736 matches found
CVE-2019-5246: Insufficient Verification of Data Authenticity
Smartphones with software of ELLE-AL00B 9.1.0.109C00E106R1P21, 9.1.0.113C00E110R1P21, 9.1.0.125C00E120R1P21, 9.1.0.135C00E130R1P21, 9.1.0.153C00E150R1P21, 9.1.0.155C00E150R1P21, 9.1.0.162C00E160R2P1 have an insufficient verification vulnerability. The system does not verify certain parameters...
CVE-2019-18835: Insufficient Verification of Data Authenticity
Matrix Synapse before 1.5.0 mishandles signature checking on some federation APIs. Events sent over /sendjoin, /sendleave, and /invite may not be correctly signed, or may not come from the expected servers...
CloudBees Jenkins Rundeck plugin cross-site request forgery vulnerability
CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version release/testing project and some timed tasks . Rundeck Plugin is used in one of the...
WordPress monetize plugin cross-site request forgery vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. monetize is an advertising plugin used in it. A cross-site request forgery vulnerability exists in WordPress monetize plugin version...
CVE-2019-10492: Insufficient Verification of Data Authenticity
Boot image not getting verified by AVB in Snapdragon Auto, Snapdragon Mobile, Snapdragon Wearables in MDM9607, MSM8909W, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 820, SD 820A, SDM439...
Security Advisory - Insufficient Verification Vulnerability in Several Smartphones
There is an insufficient verification vulnerability in several smartphones. The system does not verify certain parameters sufficiently, an attacker should connect to the phone and gain high privilege to launch the attack, successful exploit could cause DOS or malicious code execution. Vulnerabili...
Security Advisory - Insufficient Verification Vulnerability in Several Smartphones
There is an insufficient verification vulnerability in several smartphones. The system does not verify certain parameters sufficiently, an attacker should connect to the phone and gain high privilege to launch the attack, successful exploit could cause malicious code execution. Vulnerability ID:...
WordPress wp-editor plugin cross-site request forgery vulnerability
WordPress is a set of blogging platform developed by WordPress Foundation using PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. wp-editor plugin is an editor plugin used in it. A cross-site request forgery vulnerability exists in the WordPress wp-edito...
Magento Cross-Site Request Forgery Vulnerability (CNVD-2019-20858)
Magento is an open source PHP e-commerce system of the United States Magento company . The system provides rights management , search engine and payment gateway and other functions. A cross-site request forgery vulnerability exists in Magento, which arises from a WEB application that does not...
The vulnerability in the “One Portal for Housing Fund Monitoring” platform, related to insufficient verification of access rights, allows a violator to gain access to protected information.
The vulnerability in the “One Portal for Housing Fund Monitoring” platform is related to insufficient verification of access rights. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to protected information through a specially crafted GET request...
Inateck 2.4 GHz Wireless Presenter WP1001 Keystroke Injection Vulnerability
Product: 2.4 GHz Wireless Presenter WP1001 Manufacturer: Inateck Affected Versions: Rev. v1.3C Tested Versions: Rev. v1.3C Vulnerability Type: Insufficient Verification of Data Authenticity CWE-345 Keystroke Injection Vulnerability Risk Level: High Solution Status: Open Manufacturer Notification:...
CVE-2019-1880: Insufficient Verification of Data Authenticity
A vulnerability in the BIOS upgrade utility of Cisco Unified Computing System UCS C-Series Rack Servers could allow an authenticated, local attacker to install compromised BIOS firmware on an affected device. The vulnerability is due to insufficient validation of the firmware image file. An...
Race condition
Some Huawei S series switches have a DoS vulnerability. An unauthenticated remote attacker can send crafted packets to the affected device to exploit this vulnerability. Due to insufficient verification of the packets, successful exploitation may cause the device reboot and denial of service DoS...
CVE-2019-5285
CVE-2019-5285 affects Huawei S Series switches. A DoS exists where an unauthenticated remote attacker can send crafted packets, due to insufficient verification, potentially causing device reboot and denial of service. The issue is documented in Huawei’s advisory (HWPSIRT-2019-03109/SA-20190522-0...
pacemaker: Insufficient verification inflicted preference of uncontrolled processes can lead to DoS
A flaw was found in pacemaker. An insufficient verification inflicted preference of uncontrolled processes can lead to DoS...
pacemaker: Insufficient verification inflicted preference of uncontrolled processes can lead to DoS
A flaw was found in pacemaker. An insufficient verification inflicted preference of uncontrolled processes can lead to DoS...
PT-2019-10967
Name of the Vulnerable Software and Affected Versions: PrinterLogic Print Management software versions up to and including 18.3.1.96 Description: The issue allows an attacker to execute malicious code by compromising the host server, performing DNS spoofing, or modifying the code in transit, due ...
CVE-2019-11235: Insufficient Verification of Data Authenticity
FreeRADIUS before 3.0.19 mishandles the "each participant verifies that the received scalar is within a range, and that the received group element is a valid point on the curve being used" protection mechanism, aka a "Dragonblood" issue, a similar issue to CVE-2019-9498 and CVE-2019-9499...
