Lucene search
+L

1302 matches found

EUVD
EUVD
added 2025/10/03 8:07 p.m.9 views

EUVD-2024-43270

Malicious code in bioql PyPI...

4.3CVSS6.5AI score0.004EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:07 p.m.11 views

EUVD-2023-31703

Malicious code in bioql PyPI...

6.5CVSS6.2AI score0.00243EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:07 p.m.14 views

EUVD-2023-51629

Malicious code in bioql PyPI...

7.1CVSS6.9AI score0.00412EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:07 p.m.15 views

EUVD-2025-24944

Malicious code in bioql PyPI...

8.1CVSS7AI score0.00503EPSS
SaveExploits1References5
Snyk
Snyk
added 2025/09/26 1:02 p.m.4 views

Insufficient Verification of Data Authenticity

Overview Affected versions of this package are vulnerable to Insufficient Verification of Data Authenticity via the SAML authentication component. An attacker can obtain authentication tokens belonging to another user by crafting a phishing login URL containing attacker-controlled publicKey and...

8.8CVSS7AI score0.00233EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/09/21 7:24 p.m.26 views

CVE-2024-13990

MicroWorld eScan AV's update mechanism failed to ensure authenticity and integrity of updates: update packages were delivered and accepted without robust cryptographic verification. As a result, an on-path attacker could perform a man-in-the-middle MitM attack and substitute malicious update...

9.3CVSS8AI score0.00616EPSS
SaveExploits0References1
CVE
CVE
added 2025/09/19 6:54 p.m.22 views

CVE-2024-13990

MicroWorld eScan AV’s update mechanism lacked cryptographic verification, allowing an on-path attacker to perform a MITM and substitute malicious update payloads. The affected component (update loader/installer payloads) could be executed or loaded, enabling remote code execution on vulnerable sy...

9.3CVSS7.7AI score0.00616EPSS
SaveExploits0References8
Vulnrichment
Vulnrichment
added 2025/09/19 6:54 p.m.7 views

CVE-2024-13990 MicroWorld eScan AV Insecure Update Mechanism Allows Man-in-the-Middle Replacement of Updates

MicroWorld eScan AV's update mechanism failed to ensure authenticity and integrity of updates: update packages were delivered and accepted without robust cryptographic verification. As a result, an on-path attacker could perform a man-in-the-middle MitM attack and substitute malicious update...

9.3CVSS7.7AI score0.00616EPSS
SaveExploits0References8
BDU FSTEC
BDU FSTEC
added 2025/08/29 12:00 a.m.14 views

The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird are related to insufficient verification of data authenticity, allowing attackers to trigger service failures.

The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird are related to insufficient verification of data authenticity. Exploiting these vulnerabilities can allow a malicious actor to cause service failures remotely...

10CVSS7.3AI score0.00233EPSS
SaveExploits0References16Affected Software5
Tenable Nessus
Tenable Nessus
added 2025/08/27 12:00 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2020-23906

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg N-98388-g76a3ee996b allows attackers to cause a denial of service DoS via a crafted audio file due to insufficient verification of data authenticity...

5.5CVSS6.7AI score0.00367EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
added 2025/08/26 7:24 a.m.9 views

CVE-2025-9379

A vulnerability was determined in Belkin AX1800 1.1.00.016. Affected by this vulnerability is an unknown functionality of the component Firmware Update Handler. This manipulation causes insufficient verification of data authenticity. The attack can be initiated remotely. The vendor was contacted...

8.6CVSS6.8AI score0.00315EPSS
SaveExploits0References1
NVD
NVD
added 2025/08/24 7:15 a.m.7 views

CVE-2025-9379

A vulnerability was determined in Belkin AX1800 1.1.00.016. Affected by this vulnerability is an unknown functionality of the component Firmware Update Handler. This manipulation causes insufficient verification of data authenticity. The attack can be initiated remotely. The vendor was contacted...

8.6CVSS0.00315EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2025/08/24 6:32 a.m.1 views

CVE-2025-9379 Belkin AX1800 Firmware Update data authenticity

A vulnerability was determined in Belkin AX1800 1.1.00.016. Affected by this vulnerability is an unknown functionality of the component Firmware Update Handler. This manipulation causes insufficient verification of data authenticity. The attack can be initiated remotely. The vendor was contacted...

8.6CVSS7AI score0.00315EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2025/08/24 6:32 a.m.30 views

CVE-2025-9379 Belkin AX1800 Firmware Update data authenticity

A vulnerability was determined in Belkin AX1800 1.1.00.016. Affected by this vulnerability is an unknown functionality of the component Firmware Update Handler. This manipulation causes insufficient verification of data authenticity. The attack can be initiated remotely. The vendor was contacted...

8.6CVSS0.00315EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/08/24 12:00 a.m.9 views

Belkin AX1800 数据伪造问题漏洞

The Belkin AX1800 is a wireless router from Belkin Canada. A data forgery issue vulnerability exists in the Belkin AX1800 version 1.1.00.016, which stems from insufficient validation of data authenticity and could lead to remote attacks...

8.6CVSS7AI score0.00315EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2025/08/24 12:00 a.m.8 views

PT-2025-34552 · Belkin · Belkin Ax1800

Name of the Vulnerable Software and Affected Versions: Belkin AX1800 version 1.1.00.016 Description: A vulnerability exists due to insufficient verification of data authenticity within the Firmware Update Handler component. This issue can be exploited remotely. The vendor was contacted regarding...

8.6CVSS6.8AI score0.00315EPSS
SaveExploits0References11
CNVD
CNVD
added 2025/08/20 12:00 a.m.8 views

Tenda AC15 Data Forgery Issue Vulnerability

Tenda AC15 is a dual-band wireless router launched by Shenzhen Jixiang Tenda Technology Co. in October 2015, which supports 802.11ac protocol and is mainly designed for home network environment. Tenda AC15 is vulnerable to a data forgery issue, which stems from insufficient data authenticity...

7.5CVSS7.2AI score0.0042EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
added 2025/08/18 12:00 a.m.14 views

The vulnerability of the DNS Java dnsjava implementation lies in its insufficient verification of data authenticity, allowing attackers to circumvent security restrictions.

The vulnerability of the DNS Java dnsjava implementation is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions remotely...

8.9CVSS6.8AI score0.00392EPSS
SaveExploits0References5Affected Software2
RedhatCVE
RedhatCVE
added 2025/08/16 8:14 p.m.22 views

CVE-2025-8979

A vulnerability was identified in Tenda AC15 15.13.07.13. Affected by this vulnerability is the function checkfwtype/splitfireware/checkfw of the component Firmware Update Handler. The manipulation leads to insufficient verification of data authenticity. The attack can be launched remotely. The...

7.5CVSS7.2AI score0.0042EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/08/16 8:14 p.m.25 views

CVE-2025-8980

A vulnerability has been found in Tenda G1 16.01.7.83660. Affected by this issue is the function checkuploadfile of the component Firmware Update Handler. The manipulation leads to insufficient verification of data authenticity. The attack may be launched remotely. The complexity of an attack is...

7.5CVSS7.1AI score0.00341EPSS
SaveExploits0References1
Rows per page
Query Builder