18883 matches found
CVE-2026-108971 D-Link DCS-930L Emergency HTTP Recovery Server bootloader_region.bin mpfd_decode signature verification
A flaw has been found in D-Link DCS-930L B1.08B4. This impacts the function mpfddecode of the file bootloaderregion.bin of the component Emergency HTTP Recovery Server. Executing a manipulation of the argument firmware can lead to improper verification of cryptographic signature. The attack may b...
CVE-2026-108971
A flaw exists in the D-Link DCS-930L (firmware version B1.08B4 ) within the Emergency HTTP Recovery Server component. Specifically, the mpfd_decode function of the bootloader_region.bin file fails to properly verify cryptographic signatures when the firmware argument is manipulated. This vulnerab...
CVE-2026-89112
The admin API endpoint used to retrieve CLA signature records does not consistently enforce the required authorization checks when the target organisation is specified using an organisation ID.An authenticated user with limited privileges could potentially access CLA signature records containing...
EUVD-2026-98194
The admin API endpoint used to retrieve CLA signature records does not consistently enforce the required authorization checks when the target organisation is specified using an organisation ID.An authenticated user with limited privileges could potentially access CLA signature records containing...
CVE-2026-70071: Improper Verification of Cryptographic Signature
Improper verification of cryptographic signature in DNS Server allows an authorized attacker to perform tampering locally...
PT-2026-112592
Name of the Vulnerable Software and Affected Versions Windows Update Stack affected versions not specified Description Improper verification of cryptographic signatures allows an authorized attacker to perform local spoofing, which can affect the system. Recommendations At the moment, there is no...
PT-2026-112881
Improper verification of cryptographic signature in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...
Microsoft Windows: CVE-2026-70071: Role: DNS Server Tampering Vulnerability
Improper verification of cryptographic signature in DNS Server allows an authorized attacker to perform tampering locally...
CVE-2026-89112: Missing Authorization
The admin API endpoint used to retrieve CLA signature records does not consistently enforce the required authorization checks when the target organisation is specified using an organisation ID.An authenticated user with limited privileges could potentially access CLA signature records containing...
CVE-2026-101294: Missing Cryptographic Step
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 and IBM WebSphere Application Server 8.5, and 9.0 could allow a remote attacker to bypass cryptographic signature verification due to improper verification of cryptographic signature...
CVE-2026-108971: Improper Verification of Cryptographic Signature
A flaw has been found in D-Link DCS-930L B1.08B4. This impacts the function mpfddecode of the file bootloaderregion.bin of the component Emergency HTTP Recovery Server. Executing a manipulation of the argument firmware can lead to improper verification of cryptographic signature. The attack may b...
CVE-2026-85818: Improper Verification of Cryptographic Signature
Improper verification of cryptographic signature in Windows Schannel allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-65197: Improper Verification of Cryptographic Signature
H3C HDM Family-A verifies the RSA signature of a firmware image against a public key it reads from the mutable file /conf/public.pem. That file is writable by an authenticated Redfish client through the UpdateService.UploadSignKey action, which stores the uploaded body verbatim after validating...
PT-2026-113229
Name of the Vulnerable Software and Affected Versions Windows Audio Service affected versions not specified Description Improper verification of cryptographic signatures in the Windows Audio Service allows an authorized attacker to elevate privileges locally. Recommendations At the moment, there ...
CVE-2026-97799: Improper Verification of Cryptographic Signature
Improper verification of cryptographic signature in Windows Audio Service allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-97799: Windows Audio Service Elevation of Privilege Vulnerability
Improper verification of cryptographic signature in Windows Audio Service allows an authorized attacker to elevate privileges locally...
PT-2026-113349
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 and IBM WebSphere Application Server 8.5, and 9.0 could allow a remote attacker to bypass cryptographic signature verification due to improper verification of cryptographic signature...
CVE-2026-69650: Improper Verification of Cryptographic Signature
Improper verification of cryptographic signature in Windows Key Distribution Center allows an authorized attacker to elevate privileges locally...
PT-2026-111139
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description An authenticated user with limited privileges can access CLA signature records containing contributor information for organizations they are not authorized to...
