Lucene search
+L

1471 matches found

Snyk
Snyk
•added 2026/08/17 6:15 p.m.•9 views

Insufficient Verification of Data Authenticity

Overview openssl-encrypt is an A package for secure file encryption and decryption based on modern ciphers using heavy-compute-load chaining of hashing and KDF to generate strong encryption password based on users provided password to ensure secure encryption of files Affected versions of this...

9.8CVSS5.7AI score0.00274EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/08/17 6:15 p.m.•8 views

Insufficient Verification of Data Authenticity

Overview openssl-encrypt is an A package for secure file encryption and decryption based on modern ciphers using heavy-compute-load chaining of hashing and KDF to generate strong encryption password based on users provided password to ensure secure encryption of files Affected versions of this...

9.8CVSS5.7AI score0.00213EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/14 12:00 a.m.•4 views

CVE-2026-12949: Weak Password Recovery Mechanism for Forgotten Password

The Wishlist Member plugin for WordPress is vulnerable to Account Takeover via Insufficient Verification of Data Authenticity in versions up to and including 3.34.1. This is due to the wpmregister function validating the registration cookie only against the GET reg parameter while accepting the...

9.8CVSS5.8AI score0.00528EPSS
SaveExploits0References2
NVD
NVD
•added 2026/08/11 5:17 p.m.•15 views

CVE-2025-31356

Insufficient verification of data authenticity for some IntelR Trust Domain Extensions IntelR TDX within Ring 0: Hypervisor may allow an information disclosure. A system software adversary with a privileged user access combined with a high complexity attack may enable data exposure. This result m...

5.6CVSS0.00072EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/11 5:07 p.m.•18 views

EUVD-2026-56779

Insufficient verification of data authenticity in Azure Entra ID allows an authorized attacker to perform spoofing over a network...

8.8CVSS5.2AI score0.00443EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/11 4:28 p.m.•19 views

EUVD-2025-210689

Insufficient verification of data authenticity for some IntelR Trust Domain Extensions IntelR TDX within Ring 0: Hypervisor may allow an information disclosure. A system software adversary with a privileged user access combined with a high complexity attack may enable data exposure. This result m...

5.6CVSS5.1AI score0.00072EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/08/11 4:28 p.m.•52 views

CVE-2025-31356

Insufficient verification of data authenticity for some IntelR Trust Domain Extensions IntelR TDX within Ring 0: Hypervisor may allow an information disclosure. A system software adversary with a privileged user access combined with a high complexity attack may enable data exposure. This result m...

5.6CVSS0.00072EPSS
SaveExploits0References1
CVE
CVE
•added 2026/08/11 4:28 p.m.•80 views

CVE-2025-31356

CVE-2025-31356 affects Intel(R) Trust Domain Extensions (Intel(R) TDX) within Ring 0: Hypervisor. The issue is insufficient verification of data authenticity, potentially enabling information disclosure by a system software adversary with privileged access and high attack complexity, via local ac...

5.6CVSS5.7AI score0.00072EPSS
SaveExploits0References1
CVE
CVE
•added 2026/08/11 11:09 a.m.•53 views

CVE-2026-72544

OpenSignLabs OpenSign ≤ 2.37.0 has an integrity verification flaw in the triggerevent Parse cloud function. It accepts viewer identity and IP address as caller-supplied parameters without authentication, allowing unauthenticated remote attackers to forge document audit-trail entries. This enables...

7.5CVSS6.1AI score0.00253EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/08/11 11:09 a.m.•14 views

CVE-2026-72544 OpenSignLabs OpenSign - Insufficient Verification of Data Authenticity

An integrity verification vulnerability in OpenSignLabs OpenSign through 2.37.0 allows unauthenticated remote attackers to forge document audit-trail entries via the triggerevent Parse cloud function. The function accepts viewer identity and IP address as caller-supplied parameters without...

7.5CVSS6.1AI score0.00253EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/08/11 11:09 a.m.•57 views

CVE-2026-72544 OpenSignLabs OpenSign - Insufficient Verification of Data Authenticity

An integrity verification vulnerability in OpenSignLabs OpenSign through 2.37.0 allows unauthenticated remote attackers to forge document audit-trail entries via the triggerevent Parse cloud function. The function accepts viewer identity and IP address as caller-supplied parameters without...

7.5CVSS0.00253EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/11 12:00 a.m.•2 views

CVE-2026-62869: Insufficient Verification of Data Authenticity

Insufficient verification of data authenticity in Azure Entra ID allows an authorized attacker to perform spoofing over a network...

8.8CVSS5.8AI score0.00443EPSS
SaveExploits0References3
CNVD
CNVD
•added 2026/08/11 12:00 a.m.•44 views

WordPress WP Events Manager has a vulnerability related to insufficient validation of data authenticity.

WordPress WP Events Manager is a WordPress plugin used for creating, managing, and displaying events such as meetings, courses, and performances. It supports calendar views, registration, ticket sales, and integration with location maps. There is a vulnerability in WordPress WP Events Manager...

5.3CVSS6AI score0.00163EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/08/11 12:00 a.m.•16 views

PT-2026-70570

Name of the Vulnerable Software and Affected Versions Azure Entra ID affected versions not specified Description Insufficient verification of data authenticity allows an authorized attacker to perform spoofing over a network. Recommendations At the moment, there is no information about a newer...

8.8CVSS5.2AI score0.00443EPSS
SaveExploits0References3
CNVD
CNVD
•added 2026/08/11 12:00 a.m.•42 views

WordPress Simple CAPTCHA with Cloudflare Turnstile: Insufficient data authenticity verification vulnerabilities

WordPress is a free and open-source content management system CMS and blog platform built on PHP/MySQL. WordPress Simple CAPTCHA with Cloudflare Turnstile has a vulnerability related to insufficient data authenticity verification. This vulnerability stems from the Turnstile validation cache in th...

5.3CVSS5.9AI score0.00158EPSS
SaveExploits0
OSV
OSV
•added 2026/08/10 10:55 a.m.•7 views

OPENSUSE-SU-2026:21557-1 Security update for gleam

This update for gleam fixes the following issues: Changes in gleam: - Update to 1.18.1: CVE-2026-59247: insufficient verification of data authenticity allows a MITM adversary to substitute forged Hex package contents during dependency resolution bsc1272992 Set minimum required Erlang version to 2...

7.6CVSS5.9AI score0.00182EPSS
SaveExploits0References2
NVD
NVD
•added 2026/08/10 9:17 a.m.•24 views

CVE-2026-21078

Insufficient verification of data authenticity in Smart Switch trouble scanning mode prior to version 3.7.72.6 allows adjacent attackers to spoof device identity...

6.5CVSS0.00159EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/08/10 7:43 a.m.•9 views

CVE-2026-21078

Insufficient verification of data authenticity in Smart Switch trouble scanning mode prior to version 3.7.72.6 allows adjacent attackers to spoof device identity...

4.7CVSS5.8AI score0.00159EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/08/10 7:43 a.m.•17 views

CVE-2026-21078

Insufficient verification of data authenticity in Smart Switch trouble scanning mode prior to version 3.7.72.6 allows adjacent attackers to spoof device identity...

4.7CVSS5.8AI score0.00159EPSS
SaveExploits0References2
CVE
CVE
•added 2026/08/10 7:43 a.m.•62 views

CVE-2026-21078

CVE-2026-21078 affects Samsung Smart Switch in trouble scanning mode prior to 3.7.72.6. The issue is insufficient verification of data authenticity, allowing adjacent attackers to spoof device identity. According to the provided metrics, the exploit requires only low privileges and exists an acti...

6.5CVSS5.8AI score0.00159EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder