CVE-2024-1643

By knowing an organization's ID, an attacker can join the organization without permission and gain the ability to read and modify all data within that organization. This vulnerability allows unauthorized access and modification of sensitive information, posing a significant security risk. The fla...

CVE-2024-1643

CVE-2024-1643 affects lunary (production toolkit for LLMs). The issue is unauthorized organization access: an attacker can join an organization by knowing its ID and gain read/write access to all data due to insufficient verification of user permissions when joining. The connected documents consi...

CVE-2023-35764

Insufficient verification of data authenticity issue in Survey Maker prior to 3.6.4 allows a remote unauthenticated attacker to spoof an IP address when posting...

CVE-2023-39933

Insufficient verification vulnerability exists in Broadcast Mail CGI pmc.exe included in A.K.I Software's PMailServer/PMailServer2 products. If this vulnerability is exploited, a user who can upload files through the product may execute an arbitrary executable file with the web server's execution...

CVE-2023-39933

CVE-2023-39933 affects A.K.I Software PMailServer/PMailServer2, specifically the Broadcast Mail CGI (pmc.exe). The vulnerability is described as Insufficient verification, enabling an attacker who can upload files through the product to execute an arbitrary executable with the web server’s privil...

The vulnerability of the Assets Discovery agent (formerly Insight Discovery), a data processing product of Atlassian Jira Service Management Data Center and Server, as well as Cloud, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Assets Discovery agent previously known as Insight Discovery of Atlassian’s Jira Service Management Data Center and Server products and Cloud solutions is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow a malicious actor ...

The vulnerability of GlobalProtect Gateways’ operating system, PAN-OS, allows a hacker to establish a VPN connection from an unauthorized IP address.

The vulnerability of GlobalProtect Gateways’ operating system, PAN-OS, is related to insufficient verification of the connection source. Exploiting this vulnerability allows a malicious actor to establish a VPN connection from an unauthorized IP address...

CVE-2023-20570

Insufficient verification of data authenticity in the configuration state machine may allow a local attacker to potentially load arbitrary bitstreams...

AMD UltraScale™/UltraScale+™ FPGA Series RSA Authentication

Bulletin ID: AMD-SB-8002 Potential Impact: Information Integrity Severity: Refer to the Summary section for details Summary Insufficient verification of data authenticity in the configuration state machine may allow a local attacker to potentially load arbitrary bitstreams. CVE| Severity| CVE...

The vulnerability of the software used for creating, monitoring, and orchestrating data processing scripts in Airflow lies in the insufficient verification of the authenticity of executed requests, allowing an attacker to carry out a CSRF attack.

The vulnerability of the software used for creating, monitoring, and orchestrating data processing scripts in Airflow is related to insufficient verification of the authenticity of executed requests. Exploiting this vulnerability allows a malicious actor to perform a CSRF attack remotely...

UserPro < 5.1.2 - Authentication Bypass to Administrator

Description The UserPro plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 5.1.1. This is due to insufficient verification on the user being supplied during a Facebook login through the plugin. This makes it possible for unauthenticated attackers to log ...

Authentication flaw

The UserPro plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 5.1.1. This is due to insufficient verification on the user being supplied during a Facebook login through the plugin. This makes it possible for unauthenticated attackers to log in as any...

Zoom Client for Meetings < 5.14.5 Vulnerability (ZSB-23027)

The version of Zoom Client for Meetings installed on the remote host is prior to 5.14.5. It is, therefore, affected by a vulnerability as referenced in the ZSB-23027 advisory. - Insufficient verification of data authenticity in Zoom Desktop Client for Windows before 5.14.5 may allow an...

Mitsubishi Electric FA products (Update A)

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 9.1 ATTENTION : Exploitable remotely/low attack complexity Vendor : Mitsubishi Electric Corporation Equipment : MELSEC Series Vulnerability : Insufficient Verification of Data Authenticity 2. RISK EVALUATION Successful exploitation of this vulnerability may...

CVE-2023-5450

An insufficient verification of data vulnerability exists in BIG-IP Edge Client Installer on macOS that may allow an attacker elevation of privileges during the installation process. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

Design/Logic Flaw

An insufficient verification of data vulnerability exists in BIG-IP Edge Client Installer on macOS that may allow an attacker elevation of privileges during the installation process. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2023-5450 BIG-IP Edge Client for macOS vulnerability

An insufficient verification of data vulnerability exists in BIG-IP Edge Client Installer on macOS that may allow an attacker elevation of privileges during the installation process. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2023-5450 BIG-IP Edge Client for macOS vulnerability

An insufficient verification of data vulnerability exists in BIG-IP Edge Client Installer on macOS that may allow an attacker elevation of privileges during the installation process. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2023-5450

The CVE-2023-5450 issue affects F5 BIG-IP Edge Client for macOS. Affected: BIG-IP Edge Client Installer on macOS (APM) with insufficient data verification during installation, enabling local privilege escalation. Affected branches and fixes: BIG-IP APM macOS clients on 17.x (vulnerable 17.1.03; f...

The vulnerability of Acronis Cyber Protect 15’s data protection software lies in its insufficient verification of the authenticity of executed requests, allowing attackers to access confidential information.

The vulnerability of Acronis Cyber Protect 15 software-related data protection software lies in the insufficient verification of the authenticity of executed requests. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to confidential information...