Oracle Linux 9 : 18 (ELSA-2023-5849)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-5849 advisory. - Rebase to version 18.18.2 Resolves: CVE-2023-44487 CVE-2023-45143 CVE-2023-38552 CVE-2023-39333 nodejs-nodemon - Resolves: CVE-2022-25883...

Node.js 18.x < 18.18.2 / 20.x < 20.8.1 Multiple Vulnerabilities (Friday October 13 2023 Security Releases).

The version of Node.js installed on the remote host is prior to 18.18.2, 20.8.1. It is, therefore, affected by multiple vulnerabilities as referenced in the Friday October 13 2023 Security Releases advisory. - Undici did not always clear Cookie headers on cross-origin redirects. By design, cookie...

CVE-2023-38552

When the Node.js policy feature checks the integrity of a resource against a trusted manifest, the application can intercept the operation and return a forged checksum to the node's policy implementation, thus effectively disabling the integrity check. Impacts: This vulnerability affects all user...

CVE-2023-38552: Insufficient Verification of Data Authenticity

When the Node.js policy feature checks the integrity of a resource against a trusted manifest, the application can intercept the operation and return a forged checksum to the node's policy implementation, thus effectively disabling the integrity check. Impacts: This vulnerability affects all user...

PT-2023-23327 · Systemd +1 · Systemd +1

Name of the Vulnerable Software and Affected Versions: systemd version 253 Description: An issue was discovered where an attacker can modify the contents of past events in a sealed log file and then adjust the file such that checking the integrity shows no error, despite modifications...

CVE-2023-31438

An issue was discovered in systemd 253. An attacker can truncate a sealed log file and then resume log sealing such that checking the integrity shows no error, despite modifications. NOTE: the vendor reportedly sent "a reply denying that any of the finding was a security vulnerability."...

CVE-2023-28979

An Improper Check for Unusual or Exceptional Conditions vulnerability in the kernel of Juniper Networks Junos OS allows an adjacent unauthenticated attacker to bypass an integrity check. In a 6PE scenario and if an additional integrity check is configured, it will fail to drop specific malformed...

CVE-2023-28979 Junos OS: In a 6PE scenario upon receipt of a specific IPv6 packet an integrity check fails

An Improper Check for Unusual or Exceptional Conditions vulnerability in the kernel of Juniper Networks Junos OS allows an adjacent unauthenticated attacker to bypass an integrity check. In a 6PE scenario and if an additional integrity check is configured, it will fail to drop specific malformed...

PT-2023-22061 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 19.3R3-S7 Juniper Networks Junos OS 19.4 versions prior to 19.4R3-S9 Juniper Networks Junos OS 20.2 versions prior to 20.2R3-S7 Juniper Networks Junos OS 20.3 versions prior to 20.3R3-S5 Juniper...

CVE-2023-28979: Improper Check for Unusual or Exceptional Conditions

An Improper Check for Unusual or Exceptional Conditions vulnerability in the kernel of Juniper Networks Junos OS allows an adjacent unauthenticated attacker to bypass an integrity check. In a 6PE scenario and if an additional integrity check is configured, it will fail to drop specific malformed...

PT-2023-7629

Name of the Vulnerable Software and Affected Versions Ubiquiti airFiber AF2X Radio versions 3.2.2 and earlier Description The issue is related to the use of the cyclic redundancy check CRC algorithm for integrity checks during firmware updates, which can be exploited by an attacker to conduct a...

CVE-2022-37025

An improper privilege management vulnerability in McAfee Security Scan Plus MSS+ before 4.1.262.1 could allow a local user to modify a configuration file and perform a LOLBin Living off the land attack. This could result in the user gaining elevated permissions and being able to execute arbitrary...

CVE-2022-28385

Affected products: Verbatim Executive Fingerprint Secure SSD GDMSFE01-INI3637-C VER1.1 and Fingerprint Secure Portable Hard Drive (Part Number #53650). Root cause: missing integrity checks allow manipulation of the ISO-9660 image stored in hidden USB drive sectors that backs the emulated CD-ROM c...

Exploit for Download of Code Without Integrity Check in Caphyon Advanced_Installer

CVE-2022-27438 Caphyon Ltd Advanced Installer 19.3 "CustomDe...

PT-2022-17614

Name of the Vulnerable Software and Affected Versions F5 BIG-IP Advanced WAF, ASM, and ASM versions 11.6.x through 16.1.x F5 BIG-IP Guided Configuration GC versions prior to 9.0 Description An authenticated attacker with Administrator role privilege may be able to bypass Appliance mode restrictio...

CVE-2022-25946: Improper Validation of Integrity Check Value

On all versions of 16.1.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x, and 11.6.x of F5 BIG-IP Advanced WAF, ASM, and ASM, and F5 BIG-IP Guided Configuration GC all versions prior to 9.0, when running in Appliance mode, an authenticated attacker with Administrator role privilege may be able to bypass Applian...

CVE-2021-22276

The vulnerability allows a successful attacker to bypass the integrity check of FW uploaded to the free@home System Access Point...

Design/Logic Flaw

The vulnerability allows a successful attacker to bypass the integrity check of FW uploaded to the free@home System Access Point...

CVE-2021-22276

CVE-2021-22276 affects the free@home System Access Point firmware integrity check, enabling a successful attacker to bypass the integrity verification when FW is uploaded. The available connected documents confirm the vulnerability and its impact (integrity check bypass) but do not provide explic...

ABB system access point 信息泄露漏洞

ABB Asea Brown Boveri Ltd ABB system access point is the control center for the ABB-free@home™ smart home system from ABB Asea Brown Boveri Ltd, Sweden. A security vulnerability exists in free@home System Access Poing, which arises from a problem with the software's integrity checking. The...