CVE-2024-38886

An issue in Horizon Business Services Inc. Caterease 16.0.1.1663 through 24.0.1.2405 and possibly later versions, allows a remote attacker to perform a Traffic Injection attack due to improper verification of the source of a communication channel...

The vulnerability of the mechanism for transmitting information about ICMP Redirects for TP-LINK TL-7DR5130 wireless router microprogramming systems allows a hacker to intercept traffic.

The vulnerability of the mechanism for transmitting information about ICMP Redirect for TP-LINK TL-7DR5130 wireless router microprogramming systems is related to insufficient verification of the source of the communication channel. Exploiting this vulnerability allows a malicious actor to interce...

The vulnerability of the Palo Alto Networks Cortex XDR Agent, a tool for network traffic analysis, network detection, and response, stems from a lack of a mechanism for verifying the source of information. This allows attackers to compromise the integrity and accessibility of the system.

The vulnerability of the Palo Alto Networks Cortex XDR Agent, a tool for network traffic analysis, network detection, and response, is related to a lack of mechanisms for verifying the source of information. Exploiting this vulnerability could allow attackers to compromise the integrity and...

The vulnerability of microprogrammed communication module software for SIMATIC CP 343-1, SIMATIC CP 343-1 Lean, SIPLUS NET CP 343-1, and SIPLUS NET CP 343-1 Lean arises from insufficient verification of the communication channel source. This vulnerability allows attackers to trigger service failures.

The vulnerability of microprogrammed communication module software for SIMATIC CP 343-1, SIMATIC CP 343-1 Lean, SIPLUS NET CP 343-1, and SIPLUS NET CP 343-1 Lean is related to insufficient verification of the communication channel source. Exploiting this vulnerability can allow a malicious actor ...

The vulnerability of the MeshCentral device remote management system, related to deficiencies in the data source verification mechanism, allows a hacker to execute arbitrary code.

The vulnerability of the MeshCentral device management system is related to deficiencies in the mechanism for verifying the source of data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the ImageBuild() function in the software for creating containerized systems called Moby allows a attacker to execute a cache poisoning attack.

The vulnerability of the ImageBuild function in the Moby containerized system creation software is related to a lack of mechanisms for verifying the data source during the processing of endpoints. Exploiting this vulnerability could allow an attacker to execute a cache poisoning attack...

The vulnerability of the LDAP protocol implementation in Mastodon’s web application for deploying distributed social networks allows a hacker to bypass the authentication process.

The vulnerability of the LDAP protocol implementation in Mastodon’s web application for deploying distributed social networks is related to the lack of a mechanism for verifying the source of data. Exploiting this vulnerability allows a malicious actor to bypass the authentication process...

The vulnerability of the Payments component in Microsoft Edge and Google Chrome browsers allows attackers to bypass security restrictions.

The vulnerability of the Payments component in Microsoft Edge and Google Chrome is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability can allow an attacker to bypass security restrictions remotely...

The vulnerability of Juniper Networks JunOS Evolved router models from the PTX10001, PTX10004, PTX10008, and PTX10016 series lies in the data source verification mechanism’s deficiencies. This allows attackers to trigger a system reboot.

The vulnerability of Juniper Networks JunOS Evolved router models series PTX10001, PTX10004, PTX10008, and PTX10016 lies in defects in the mechanism for verifying data sources during MAC address processing. Exploiting this vulnerability allows a malicious actor to trigger a system reboot...

The vulnerability of Juniper Networks JunOS Evolved router series PTX10003 operating systems, related to deficiencies in the data source verification mechanism, allows attackers to circumvent security restrictions and cause service failures.

The vulnerability of Juniper Networks JunOS Evolved router series, PTX10003, is related to deficiencies in the mechanism for verifying data sources during MAC address processing. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and cause service failures...

The vulnerability of the Apache Maven framework, which allows a malicious actor to gain unauthorized access to protected information remotely.

The vulnerability of the Apache Maven framework is related to deficiencies in the mechanism for verifying data sources. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability in web browsers Firefox, Firefox ESR, and the email client Thunderbird relates to a deficiency in the mechanism for verifying the source of data. This allows an attacker to compromise the integrity of the data.

The vulnerabilities of web browsers Firefox, Firefox ESR, and the email client Thunderbird are related to a lack of mechanisms for verifying the source of data. Exploiting these vulnerabilities can allow an attacker to compromise the integrity of data...

The vulnerabilities of the FactoryTalk Policy Manager and FactoryTalk System Services software allow attackers to disclose protected information.

The vulnerabilities of the FactoryTalk Policy Manager and FactoryTalk System Services software are related to deficiencies in the data source verification mechanism. Exploitation of these vulnerabilities can allow attackers to disclose protected information...

PT-2022-28135 · Unknown · Usememos/Memos

Name of the Vulnerable Software and Affected Versions: usememos/memos versions prior to 0.9.1 Description: The issue is related to improper verification of the source of a communication channel in the GitHub repository usememos/memos. Recommendations: For versions prior to 0.9.1, update to versio...

Input validation

Improper Verification of Source of a Communication Channel in GitHub repository usememos/memos prior to 0.9.1...

PT-2022-28101 · Unknown · Usememos/Memos

Name of the Vulnerable Software and Affected Versions: usememos/memos versions prior to 0.9.1 Description: The issue concerns an improper verification of the source of a communication channel. This affects the usememos/memos GitHub repository. There is no information provided about the estimated...

The vulnerability of the WebDriver driver for the Mozilla Firefox browser allows a hacker to disclose protected information and execute arbitrary code.

The vulnerability of the WebDriver driver for the Mozilla Firefox browser is related to a lack of mechanisms for verifying the data source. Exploiting this vulnerability allows a malicious actor, operating remotely, to circumvent established security restrictions, disclose sensitive information,...

The vulnerability of the Mozilla Firefox browser, related to a lack of mechanism for verifying the source, allows attackers to gain unauthorized access to protected information.

The vulnerability of the Mozilla Firefox browser is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Mozilla Firefox browser, related to a lack of mechanism for verifying data sources, allows attackers to perform spear-phishing attacks.

The vulnerability of the Mozilla Firefox browser is related to a lack of mechanisms for verifying the source of data. Exploiting this vulnerability allows an attacker to perform spear-phishing attacks remotely...

CVE-2022-27491

Fortinet FortiOS IPS engine flaws allow a remote, unauthenticated attacker to trigger sending of a crafted HTML “blocked page” to a victim via TCP, potentially flooding the target. Affected FortiOS IPS engine versions span 7.201–7.214, 7.001–7.113, 6.001–6.121, 5.001–5.258 and pre-4.086. The issu...