CVE-2018-16878

A flaw was found in pacemaker up to and including version 2.0.1. An insufficient verification inflicted preference of uncontrolled processes can lead to DoS...

CVE-2018-16878

A flaw was found in pacemaker up to and including version 2.0.1. An insufficient verification inflicted preference of uncontrolled processes can lead to DoS...

UBUNTU-CVE-2018-16878

A flaw was found in pacemaker up to and including version 2.0.1. An insufficient verification inflicted preference of uncontrolled processes can lead to DoS...

CVE-2019-0805: Insufficient Verification of Data Authenticity

An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver luafv.sys, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0730, CVE-2019-0731, CVE-2019-0796, CVE-2019-0836, CVE-2019-0841...

CVE-2015-3956: Insufficient Verification of Data Authenticity

Hospira Plum A+ Infusion System version 13.4 and prior, Plum A+3 Infusion System version 13.6 and prior, and Symbiq Infusion System, version 3.13 and prior accept drug libraries, firmware updates, pump commands, and unauthorized configuration changes from unauthenticated devices on the host...

CVE-2018-7798

CVE-2018-7798 affects Schneider Electric Modicon M221 PLCs (all versions). Root cause: Insufficient Verification of Data Authenticity (CWE-345) in the UMAS protocol, enabling a remote attacker to modify IPv4 configuration (IP address, subnet mask, gateway). Reported impact: potential remote recon...

CVE-2018-7798: Insufficient Verification of Data Authenticity

A Insufficient Verification of Data Authenticity CWE-345 vulnerability exists in the Modicon M221, all versions, which could cause a change of IPv4 configuration IP address, mask and gateway when remotely connected to the device...

CVE-2018-7907

Some Huawei products Agassi-L09 AGS-L09C100B257CUSTC100D001, AGS-L09C170B253CUSTC170D001, AGS-L09C199B251CUSTC199D001, AGS-L09C229B003CUSTC229D001, Agassi-W09 AGS-W09C100B257CUSTC100D001, AGS-W09C128B252CUSTC128D001, AGS-W09C170B252CUSTC170D001, AGS-W09C229B251CUSTC229D001,...

CVE-2018-7907

Some Huawei products Agassi-L09 AGS-L09C100B257CUSTC100D001, AGS-L09C170B253CUSTC170D001, AGS-L09C199B251CUSTC199D001, AGS-L09C229B003CUSTC229D001, Agassi-W09 AGS-W09C100B257CUSTC100D001, AGS-W09C128B252CUSTC128D001, AGS-W09C170B252CUSTC170D001, AGS-W09C229B251CUSTC229D001,...

PT-2018-18318

Name of the Vulnerable Software and Affected Versions: Huawei Agassi-L09 versions AGS-L09C100B257CUSTC100D001 through AGS-L09C229B003CUSTC229D001 Huawei Agassi-W09 versions AGS-W09C100B257CUSTC100D001 through AGS-W09C794B001CUSTC794D001 Huawei Baggio2-U01A versions BG2-U01C100B160CUSTC100D001...

CVE-2018-7906

Some Huawei smart phones with software of Leland-AL00 8.0.0.114C636, Leland-AL00A 8.0.0.171C00 have a denial of service DoS vulnerability. An attacker can trick a user to install a malicious application to exploit this vulnerability. Due to insufficient verification of the parameter, successful...

CVE-2018-7937

In Huawei HiRouter-CD20-10 with the versions before 1.9.6 and WS5200-10 with the versions before 1.9.6, there is a plug-in signature bypass vulnerability due to insufficient plug-in verification. An attacker may tamper with a legitimate plug-in to build a malicious plug-in and trick users into...

CVE-2018-7937

Affected products are Huawei HiRouter-CD20-10 and WS5200-10, with versions before 1.9.6. The issue is a plug-in signature bypass caused by insufficient plug-in verification, enabling an attacker to tamper with a legitimate plug-in to install a malicious one. Successful exploit could grant root ac...

CVE-2018-7937

In Huawei HiRouter-CD20-10 with the versions before 1.9.6 and WS5200-10 with the versions before 1.9.6, there is a plug-in signature bypass vulnerability due to insufficient plug-in verification. An attacker may tamper with a legitimate plug-in to build a malicious plug-in and trick users into...

Security Advisory - Plug-in Signature Bypass Vulnerability in Some Huawei Products

There is a plug-in signature bypass vulnerability in some Huawei products due to insufficient plug-in verification. An attacker may tamper with a legitimate plug-in to build a malicious plug-in and trick users into installing it. Successful exploit could allow the attacker to obtain the root...

CVE-2017-3198: Insufficient Verification of Data Authenticity

GIGABYTE BRIX UEFI firmware does not cryptographically validate images prior to updating the system firmware. Additionally, the firmware updates are served over HTTP. An attacker can make arbitrary modifications to firmware images without being detected...

PT-2018-11129

Name of the Vulnerable Software and Affected Versions ECOS Secure Boot Stick aka SBS version 5.6.5 Description The issue allows an attacker to manipulate security relevant configurations and execute malicious code due to insufficient verification of data authenticity. Recommendations For ECOS...

CVE-2018-12333: Insufficient Verification of Data Authenticity

Insufficient Verification of Data Authenticity vulnerability in ECOS Secure Boot Stick aka SBS 5.6.5 allows an attacker to manipulate security relevant configurations and execute malicious code...

CVE-2017-1405: Insufficient Verification of Data Authenticity

IBM Security Identity Manager Virtual Appliance 7.0 processes patches, image backups and other updates without sufficiently verifying the origin and integrity of the code. IBM X-Force ID: 127392...

PT-2018-5616

Name of the Vulnerable Software and Affected Versions: IBM Security Identity Manager Virtual Appliance version 7.0 Description: The issue arises from insufficient verification of the origin and integrity of code during the processing of patches, image backups, and other updates. Recommendations:...