Design/Logic Flaw

User keystore signature is ignored in boot and can lead to bypass boot image signature verification in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile in MDM9607, MDM9640, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 712 / SD 710 / SD 670, SD 845 / SD 850, SDM660...

The vulnerability of the SymCrypt library in the Windows operating system, related to errors in digital signature verification, allows a perpetrator to trigger a service failure.

The vulnerability of the SymCrypt library in the Windows operating system is related to errors in digitized signatures. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

ABB HMI Missing Signature Verification

XL-19-005 - ABB HMI Absence of Signature Verification Vulnerability ======================================================================== Identifiers ----------- XL-19-005 CVE-2019-7229 ABBVU-IAMF-1902003 ABBVU-IAMF-1902012 CVSS Score ---------- 8.3 AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H Affected...

Man-in-the-Middle (MitM)

openpgp is vulnerable to man-in-the-middle MitM attacks. The attacks exist because it does not verify the validity of primary and subkey packets before signature verification, defeating the purpose of signature verification and compromising the traffic between legit users...

Cisco MDS 9700 Series Multilayer Directors and Nexus 7000/7700 Series Switches Software Patch Signature Verification Vulnerability

According to its self-reported version, Cisco NX-OS Software is affected by a vulnerability in the Image Signature Verification feature of Cisco NX-OS Software could allow an authenticated, local attacker with administrator-level credentials to install a malicious software patch on an affected...

Cisco Nexus 3000 Series and 9000 Series Switches in NX-OS Mode CLI Command Software Image Signature Verification Vulnerability

According to its self-reported version, Cisco NX-OS Software isa ffected by a vulnerability in the Image Signature Verification feature used in an NX-OS CLI command in Cisco Nexus 3000 Series and 9000 Series Switches could allow an authenticated, local attacker with administrator-level credential...

Signature Verification Bypass in jwt-simple

Versions of jwt-simple prior to 0.5.3 are vulnerable to Signature Verification Bypass. If no algorithm is specified in the decode function, the packages uses the algorithm in the JWT to decode tokens. This allows an attacker to create a HS256 symmetric algorithm JWT with the server's public key a...

GHSA-8V5F-HP78-JGXQ Signature Verification Bypass in jwt-simple

Versions of jwt-simple prior to 0.5.3 are vulnerable to Signature Verification Bypass. If no algorithm is specified in the decode function, the packages uses the algorithm in the JWT to decode tokens. This allows an attacker to create a HS256 symmetric algorithm JWT with the server's public key a...

The vulnerability of the NX-OS network operating system, related to incorrect verification of the cryptographic signature, allows a perpetrator to install malware onto a vulnerable device.

The vulnerability of the NX-OS network operating system is related to improper verification of the cryptographic signature. Exploiting this vulnerability could allow a hacker to install malware on a vulnerable device...

The vulnerability of the NX-OS network operating system, related to incorrect verification of the cryptographic signature, allows a perpetrator to install malicious software on a vulnerable device.

The vulnerability of the NX-OS network operating system is related to incorrect verification of the cryptographic signature. Exploiting this vulnerability could allow a hacker to install malware on a vulnerable device...

The vulnerability of the command-line interface implementation of the network operating system NX-OS allows a attacker to install malware onto a vulnerable device.

The vulnerability of the command-line interface implementation of the NX-OS network operating system exists due to incorrect verification of the cryptographic signature. Exploiting this vulnerability may allow a perpetrator to install malware onto a vulnerable device...

The vulnerability of the NX-OS network operating system, related to incorrect verification of the cryptographic signature, allows a perpetrator to install malicious software on a vulnerable device.

The vulnerability of the NX-OS network operating system is related to incorrect verification of the cryptographic signature. Exploiting this vulnerability could allow a hacker to install malware on a vulnerable device...

Input validation

A vulnerability in the BIOS upgrade utility of Cisco Unified Computing System UCS C-Series Rack Servers could allow an authenticated, local attacker to install compromised BIOS firmware on an affected device. The vulnerability is due to insufficient validation of the firmware image file. An...

CVE-2019-1880

A vulnerability in the BIOS upgrade utility of Cisco Unified Computing System UCS C-Series Rack Servers could allow an authenticated, local attacker to install compromised BIOS firmware on an affected device. The vulnerability is due to insufficient validation of the firmware image file. An...

Cisco Unified Computing System BIOS Signature Bypass Vulnerability

A vulnerability in the BIOS upgrade utility of Cisco Unified Computing System UCS C-Series Rack Servers could allow an authenticated, local attacker to install compromised BIOS firmware on an affected device. The vulnerability is due to insufficient validation of the firmware image file. An...

CVE-2018-11967

Signature verification of the skel library could potentially be disabled as the memory region on the remote subsystem in which the library is loaded is allocated from userspace currently in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industria...

Design/Logic Flaw

Signature verification of the skel library could potentially be disabled as the memory region on the remote subsystem in which the library is loaded is allocated from userspace currently in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industria...

CVE-2018-11967

Signature verification of the skel library could potentially be disabled as the memory region on the remote subsystem in which the library is loaded is allocated from userspace currently in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industria...

CVE-2019-8338

The signature verification routine in the Airmail GPG-PGP Plugin, versions 1.0 9 and earlier, does not verify the status of the signature at all, which allows remote attackers to spoof arbitrary email signatures by crafting a signed email with an invalid signature. Also, it does not verify the...

CVE-2019-8338

The signature verification routine in the Airmail GPG-PGP Plugin, versions 1.0 9 and earlier, does not verify the status of the signature at all, which allows remote attackers to spoof arbitrary email signatures by crafting a signed email with an invalid signature. Also, it does not verify the...