The vulnerability of the Jenkins Security Inspector Plugin lies in the insufficient validation of the authenticity of POST requests, allowing attackers to carry out CSRF attacks.

The vulnerability of the Jenkins Security Inspector Plugin is related to insufficient verification of the authenticity of POST requests. Exploiting this vulnerability allows a malicious actor to execute a CSRF attack remotely...

The vulnerability of the SAP Business Objects Business Intelligence Platform, related to insufficient verification of data authenticity, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the SAP Business Objects Business Intelligence Platform is related to insufficient verification of data authenticity. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to protected information...

Design/Logic Flaw

Velneo vClient on its 28.1.3 version, does not correctly check the certificate of authenticity by default. This could allow an attacker that has access to the network to perform a MITM attack in order to obtain the user´s credentials...

The vulnerability of the Controller File System Handler component of the Jenkins OpenShift Deployer Plugin allows a perpetrator to perform arbitrary actions on a vulnerable device.

The vulnerability of the Controller File System Handler component in the Jenkins OpenShift Deployer Plugin is related to insufficient validation of the authenticity of executed requests. Exploiting this vulnerability allows a malicious actor to perform arbitrary actions on the vulnerable device b...

The vulnerability of the “Private Browsing” function in the Mozilla Firefox browser, which allows a hacker to trigger a service failure.

The vulnerability of the “Private Browsing” function in the Mozilla Firefox browser is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow an attacker to induce a service failure...

The vulnerability of microprogrammed software in STARDOM FCN/FCJ programmable logic controllers is related to insufficient verification of data authenticity, allowing an intruder to gain full control over the device.

The vulnerability of microprogrammed software in STARDOM FCN/FCJ programmable logic controllers is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow an attacker operating remotely to gain full control over the device...

CVE-2022-2789

Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulnerable to CWE-345 Insufficient Verification of Data Authenticity, and can display logic that is different than the compiled logic...

CVE-2022-2789

Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulnerable to CWE-345 Insufficient Verification of Data Authenticity, and can display logic that is different than the compiled logic...

Design/Logic Flaw

Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulnerable to CWE-345 Insufficient Verification of Data Authenticity, and can display logic that is different than the compiled logic...

CVE-2022-2789

CVE-2022-2789 affects Emerson Proficy Machine Edition (engineering workstation) versions 9.00 and earlier (commonly cited as 9.00 and prior; some sources reference 9.80 and prior). Root cause: insufficient verification of data authenticity, allowing the PLC logic display to differ from the compil...

CVE-2022-2789

Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulnerable to CWE-345 Insufficient Verification of Data Authenticity, and can display logic that is different than the compiled logic...

CVE-2022-2789

Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulnerable to CWE-345 Insufficient Verification of Data Authenticity, and can display logic that is different than the compiled logic...

多款Emerson产品数据伪造问题漏洞

Emerson ROC800 and others are products of Emerson Corporation, U.S.A. Emerson ROC800 is a series of remote operation controllers.Emerson ROC800L is a series of remote operation controllers.Emerson DL8000 is a series of electronic preset controllers. A security vulnerability exists in the Emerson...

The vulnerability of the AAD Handler component in the Nimbus JOSE + JWT Java library, due to insufficient data authentication checks, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the AAD Handler component in the Nimbus JOSE + JWT Java library is related to insufficient verification of data authenticity. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information by uploading...

Design/Logic Flaw

Honeywell Experion PKS Safety Manager SM and FSC through 2022-05-06 has Insufficient Verification of Data Authenticity. According to FSCT-2022-0053, there is a Honeywell Experion PKS Safety Manager insufficient logic security controls issue. The affected components are characterized as: Honeywell...

CVE-2022-30315

CVE-2022-30315 affects Honeywell Experion PKS Safety Manager (SM and FSC) through 2022-05-06. The vulnerability stems from the unauthenticated Safety Builder protocol used to download control logic (block-by-block FLD code) to the CPU module, with no cryptographic authentication or memory protect...

CVE-2022-30315

Honeywell Experion PKS Safety Manager SM and FSC through 2022-05-06 has Insufficient Verification of Data Authenticity. According to FSCT-2022-0053, there is a Honeywell Experion PKS Safety Manager insufficient logic security controls issue. The affected components are characterized as: Honeywell...

CVE-2022-30316

Honeywell Experion PKS Safety Manager 5.02 has Insufficient Verification of Data Authenticity. According to FSCT-2022-0054, there is a Honeywell Experion PKS Safety Manager unauthenticated firmware update issue. The affected components are characterized as: Firmware update functionality. The...

CVE-2022-30316

Honeywell Experion PKS Safety Manager 5.02 is affected by CVE-2022-30316 due to Insufficient Verification of Data Authenticity in the firmware update flow. The flaw stems from unauthenticated firmware images and dependencies on insecure checksums, with firmware images unsigned. A serial interface...

Citrix ADC and Citrix Gateway Security Bulletin for CVE-2022-27509

A vulnerability has been discovered in Citrix ADC and Citrix Gateway which enables an attacker to create a specially crafted URL that redirects to a malicious website. This vulnerability has the following identifier: CVE-ID| Description| CWE| Pre-conditions ---|---|---|--- CVE-2022-27509|...