1302 matches found
The vulnerability of the iPXE network loading standard implementation for the Cisco IOS XR operating system allows a hacker to load arbitrary files.
The vulnerability of the iPXE network loading standard implementation for the Cisco IOS XR operating system is related to insufficient verification of data authenticity during file loading. Exploiting this vulnerability could allow attackers to load arbitrary files...
The vulnerability of the IBM Aspera Faspex application’s configuration, related to insufficient data authenticity verification, allows a perpetrator to compromise the integrity of the protected information.
The vulnerability of the IBM Aspera Faspex file-sharing application relates to insufficient verification of data authenticity. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the protected information...
The vulnerability of the Symfony software platform for developing and managing web applications lies in the insufficient validation of the authenticity of executed requests, allowing attackers to carry out CSRF attacks.
The vulnerability of the Symfony software platform for developing and managing web applications is related to insufficient validation of the authenticity of executed requests. Exploiting this vulnerability allows a malicious actor to perform a CSRF attack remotely...
Fedora 38 : open-vm-tools (2023-df375d0634)
The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-df375d0634 advisory. Package new upstream version of open-vm-tools-12.3.0-22234872. Security fix for CVE-2023-20900, CVE-2023-20867 Tenable has extracted the preceding...
Siemens RUGGEDCOM ROX II Insufficient Verification of Data Authenticity (CVE-2019-17006)
In Network Security Services NSS before 3.46, several cryptographic primitives had missing length checks. In cases where the application calling the library did not perform a sanity check on the inputs it could result in a crash due to a buffer overflow. This plugin only works with Tenable.ot...
The vulnerability of the IOCTL component of the AMD uProf software profiling tool allows a hacker to load an unsigned driver and execute arbitrary code.
The vulnerability of the IOCTL component of the AMD uProf software profiling tool is related to insufficient verification of data authenticity. Exploiting this vulnerability could allow an attacker to load unsigned drivers and execute arbitrary code...
The vulnerability of the e-Tugra certificate verification package for SSL certificates allows a perpetrator to execute a “man-in-the-middle” attack.
The vulnerability of the e-Tugra SSL Certificate verification package’s root certificates is related to insufficient verification of data authenticity. Exploiting this vulnerability could allow a malicious actor to execute a “man-in-the-middle” attack...
CVE-2023-4589
Delinea Secret Server 10.9.000002 is affected by an insufficient verification of data authenticity vulnerability in its update mechanism. The root cause is that software updates lack digital signatures and do not validate update package integrity, allowing an attacker with administrator privilege...
Authentication flaw
ManageEngine ADSelfService Plus GINA Client Insufficient Verification of Data Authenticity Authentication Bypass Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of ManageEngine ADSelfService Plus. Authentication is not...
CVE-2023-35719 ManageEngine ADSelfService Plus GINA Client Insufficient Verification of Data Authenticity Authentication Bypass Vulnerability
ManageEngine ADSelfService Plus GINA Client Insufficient Verification of Data Authenticity Authentication Bypass Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of ManageEngine ADSelfService Plus. Authentication is not...
CVE-2023-35719 ManageEngine ADSelfService Plus GINA Client Insufficient Verification of Data Authenticity Authentication Bypass Vulnerability
ManageEngine ADSelfService Plus GINA Client Insufficient Verification of Data Authenticity Authentication Bypass Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of ManageEngine ADSelfService Plus. Authentication is not...
Honeywell Experion PKS, LX and PlantCruise Insufficient Verification of Data Authenticity (CVE-2023-25178)
Controller may be loaded with malicious firmware which could enable remote code execution This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid501611;...
CVE-2023-23773
Motorola EBTS/MBTS Base Radio fails to check firmware authenticity. The Motorola MBTS Base Radio lacks cryptographic signature validation for firmware update packages, allowing an authenticated attacker to gain arbitrary code execution, extract secret key material, and/or leave a persistent impla...
Design/Logic Flaw
Motorola EBTS/MBTS Base Radio fails to check firmware authenticity. The Motorola MBTS Base Radio lacks cryptographic signature validation for firmware update packages, allowing an authenticated attacker to gain arbitrary code execution, extract secret key material, and/or leave a persistent impla...
CVE-2023-23773
The CVE-2023-23773 entry concerns Motorola MBTS/EBTS Base Radio firmware: the update packages lack cryptographic signature validation, enabling an authenticated attacker to achieve arbitrary code execution, potentially extract secret key material, and leave a persistent implant on the device. Roo...
CVE-2023-23772
The CVE-2023-23772 issue concerns the Motorola MBTS Site Controller, where firmware update packages are not validated cryptographically. The root cause is lack of firmware update authenticity checks, enabling an authenticated attacker to potentially achieve arbitrary code execution, extract secre...
CVE-2023-23772
Motorola MBTS Site Controller fails to check firmware update authenticity. The Motorola MBTS Site Controller lacks cryptographic signature validation for firmware update packages, allowing an authenticated attacker to gain arbitrary code execution, extract secret key material, and/or leave a...
Motorola MBTS Base Radio和Motorola EBTS Base Radio 数据伪造问题漏洞
The Motorola MBTS Base Radio and Motorola EBTS Base Radio are walkie-talkies from Motorola, USA. A security vulnerability exists in the Motorola MBTS Base Radio and Motorola EBTS Base Radio that stems from an inability to check the authenticity of the firmware, allowing an authenticated attacker ...
