Lucene search
+L

1255 matches found

RedhatCVE
RedhatCVE
added 2025/08/31 12:04 a.m.10 views

CVE-2024-46917

Diebold Nixdorf Vynamic Security Suite through 4.3.0 SR01 does not validate file attributes or the contents of /root during integrity validation. This allows code execution, recovery of TPM Disk Encryption keys, decryption of the Windows system partition, and full control of the Windows OS, e.g.,...

8.1CVSS7.2AI score0.00236EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/08/15 3:36 p.m.24 views

CVE-2025-48500

A missing file integrity check vulnerability exists on MacOS F5 VPN browser client installer that may allow a local, authenticated attacker with access to the local file system to replace it with a malicious package installer. Note: Software versions which have reached End of Technical Support Eo...

7.3CVSS6.8AI score0.00115EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2025/08/14 12:00 a.m.10 views

F5 Networks BIG-IP : BIG-IP APM VPN browser client for macOS vulnerability (K000151782)

The version of F5 Networks BIG-IP installed on the remote host is prior to 15.1.10.8 / 16.1.6.1 / 17.1.3 / 17.5.1.3. It is, therefore, affected by a vulnerability as referenced in the K000151782 advisory. A missing file integrity check vulnerability exists on the macOS F5 VPN browser client...

7.3CVSS5.6AI score0.00115EPSS
SaveExploits0References2
NVD
NVD
added 2025/08/13 3:15 p.m.12 views

CVE-2025-48500

A missing file integrity check vulnerability exists on MacOS F5 VPN browser client installer that may allow a local, authenticated attacker with access to the local file system to replace it with a malicious package installer. Note: Software versions which have reached End of Technical Support...

7.3CVSS0.00115EPSS
SaveExploits0References1
OSV
OSV
added 2025/08/13 3:15 p.m.9 views

CVE-2025-48500

A missing file integrity check vulnerability exists on MacOS F5 VPN browser client installer that may allow a local, authenticated attacker with access to the local file system to replace it with a malicious package installer. Note: Software versions which have reached End of Technical Support...

7CVSS5.8AI score0.00115EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/08/13 2:46 p.m.6 views

CVE-2025-48500 BIG-IP APM VPN web client for macOS vulnerability

A missing file integrity check vulnerability exists on MacOS F5 VPN browser client installer that may allow a local, authenticated attacker with access to the local file system to replace it with a malicious package installer. Note: Software versions which have reached End of Technical Support...

7.3CVSS6.7AI score0.00115EPSS
SaveExploits0References1
CVE
CVE
added 2025/08/13 2:46 p.m.46 views

CVE-2025-48500

CVE-2025-48500 affects the macOS BIG-IP APM VPN browser client installer. A missing file integrity check may allow a local, authenticated attacker with local access to replace the installer with a malicious package, potentially leading to local privilege escalation. Affected versions include BIG-...

7.3CVSS6.7AI score0.00115EPSS
SaveExploits0References1Affected Software2
ATTACKERKB
ATTACKERKB
added 2025/08/13 2:46 p.m.4 views

CVE-2025-48500

A missing file integrity check vulnerability exists on MacOS F5 VPN browser client installer that may allow a local, authenticated attacker with access to the local file system to replace it with a malicious package installer. Note: Software versions which have reached End of Technical Support...

7.3CVSS5.8AI score0.00115EPSS
SaveExploits0References2Affected Software2
CVE
CVE
added 2025/08/08 4:09 p.m.22 views

CVE-2025-53520

CVE-2025-53520 affects EG4 Electronics EG4 Inverters. Firmware updates can be downloaded from EG4’s site, transferred via USB dongles, or installed through the Monitoring Center or via a serial connection, and are installed without integrity checks. TTComp firmware archives are unencrypted and ca...

8.8CVSS6.5AI score0.00203EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/08/08 12:00 a.m.6 views

EG4 Electronics EG4 Inverters 安全漏洞

EG4 Electronics EG4 Inverters is a series of hybrid inverters from EG4 Electronics, USA. A security vulnerability exists in the EG4 Electronics EG4 Inverters that stems from a firmware update that was not integrity checked, which could lead to firmware tampering...

8.8CVSS6.5AI score0.00203EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/08/08 12:00 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2020-13845

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Sylabs Singularity 3.0 through 3.5 has Improper Validation of an Integrity Check Value. Image integrity is not validated when an ECL policy is enforced. The...

7.5CVSS7.1AI score0.00517EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/08 12:00 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2020-13847

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Sylabs Singularity 3.0 through 3.5 lacks support for an Integrity Check. Singularity's sign and verify commands do not sign metadata found in the global header ...

7.5CVSS7AI score0.00629EPSS
SaveExploits0References2
Snyk
Snyk
added 2025/08/07 8:55 p.m.1 views

Improper Validation of Integrity Check Value

Overview jwe is a Ruby implementation of the RFC 7516 JSON Web Encryption JWE standard. Affected versions of this package are vulnerable to Improper Validation of Integrity Check Value due to missing authentication tag validation in the AES-GCM process. An attacker can gain access to confidential...

9.3CVSS7.1AI score0.00244EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
added 2025/07/10 5:18 p.m.10 views

CVE-2025-48811

Missing support for integrity check in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...

6.7CVSS7.2AI score0.00258EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/07/10 5:18 p.m.13 views

CVE-2025-48803

Missing support for integrity check in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...

6.7CVSS7.2AI score0.00258EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/07/08 10:21 p.m.13 views

CVE-2025-7096

A vulnerability classified as critical was found in Comodo Internet Security Premium 12.3.4.8162. This vulnerability affects unknown code of the file cisupdatex64.xml of the component Manifest File Handler. The manipulation leads to improper validation of integrity check value. The attack can be...

9.2CVSS8.1AI score0.00426EPSS
SaveExploits1References1
OSV
OSV
added 2025/07/08 5:15 p.m.7 views

CVE-2025-48811

Missing support for integrity check in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...

6.7CVSS5.8AI score0.00258EPSS
SaveExploits0References1
NVD
NVD
added 2025/07/08 5:15 p.m.8 views

CVE-2025-48811

Missing support for integrity check in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...

6.7CVSS0.00258EPSS
SaveExploits0References1
OSV
OSV
added 2025/07/08 5:15 p.m.10 views

CVE-2025-48803

Missing support for integrity check in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...

6.7CVSS5.8AI score0.00258EPSS
SaveExploits0References1
NVD
NVD
added 2025/07/08 5:15 p.m.11 views

CVE-2025-48803

Missing support for integrity check in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...

6.7CVSS0.00258EPSS
SaveExploits0References1
Rows per page
Query Builder