Lucene search
+L

1230 matches found

Redos
Redos
added 2026/06/23 12:0 a.m.10 views

ROS-20260623-73-0021

Vulnerability in Python 3.12 related to insufficient verification of data authenticity. Exploitation of this vulnerability may allow a remote attacker to execute arbitrary code...

6CVSS6.2AI score0.00188EPSS
SaveExploits0
Redos
Redos
added 2026/06/23 12:0 a.m.9 views

ROS-20260623-73-0019

Vulnerability in Python 3.10 related to insufficient verification of data authenticity. Exploitation of this vulnerability may allow a remote attacker to execute arbitrary code...

6CVSS6.2AI score0.00188EPSS
SaveExploits0
Redos
Redos
added 2026/06/23 12:0 a.m.9 views

ROS-20260623-73-0022

Vulnerability in Python 3.13 related to insufficient verification of data authenticity. Exploitation of this vulnerability may allow a remote attacker to execute arbitrary code...

6CVSS6.2AI score0.00188EPSS
SaveExploits0
Redos
Redos
added 2026/06/23 12:0 a.m.10 views

ROS-20260623-73-0020

Vulnerability in Python 3.11 related to insufficient verification of data authenticity. Exploitation of this vulnerability may allow a remote attacker to execute arbitrary code...

6CVSS6.2AI score0.00188EPSS
SaveExploits0
Redos
Redos
added 2026/06/23 12:0 a.m.11 views

ROS-20260623-73-0018

Vulnerability in Python 3.9 related to insufficient verification of data authenticity. Exploitation of this vulnerability allows a remote attacker to execute arbitrary code...

6CVSS6.2AI score0.00188EPSS
SaveExploits0
Snyk
Snyk
added 2026/06/22 7:58 p.m.10 views

Insufficient Verification of Data Authenticity

Overview wwbn/avideo is an Audio and Video Platform or simply "A Video Platform". Affected versions of this package are vulnerable to Insufficient Verification of Data Authenticity via the webhook.php process. An attacker can manipulate wallet balances and gain unauthorized access to premium...

7.1CVSS5.9AI score0.00143EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/06/19 8:47 p.m.13 views

Insufficient Verification of Data Authenticity

Overview CoreWCF.Primitives is a port of the service side of Windows Communication Foundation WCF to .NET Core. The goal of this project is to enable existing WCF services to move to .NET Core. Affected versions of this package are vulnerable to Insufficient Verification of Data Authenticity...

9.1CVSS5.9AI score0.00178EPSS
SaveExploits0References3
Snyk
Snyk
added 2026/06/19 7:35 p.m.7 views

Insufficient Verification of Data Authenticity

Overview Affected versions of this package are vulnerable to Insufficient Verification of Data Authenticity in the CRI checkpoint import. An attacker can cause arbitrary code execution by crafting a checkpoint image that forces the system to pull a malicious image and assign it an arbitrary local...

9.9CVSS6.5AI score0.00332EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/06/19 7:35 p.m.9 views

Insufficient Verification of Data Authenticity

Overview Affected versions of this package are vulnerable to Insufficient Verification of Data Authenticity in the CRI checkpoint import. An attacker can cause arbitrary code execution by crafting a checkpoint image that forces the system to pull a malicious image and assign it an arbitrary local...

9.9CVSS6.5AI score0.00332EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/06/19 7:35 p.m.5 views

Insufficient Verification of Data Authenticity

Overview Affected versions of this package are vulnerable to Insufficient Verification of Data Authenticity in the CRI checkpoint import. An attacker can cause arbitrary code execution by crafting a checkpoint image that forces the system to pull a malicious image and assign it an arbitrary local...

9.9CVSS6.5AI score0.00332EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/06/19 1:53 p.m.6 views

Insufficient Verification of Data Authenticity

Overview Affected versions of this package are vulnerable to Insufficient Verification of Data Authenticity in the WebsocketToken handler and the WebSocket upgrader process. An attacker can access sensitive session state and resource information by obtaining a CSRF token from an unauthenticated...

8.3CVSS5.8AI score0.00222EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/06/19 1:11 p.m.16 views

EUVD-2026-38017

Insufficient Verification of Data Authenticity vulnerability in Apache APISIX. The openid-connect plugin under default configuration has an attack surface that allows the attacker to spoof identity headers allowing the attacker to get unauthorized access the protected resources. This issue affect...

5.3CVSS5.8AI score0.00213EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/06/19 1:11 p.m.39 views

CVE-2026-44087 Apache APISIX: Openid-connect plugin Identity Header Spoofing

Insufficient Verification of Data Authenticity vulnerability in Apache APISIX. The openid-connect plugin under default configuration has an attack surface that allows the attacker to spoof identity headers allowing the attacker to get unauthorized access the protected resources. This issue affect...

5.3CVSS0.00213EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/06/19 12:0 a.m.32 views

PT-2026-50884

Name of the Vulnerable Software and Affected Versions Apache APISIX versions 2.3 through 3.16.0 Description The openid-connect plugin under default configuration contains an issue where insufficient verification of data authenticity allows an attacker to spoof identity headers. This can lead to...

9.1CVSS5.9AI score0.00213EPSS
SaveExploits0References7
Snyk
Snyk
added 2026/06/16 2:32 p.m.13 views

Insufficient Verification of Data Authenticity

Overview hono is an Ultrafast web framework for the Edges Affected versions of this package are vulnerable to Insufficient Verification of Data Authenticity in the Body Limit Middleware. An attacker can cause the application to process payloads larger than the configured maximum by understating t...

6.9CVSS5.9AI score0.00147EPSS
SaveExploits0References2
NVD
NVD
added 2026/06/12 6:16 p.m.17 views

CVE-2026-53406

Insufficient Verification of Data Authenticity in Remote Control for Zoom Contact Center for Windows before version 7.0.0 may allow an authenticated user to enable an escalation of privilege via local access...

7.8CVSS0.0008EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/06/12 5:52 p.m.41 views

CVE-2026-53406

Insufficient Verification of Data Authenticity in Remote Control for Zoom Contact Center for Windows before version 7.0.0 may allow an authenticated user to enable an escalation of privilege via local access...

7.8CVSS0.0008EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/06/12 5:52 p.m.15 views

EUVD-2026-36521

Insufficient Verification of Data Authenticity in Remote Control for Zoom Contact Center for Windows before version 7.0.0 may allow an authenticated user to enable an escalation of privilege via local access...

7.8CVSS5.3AI score0.0008EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/06/12 5:52 p.m.13 views

CVE-2026-53406

Insufficient Verification of Data Authenticity in Remote Control for Zoom Contact Center for Windows before version 7.0.0 may allow an authenticated user to enable an escalation of privilege via local access...

7.8CVSS5.3AI score0.0008EPSS
SaveExploits0References1
CVE
CVE
added 2026/06/12 5:52 p.m.81 views

CVE-2026-53406

CVE-2026-53406 affects the Zoom Contact Center for Windows prior to version 7.0.0. The root cause is Insufficient Verification of Data Authenticity in the Remote Control feature, which may allow an authenticated user to perform a local privilege escalation. Impact, per the entry, is elevated priv...

7.8CVSS5.3AI score0.0008EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder