Lucene search
+L

15192 matches found

RedhatCVE
RedhatCVE
added 2025/12/10 2:32 a.m.10 views

CVE-2025-66568

The ruby-saml library implements the client side of an SAML authorization. Versions up to and including 1.12.4, are vulnerable to authentication bypass through the libxml2 canonicalization process used by Nokogiri for document transformation, which allows an attacker to execute a Signature Wrappi...

9.3CVSS7AI score0.00236EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2025/12/10 12:00 a.m.10 views

Ivanti Endpoint Manager HIIDriver Improper Verification of Cryptographic Signature Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Endpoint Manager. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. Alternatively, no user interaction is...

7.8CVSS6.7AI score0.00563EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/12/10 12:00 a.m.10 views

PT-2025-50544

Name of the Vulnerable Software and Affected Versions Aqara Hub versions 4.1.9 0027, 4.3.6 0027, and 4.3.6 0025 Description The Aqara Hub firmware update process has flaws that could allow attackers to install malicious firmware without proper verification. The device does not validate firmware...

8.1CVSS6.5AI score0.00228EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/12/10 12:00 a.m.12 views

Aqara多款产品 安全漏洞

Aqara Camera Hub G3 and others are a smart surveillance camera from Aqara USA. A security vulnerability exists in various Aqara products that stems from a failure to verify signatures during firmware updates, which could lead to the installation of malicious firmware. The following products and...

8.1CVSS6.6AI score0.00228EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2025/12/10 12:00 a.m.33 views

CVE-2025-65295

Multiple vulnerabilities in Aqara Hub firmware update process in the Camera Hub G3 4.1.90027, Hub M2 4.3.60027, and Hub M3 4.3.60025 devices, allow attackers to install malicious firmware without proper verification. The device fails to validate firmware signatures during updates, uses outdated...

0.00228EPSS
SaveExploits1References1
EUVD
EUVD
added 2025/12/09 9:31 p.m.9 views

EUVD-2025-202309

Acrobat Reader versions 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier are affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass...

3.3CVSS6.2AI score0.00435EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/12/09 9:31 p.m.10 views

EUVD-2025-202308

Acrobat Reader versions 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier are affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to gain limited...

3.3CVSS6.3AI score0.00426EPSS
SaveExploits0References2
OSV
OSV
added 2025/12/09 9:15 p.m.6 views

CVE-2025-64786

Acrobat Reader versions 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier are affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to gain limited...

4CVSS5.8AI score0.00426EPSS
SaveExploits0References1
OSV
OSV
added 2025/12/09 9:15 p.m.7 views

CVE-2025-64787

Acrobat Reader versions 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier are affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass...

4CVSS5.8AI score0.00435EPSS
SaveExploits0References1
NVD
NVD
added 2025/12/09 9:15 p.m.10 views

CVE-2025-64786

Acrobat Reader versions 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier are affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to gain limited...

3.3CVSS0.00426EPSS
SaveExploits0References1
NVD
NVD
added 2025/12/09 9:15 p.m.11 views

CVE-2025-64787

Acrobat Reader versions 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier are affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass...

3.3CVSS0.00435EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/12/09 8:21 p.m.50 views

CVE-2025-64786 Acrobat Reader | Improper Verification of Cryptographic Signature (CWE-347)

Acrobat Reader versions 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier are affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to gain limited...

3.3CVSS0.00426EPSS
SaveExploits0References1
CVE
CVE
added 2025/12/09 8:21 p.m.46 views

CVE-2025-64786

CVE-2025-64786 affects Adobe Acrobat Reader (versions including 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier). The issue is Improper Verification of Cryptographic Signature, resulting in a Security feature bypass with limited unauthorized write access. Exploita...

3.3CVSS5.3AI score0.00426EPSS
SaveExploits0References1Affected Software4
ATTACKERKB
ATTACKERKB
added 2025/12/09 8:21 p.m.12 views

CVE-2025-64786

Acrobat Reader versions 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier are affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to gain limited...

4CVSS5.3AI score0.00426EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/12/09 8:21 p.m.5 views

CVE-2025-64786 Acrobat Reader | Improper Verification of Cryptographic Signature (CWE-347)

Acrobat Reader versions 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier are affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to gain limited...

3.3CVSS5.3AI score0.00426EPSS
SaveExploits0References1
CVE
CVE
added 2025/12/09 8:21 p.m.62 views

CVE-2025-64787

CVE-2025-64787 affects Adobe Acrobat/Reader on multiple versions (Reader: 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier) due to an Improper Verification of Cryptographic Signature (CWE-347) vulnerability that could bypass security features and grant limited unau...

3.3CVSS5.3AI score0.00435EPSS
SaveExploits0References1Affected Software4
ATTACKERKB
ATTACKERKB
added 2025/12/09 8:21 p.m.18 views

CVE-2025-64787

Acrobat Reader versions 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier are affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass...

4CVSS5.3AI score0.00435EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/12/09 8:21 p.m.5 views

CVE-2025-64787 Acrobat Reader | Improper Verification of Cryptographic Signature (CWE-347)

Acrobat Reader versions 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier are affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass...

3.3CVSS5.3AI score0.00435EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/12/09 8:21 p.m.48 views

CVE-2025-64787 Acrobat Reader | Improper Verification of Cryptographic Signature (CWE-347)

Acrobat Reader versions 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier are affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass...

3.3CVSS0.00435EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/09 6:30 p.m.13 views

EUVD-2025-202191

An improper verification of cryptographic signature vulnerability in Fortinet FortiWeb 8.0.0, FortiWeb 7.6.0 through 7.6.4, FortiWeb 7.4.0 through 7.4.9 may allow an unauthenticated attacker to bypass the FortiCloud SSO login authentication via a crafted SAML response message...

9.8CVSS6.6AI score0.29546EPSS
SaveExploits1References2
Rows per page
Query Builder