Improper Verification of Source of a Communication Channel

Overview Affected versions of this package are vulnerable to Improper Verification of Source of a Communication Channel through the localtrusted authentication middleware in server/src/middleware/auth.ts and the process adapter in server/src/adapters/process/execute.ts. An attacker can execute...

The vulnerability of the Neo4j Cypher MCP server, related to the data source verification error, allows attackers to bypass existing security restrictions and execute arbitrary code.

The vulnerability of the Neo4j Cypher MCP server is related to a data source verification error. Exploiting this vulnerability allows an attacker to bypass existing security restrictions and execute arbitrary code...

Vulnerability of the Networking component: The JAR web browser Firefox and the email client Thunderbird, which allow attackers to access and compromise confidential data.

Vulnerability of the Networking component: The JAR web browser Firefox and the email client Thunderbird are vulnerable due to a lack of source verification mechanism. Exploiting this vulnerability allows an attacker to gain access to confidential data and compromise its integrity...

The vulnerability of the Endpoint Manager client program and the Detection Agent for the UEM system’s management, monitoring, and security solutions allows a perpetrator to execute arbitrary code and gain full control over the system.

The vulnerability of the Endpoint Manager client program and the Detection Agent for the UEM system’s centralized management, monitoring, and security solutions, such as LANSCOPE Endpoint Manager On-Premise Edition, is related to insufficient verification of the communication channel source...

The vulnerability of the Google Chrome browser’s Navigation function allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Google Chrome browser’s Navigation function is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

Siemens Interniche IP-Stack Improper Verification of Source of a Communication Channel (CVE-2025-40820)

Multiple Industrial products are affected by a vulnerability in the Interniche IP-Stack. The affected products do not properly enforce TCP sequence number validation in specific scenarios but accept values within a broad range. This could allow an unauthenticated remote attacker e.g. to interfere...

Improper Verification of Source of a Communication Channel

Overview @auth/core is an Authentication for the Web. Affected versions of this package are vulnerable to Improper Verification of Source of a Communication Channel via improper binding of OAuth check cookies to the provider that created them. An attacker can gain unauthorized access to a victim'...

ROS-20260721-73-0041

The vulnerability of the Autofill function in Google Chrome and Microsoft Edge browsers is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability can allow attackers to disclose sensitive information remotely...

ROS-20260721-73-0034

The vulnerability of the Media components in Google Chrome and Microsoft Edge is related to a lack of mechanisms for verifying the source of these components. Exploiting this vulnerability could allow an attacker to bypass security restrictions remotely...

ROS-20260716-73-0002

The vulnerability in Chromium is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability can allow an attacker who operates remotely to gain unauthorized access to protected information...

ROS-20260713-73-0011

The vulnerability is related to a lack of mechanisms for verifying the source of information. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...

EUVD-2026-41411

Use of Default Cryptographic Key vulnerability in Erlang/OTP ssl DTLS server allows predictable DTLS cookie computation during the startup window, enabling source address verification bypass. On DTLS server startup, dtlsserverconnection:initialhello/3 initializes previouscookiesecret to the empty...

The vulnerability of the Password component in browsers Google Chrome and Microsoft Edge allows a hacker to bypass security restrictions.

The vulnerability of the Password component in browsers Google Chrome and Microsoft Edge is related to deficiencies in the data source verification mechanism. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions remotely...

The vulnerability of Google Chrome’s Password Manager component allows a hacker to gain unauthorized access to protected information.

The vulnerability of Google Chrome’s Password Manager component is related to a lack of mechanisms for verifying the source of data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information through a specially created HTML pag...

The vulnerability of the SAP Business Objects Business Intelligence Platform lies in its data source confirmation mechanism’s deficiencies, which allows attackers to replace the sender of an email message.

The vulnerability of the SAP Business Objects Business Intelligence Platform is related to deficiencies in the mechanism for verifying data sources. Exploiting this vulnerability could allow a malicious actor to replace the sender of an email message...

The vulnerability of Google Chrome browsers on iOS operating systems relates to a lack of mechanisms for verifying the source of access. This allows attackers to gain unauthorized access to protected information.

The vulnerability of Google Chrome browser on iOS operating systems is related to a lack of mechanisms for verifying the source of the request. Exploiting this vulnerability can allow an attacker, working remotely, to gain unauthorized access to protected information...

Improper Verification of Source of a Communication Channel

Overview Affected versions of this package are vulnerable to Improper Verification of Source of a Communication Channel via improper validation of cross-origin messages in the window message listeners. An attacker can hijack authenticated editing sessions by sending crafted postMessage events fro...

Improper Verification of Source of a Communication Channel

Overview @nuxt/webpack-builder is a Webpack bundler for Nuxt Affected versions of this package are vulnerable to Improper Verification of Source of a Communication Channel through the isSameOriginRequest check in the dev-server request handling path. An attacker can send a browser-originated...

The vulnerability of the privacy protection function of Fenced Frames in Microsoft Edge and Google Chrome browsers allows attackers to bypass existing security mechanisms.

The vulnerability of the confidentiality function of Fenced Frames in Microsoft Edge and Google Chrome is related to a lack of verification mechanism for the source of the data. Exploiting this vulnerability can allow attackers to bypass existing security measures remotely...

CVE-2026-40434

Anviz CrossChex Standard lacks source verification in the client/server channel, enabling TCP packet injection by an attacker on the same network to alter or disrupt application traffic...