Lucene search
+L

1535 matches found

BDU FSTEC
BDU FSTEC
•added 2024/07/24 12:00 a.m.•18 views

Zoom Insufficient Verification Privilege Bypass

The vulnerability of Zoom, a video conferencing software, is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow attackers to enhance their privileges...

6.7CVSS5.5AI score0.001EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/07/23 12:00 a.m.•43 views

ClusterLabs Booth’s high-Data Compromise ClusterLabs Booth’s high-

The vulnerability of the gcrymdgetalgodlen function in ClusterLabs Booth’s high-availability cluster management and monitoring software is related to insufficient verification of data authenticity. Exploiting this vulnerability could allow an attacker operating remotely to generate invalid HMACs...

5.9CVSS6.5AI score0.0053EPSS
SaveExploits0References13Affected Software8
Tenable Nessus
Tenable Nessus
•added 2024/07/11 12:00 a.m.•27 views

Omron NJ Series CPU Unit Insufficient Verification of Data Authenticity (CVE-2024-33687)

Insufficient verification of data authenticity issue exists in NJ Series CPU Unit all versions and NX Series CPU Unit all versions. If a user program in the affected product is altered, the product may not be able to detect the alteration. This plugin only works with Tenable.ot. Please visit...

7.5CVSS5.3AI score0.00193EPSS
SaveExploits0References3
Veracode
Veracode
•added 2024/07/08 7:56 a.m.•42 views

Insufficient Verification Of Data Authenticity

certifi is vulnerable to Insufficient Verification of Data Authenticity. The vulnerability is due to its historical inclusion of root certificates from GLOBALTRUST for SSL certificate validation, after which these certificates were removed due to ongoing compliance issues identified during an...

7.5CVSS6.6AI score0.01049EPSS
SaveExploits0References5Affected Software1
NVD
NVD
•added 2024/06/24 3:15 p.m.•40 views

CVE-2024-33687

Insufficient verification of data authenticity issue exists in NJ Series CPU Unit all versions and NX Series CPU Unit all versions. If a user program in the affected product is altered, the product may not be able to detect the alteration...

7.5CVSS0.00193EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/06/24 3:03 p.m.•54 views

CVE-2024-33687

Insufficient verification of data authenticity issue exists in NJ Series CPU Unit all versions and NX Series CPU Unit all versions. If a user program in the affected product is altered, the product may not be able to detect the alteration...

0.00193EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/06/24 3:03 p.m.•23 views

CVE-2024-33687

Insufficient verification of data authenticity issue exists in NJ Series CPU Unit all versions and NX Series CPU Unit all versions. If a user program in the affected product is altered, the product may not be able to detect the alteration...

6.7AI score0.00193EPSS
SaveExploits0References2
CVE
CVE
•added 2024/06/24 3:03 p.m.•101 views

CVE-2024-33687

CVE-2024-33687 concerns Omron NJ/NX series CPU units (all versions) with an insufficient verification of data authenticity (CWE-345). The issue allows altered user programs to potentially go undetected. Root cause is improper verification of data authenticity in affected devices. Impact notes fro...

7.5CVSS6.4AI score0.00193EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/24 12:00 a.m.•11 views

CVE-2024-33687: Insufficient Verification of Data Authenticity

Insufficient verification of data authenticity issue exists in NJ Series CPU Unit all versions and NX Series CPU Unit all versions. If a user program in the affected product is altered, the product may not be able to detect the alteration...

7.5CVSS5.5AI score0.00193EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/06/24 12:00 a.m.•9 views

PT-2024-25442

Name of the Vulnerable Software and Affected Versions NJ Series CPU Unit all versions NX Series CPU Unit all versions Description The issue is related to insufficient verification of data authenticity. If a user program in the affected product is altered, the product may not be able to detect the...

7.5CVSS5.9AI score0.00193EPSS
SaveExploits0References5
Zero Day Initiative
Zero Day Initiative
•added 2024/06/21 12:00 a.m.•129 views

Sony XAV-AX5500 Insufficient Verification of Data Authenticity Remote Code Execution Vulnerability

This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Sony XAV-AX5500 devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of software updates. The issue results from the lack of...

6.8CVSS7AI score0.01761EPSS
SaveExploits2References1
BDU FSTEC
BDU FSTEC
•added 2024/06/10 12:00 a.m.•22 views

Apex One RCE

The vulnerability of the Apex One NT RealTime Scan antivirus software programs Trend Micro Apex One and Apex One as a Service is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary code...

7.8CVSS7.5AI score0.00354EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/06/10 12:00 a.m.•21 views

Apex One NT Listener Privilege Escalation

The vulnerability of the Apex One NT Listener in anti-virus software from Trend Micro’s Apex One and Apex One as a Service is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary code...

7.8CVSS7.5AI score0.00552EPSS
SaveExploits0References5Affected Software1
CNVD
CNVD
•added 2024/06/05 12:00 a.m.•18 views

Zoom Workplace VDI App for Windows Elevation of Privilege Vulnerability

Zoom Workplace VDI App for Windows is a client application designed for virtualized desktop environments such as Windows 365 Cloud PCs, supporting virtualization platforms such as Azure Virtual Desktop. An elevation of privilege vulnerability exists in the Zoom Workplace VDI App for Windows, whic...

7.8CVSS7.2AI score0.001EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/06/04 5:32 a.m.•74 views

CVE-2024-2382 Authorize.net Payment Gateway For WooCommerce <= 8.0 - Insufficient Verification of Data Authenticity to Unauthenticated Payment Bypass

The Authorize.net Payment Gateway For WooCommerce plugin for WordPress is vulnerable to payment bypass in all versions up to, and including, 8.0. This is due to the plugin not properly verifying the authenticity of the request that updates a orders payment status. This makes it possible for...

5.3CVSS5.2AI score0.00206EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/06/04 5:32 a.m.•21 views

CVE-2024-2382 Authorize.net Payment Gateway For WooCommerce <= 8.0 - Insufficient Verification of Data Authenticity to Unauthenticated Payment Bypass

The Authorize.net Payment Gateway For WooCommerce plugin for WordPress is vulnerable to payment bypass in all versions up to, and including, 8.0. This is due to the plugin not properly verifying the authenticity of the request that updates a orders payment status. This makes it possible for...

5.3CVSS6.9AI score0.00206EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/06/04 5:32 a.m.•19 views

CVE-2024-1718 Claudio Sanches – Checkout Cielo for WooCommerce <= 1.1.0 - Insufficient Verification of Data Authenticity to Order Payment Status Update

The Claudio Sanches – Checkout Cielo for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to insufficient payment validation in the updateorderstatus function in all versions up to, and including, 1.1.0. This makes it possible for unauthenticated attackers t...

5.3CVSS6.9AI score0.002EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2024/06/04 2:12 a.m.•19 views

WordPress Authorize.net Payment Gateway For WooCommerce plugin <= 8.0 - Insufficient Verification of Data Authenticity to Unauthenticated Payment Bypass vulnerability

Insufficient Verification of Data Authenticity to Unauthenticated Payment Bypass vulnerability discovered by Lucio Sá in WordPress Plugin Authorize.net Payment Gateway For WooCommerce versions = 8.0...

5.3CVSS7AI score0.00206EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
•added 2024/06/04 2:10 a.m.•13 views

WordPress Claudio Sanches plugin <= 1.1.0 - Insufficient Verification of Data Authenticity to Order Payment Status Update vulnerability

Insufficient Verification of Data Authenticity to Order Payment Status Update vulnerability discovered by Lucio Sá in WordPress Plugin Claudio Sanches versions = 1.1.0...

5.3CVSS7AI score0.002EPSS
SaveExploits0References1Affected Software1
WPVulnDB
WPVulnDB
•added 2024/06/03 12:00 a.m.•16 views

Claudio Sanches – Checkout Cielo for WooCommerce <= 1.1.0 - Insufficient Verification of Data Authenticity to Order Payment Status Update

Description The Claudio Sanches – Checkout Cielo for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to insufficient payment validation in the updateorderstatus function in all versions up to, and including, 1.1.0. This makes it possible for unauthenticated...

5.3CVSS6.8AI score0.002EPSS
SaveExploits0References1
Rows per page
Query Builder