224 matches found
CVE-2024-43169
IBM Engineering Requirements Management DOORS Next 7.0.2, 7.0.3, and 7.1 could allow a user to download a malicious file without verifying the integrity of the code...
CVE-2024-43169
IBM Engineering Requirements Management DOORS Next 7.0.2, 7.0.3, and 7.1 could allow a user to download a malicious file without verifying the integrity of the code...
CVE-2024-43169 IBM Engineering Requirements Management DOORS Next file download
IBM Engineering Requirements Management DOORS Next 7.0.2, 7.0.3, and 7.1 could allow a user to download a malicious file without verifying the integrity of the code...
Bit Flipping Attack
cookie-encrypter is vulnerable to Bit flipping Attack. The vulnerability is due to the lack of integrity verification, allowing attackers to modify encrypted cookies without detection...
CVE-2024-54126 Insufficient Integrity Verification Vulnerability in TP-Link Archer C50
This vulnerability exists in the TP-Link Archer C50 due to improper signature verification mechanism in the firmware upgrade process at its web interface. An attacker with administrative privileges within the routerβs Wi-Fi range could exploit this vulnerability by uploading and executing malicio...
CVE-2024-54126 Insufficient Integrity Verification Vulnerability in TP-Link Archer C50
This vulnerability exists in the TP-Link Archer C50 due to improper signature verification mechanism in the firmware upgrade process at its web interface. An attacker with administrative privileges within the routerβs Wi-Fi range could exploit this vulnerability by uploading and executing malicio...
ABB Cylon Aspect 3.08.01 File Upload MD5 Checksum Bypass Vulnerability
ABB Cylon Aspect version 3.08.01 has a vulnerability in caldavInstall.php, caldavInstallAgendav.php, and caldavUpload.php files, where the presence of an EXPERTMODE parameter activates a badassMode feature. This mode allows an unauthenticated attacker to bypass MD5 checksum validation during file...
PT-2024-32858 Β· Gradio Β· Gradio
Name of the Vulnerable Software and Affected Versions: Gradio versions prior to 5.0 Description: This issue is related to a lack of integrity check on the downloaded FRP client, which could potentially allow attackers to introduce malicious code. If an attacker gains access to the remote URL from...
PT-2024-22622 Β· Unknown Β· Io-1020 Micro Eld
Name of the Vulnerable Software and Affected Versions: IO-1020 Micro ELD affected versions not specified Description: The issue concerns the execution of code without sufficient verification of its origin or integrity. This could potentially lead to the execution of malicious code, posing a...
ROS-2-1452
2.1452 Apache Ant utility vulnerability CVE-2021-36374, CVE-2021-36373 1. Vulnerability Description: CVE-2021-36374 A vulnerability in the Apache Ant utility, is related to the application improperly controlling internal resource consumption when processing ZIP archives. Exploitation of the...
Secure Hub error: Unable to install app - integrity could not be verified.
When attempting to install an application using Secure Hub, users may encounter the error message: "Unable to install app. This app cannot be installed because its integrity could not be verified."...
SUSE CVE-2023-38552
When the Node.js policy feature checks the integrity of a resource against a trusted manifest, the application can intercept the operation and return a forged checksum to the node's policy implementation, thus effectively disabling the integrity check. Impacts: This vulnerability affects all user...
CVE-2023-4589
Insufficient verification of data authenticity vulnerability in Delinea Secret Server, in its v10.9.000002 version. An attacker with an administrator account could perform software updates without proper integrity verification mechanisms. In this scenario, the update process lacks digital...
Authorization
Insufficient verification of data authenticity vulnerability in Delinea Secret Server, in its v10.9.000002 version. An attacker with an administrator account could perform software updates without proper integrity verification mechanisms. In this scenario, the update process lacks digital...
CVE-2023-4589 Insufficient verification of data authenticity vulnerability in Delinea Secret Server
Insufficient verification of data authenticity vulnerability in Delinea Secret Server, in its v10.9.000002 version. An attacker with an administrator account could perform software updates without proper integrity verification mechanisms. In this scenario, the update process lacks digital...
CVE-2023-4589 Insufficient verification of data authenticity vulnerability in Delinea Secret Server
Insufficient verification of data authenticity vulnerability in Delinea Secret Server, in its v10.9.000002 version. An attacker with an administrator account could perform software updates without proper integrity verification mechanisms. In this scenario, the update process lacks digital...
CVE-2023-4589
Delinea Secret Server 10.9.000002 is affected by an insufficient verification of data authenticity vulnerability in its update mechanism. The root cause is that software updates lack digital signatures and do not validate update package integrity, allowing an attacker with administrator privilege...
CVE-2023-37250
Unity Parsec has a TOCTOU race condition that permits local attackers to escalate privileges to SYSTEM if Parsec was installed in "Per User" mode. The application intentionally launches DLLs from a user-owned directory but intended to always perform integrity verification of those DLLs. This...
CVE-2023-37250
Unity Parsec has a TOCTOU race condition that permits local attackers to escalate privileges to SYSTEM if Parsec was installed in "Per User" mode. The application intentionally launches DLLs from a user-owned directory but intended to always perform integrity verification of those DLLs. This...
The vulnerability of the DigiExam online test control software lies in the lack of verification data for integrity checks. This allows a perpetrator to gain access to personal data and account information on shared computers.
The vulnerability of the DigiExam online test control software lies in the lack of control data for verifying integrity. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to personal data and account information on shared computers...