CVE-2019-14808

An issue was discovered in the RENPHO application 3.0.0 for iOS. It transmits JSON data unencrypted to a server without an integrity check, if a user changes personal data in his profile tab e.g., exposure of his birthday or logs into his account i.e., exposure of credentials...

Windows NTLM Tampering Vulnerability

A tampering vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to successfully bypass the NTLM MIC Message Integrity Check protection. An attacker who successfully exploited this vulnerability could gain the ability to downgrade NTLM security features. To exploit...

RENPHO 3.0.0 Information Disclosure

Hello together, we’ve found the following vulnerability below. Affected software: RENPHO V3.0.0 iOS App Vulnerability type: Missing Encryption and Integrity Check of Sensitive Data Vulnerable version: Renpho Mobile Application V3.0.0 for iOS Vulnerable component: Client app, transmitting data to...

Node.js third-party modules: [yarn] yarn.lock integrity & hash check logic is broken

I would like to report a vulnerability in yarn. It allows to pollute yarn cache via a crafted yarn.lock file and place a malicious package into cache under any name/version, bypassing both integrity and hash checks in yarn.lock so that any future installs of that package will install the fake...

LimeSurvey < 3.17.14 Multiple Vulnerabilities

LimeSurvey is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Limesurvey Integrity Check Vulnerability

limesurvey is an open source online questionnaire program with multiple functions such as questionnaire design, modification, release, recovery and statistics. An integrity checking vulnerability exists in Limesurvey versions prior to 3.17.14. An attacker can exploit this vulnerability to run...

CVE-2019-16183

In Limesurvey before 3.17.14, admin users can run an integrity check without proper permissions...

CVE-2019-16183

In Limesurvey before 3.17.14, admin users can run an integrity check without proper permissions...

Design/Logic Flaw

In Limesurvey before 3.17.14, admin users can run an integrity check without proper permissions...

CVE-2019-16183

In Limesurvey before 3.17.14, admin users can run an integrity check without proper permissions...

CVE-2019-16183

LimeSurvey vulnerability CVE-2019-16183 affects LimeSurvey prior to 3.17.14. The issue is an improper permissions check that allows admin users to run an integrity check without proper privileges. Affected product: LimeSurvey (PHP-based web app); vulnerable component: integrity check flow; root c...

CVE-2019-12804

In Hunesion i-oneNet version 3.0.7 3.0.53 and 4.0.4 4.0.16, due to the lack of update file integrity checking in the upgrade process, an attacker can craft malicious file and use it as an update...

CVE-2019-12804 Hunesion i-oneNet Missing Support for Integrity Check vulnerability

In Hunesion i-oneNet version 3.0.7 3.0.53 and 4.0.4 4.0.16, due to the lack of update file integrity checking in the upgrade process, an attacker can craft malicious file and use it as an update...

The vulnerability of the Windows operating system, related to the improper functioning of the NTLM MIC (Message Integrity Check) security mechanism, allows a hacker to compromise the security functions of the NTLM mechanism.

The vulnerability of the Windows operating system is related to the improper functioning of the NTLM MIC Message Integrity Check security mechanism. Exploiting this vulnerability allows a malicious actor to compromise the security functions of the NTLM mechanism from a remote location...

CVE-2019-1040

A tampering vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to successfully bypass the NTLM MIC Message Integrity Check protection. An attacker who successfully exploited this vulnerability could gain the ability to downgrade NTLM security features. To exploit...

UBUNTU-CVE-2019-10155

The Libreswan Project has found a vulnerability in the processing of IKEv1 informational exchange packets which are encrypted and integrity protected using the established IKE SA encryption and integrity keys, but as a receiver, the integrity check value was not verified. This issue affects...

CVE-2019-10155

The Libreswan Project has found a vulnerability in the processing of IKEv1 informational exchange packets which are encrypted and integrity protected using the established IKE SA encryption and integrity keys, but as a receiver, the integrity check value was not verified. This issue affects...

CVE-2018-7849

A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum and Modicon Premium which could cause a possible Denial of Service due to improper data integrity check when sending files the controller over Modbus...

CVE-2018-7849

The CVE-2018-7849 vulnerability affects Schneider Electric Modicon M580, M340, Quantum and Premium PLCs. A CWE-248 Uncaught Exception could trigger a Denial of Service due to improper data integrity checks when sending files via Modbus. Affected firmware observed in Modicon M580 SV2.70 (e.g., BME...

PT-2019-2474

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description A tampering vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to successfully bypass the NTLM MIC Message Integrity Check protection. This...