI score0.00683EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2020/01/13 12:00 a.m.•12 views

The vulnerability of the SAP Process Integration integration platform, related to insufficient verification of data authenticity, allows attackers to compromise the integrity of the protected information.

The vulnerability of the SAP Process Integration integration platform is related to insufficient verification of data authenticity. Exploiting this vulnerability could allow a malicious actor, operating remotely, to compromise the integrity of the protected information...

5.3CVSS5.9AI score0.00927EPSS
SaveExploits0References2Affected Software1
OpenVAS
OpenVAS
•added 2019/12/18 12:00 a.m.•46 views

Huawei Data Communication: Insufficient Verification of Data Authenticity Vulnerability In Some Huawei Products (huawei-sa-20191204-01-validation)

Some Huawei products has an insufficient verification of data authenticity vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if...

5.9CVSS5.8AI score0.00358EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/12/17 12:00 a.m.•5 views

CVE-2019-18824: Insufficient Verification of Data Authenticity

Barco ClickShare Button R9861500D01 devices before 1.10.0.13 have Missing Support for Integrity Check. The ClickShare Button does not verify the integrity of the mutable content on the UBIFS partition before being used...

6.9CVSS6.7AI score0.00336EPSS
SaveExploits1References2
Rows per page
Query Builder