CVE-2023-36541

Insufficient verification of data authenticity in Zoom Desktop Client for Windows before 5.14.5 may allow an authenticated user to enable an escalation of privilege via network access...

Hive Pro Achieves ISO/IEC 27001: 2022 Certification

Hive Pro has achieved ISO 27001: 2022 Certification, Demonstrating A Continuous Commitment to Excellence in Information Security August 8th, 2023 - HERNDON, VA: Hive Pro, a pioneer in the Threat Exposure Management market, is thrilled to announce that they have successfully attained ISO 27001:202...

CODESYS Development System Data Authenticity Modification

The vulnerability of the CODESYS Development System, a programming platform for applications, is related to insufficient verification of data authenticity. Exploiting this vulnerability could allow an attacker to modify the content of notifications received through HTTP from the CODESYS...

DevTools Navigation Bypass

The vulnerability of the DevTools set of tools for web development in Google Chrome is related to insufficient verification of data authenticity. Exploiting this vulnerability could allow an attacker to circumvent existing navigation restrictions remotely...

Advantech WebAccess Code Execution

The vulnerability of Advantech WebAccess remote monitoring software is related to insufficient verification of data authenticity. Exploiting this vulnerability allows a malicious actor operating remotely to execute arbitrary code...

WebKitGTK WPE WebKit Data Compromise

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit is related to insufficient validation of data authenticity. Exploiting this vulnerability allows attackers to compromise data integrity...

BD Alaris System with Guardrails Suite MX

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 8.2 ATTENTION : Low attack complexity Vendor : Becton, Dickinson and Company BD Equipment : Alaris PCU, Guardrails Editor, Systems Manager, Calculation Services, CQI Reporter Vulnerabilities : Insufficient Verification of Data Authenticity, Missing...

CVE-2023-30562: Insufficient Verification of Data Authenticity

A GRE dataset file within Systems Manager can be tampered with and distributed to PCUs...

ROS-2-907

2.907 Vulnerability in Mozilla Thunderbird email client CVE-2021-29964, CVE-2021-29967 1. Vulnerability Description: CVE-2021-29964 A vulnerability in the Mozilla Thunderbird email client, is related to boundary conditions. Exploitation of the vulnerability could allow an attacker acting remotely...

ROS-2-501

2.501 Apache Ant utility vulnerability CVE-2021-36374, CVE-2021-36373 1. Vulnerability Description: CVE-2021-36374 A vulnerability in the Apache Ant utility, is related to the application improperly controlling internal resource consumption when processing ZIP archives. Exploitation of the...

ROS-2-1237

2.1237 Memory Leak in GNU Tar CVE-2021-20193 1. Vulnerability Description: The vulnerability allows a remote attacker to perform a DoS attack on a target system. The vulnerability exists due to a memory leak in the readheader function in list.c. A remote attacker could pass a specially crafted...

ROS-2-1264

2.1264 Apache Ant utility vulnerability CVE-2021-36374, CVE-2021-36373 1. Vulnerability Description: CVE-2021-36374 A vulnerability in the Apache Ant utility, is related to the application improperly controlling internal resource consumption when processing ZIP archives. Exploitation of the...

ROS-2-543

2.543 Multiple vulnerabilities in Squid CVE-2021-28651, CVE-2021-28662, CVE-2021-28652, CVE-2021-31806, CVE-2021-31808 1. Vulnerability Description: The vulnerability allows a remote attacker to execute a denial-of-service DoS attack.Identifier of the Information Security Threats Data Bank of the...

WebApp Installs Component Google Chrome Bypass Security Restrictions

The vulnerability of the WebApp Installs component of Google Chrome is related to insufficient verification of data authenticity. Exploiting this vulnerability allows a malicious actor to bypass security restrictions through a specially created HTML page...

PT-2023-24685 · Zoom · Zoom

Name of the Vulnerable Software and Affected Versions: Zoom for Windows versions prior to 5.14.0 Description: The issue is related to insufficient verification of data authenticity, which may allow an authenticated user to potentially enable an escalation of privilege via network access...

Magento Commerce for developing Security Bypass

The vulnerability of the Magento Commerce software platform for developing and managing online stores is related to insufficient verification of data authenticity. Exploiting this vulnerability could allow a malicious actor to circumvent existing security restrictions remotely...

CVE-2023-34113

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority as this is a duplicate of CVE-2023-36541...

CVE-2023-34113

CVE-2023-34113 is rejected/not used; duplicate of CVE-2023-36541.

CVE-2023-34113

...

Foxit PDF Reader ExportXFAData Code Execution

The vulnerability of the exportXFAData method in the PDF document viewing software Foxit PDF Reader formerly Foxit Reader and the PDF file editing software Foxit PDF Editor formerly Foxit PhantomPDF is related to insufficient data authenticity checking. Exploiting this vulnerability could allow a...