Lucene search
+L

1305 matches found

BDU FSTEC
BDU FSTEC
added 2021/12/17 12:00 a.m.14 views

The vulnerability in the implementation of the SDP service for the Bluetooth protocol stack for the Linux BlueZ operating system allows a attacker to disclose protected information.

The vulnerability of the SDP service implementation for the Bluetooth protocol stack for the Linux BlueZ operating system is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose protected information...

6.5CVSS6.5AI score0.00929EPSS
SaveExploits1References7Affected Software4
Cvelist
Cvelist
added 2021/12/08 12:01 p.m.32 views

CVE-2021-26103

An insufficient verification of data authenticity vulnerability CWE-345 in the user interface of FortiProxy verison 2.0.3 and below, 1.2.11 and below and FortiGate verison 7.0.0, 6.4.6 and below, 6.2.9 and below of SSL VPN portal may allow a remote, unauthenticated attacker to conduct a cross-sit...

6.3CVSS9AI score0.00422EPSS
SaveExploits0References1
Fortinet
Fortinet
added 2021/12/07 12:00 a.m.42 views

Protect

An insufficient verification of data authenticity vulnerability CWE-345 in the user interface of FortiProxy and FortiGate SSL VPN portal may allow a remote, unauthenticated attacker to conduct a cross-site request forgery CSRF attack . Only SSL VPN in web mode or full mode are impacted by this...

5.1CVSS8.4AI score0.00422EPSS
SaveExploits0Affected Software2
Tenable Nessus
Tenable Nessus
added 2021/11/11 12:00 a.m.75 views

EulerOS 2.0 SP5 : kernel (EulerOS-SA-2021-2663)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The 802.11 standard that underpins Wi-Fi Protected Access WPA, WPA2, and WPA3 and Wired Equivalent Privacy WEP doesn't require that received...

9.8CVSS7.5AI score0.78684EPSS
SaveExploits28References16
OSV
OSV
added 2021/11/10 10:15 p.m.12 views

DEBIAN-CVE-2020-23906

FFmpeg N-98388-g76a3ee996b allows attackers to cause a denial of service DoS via a crafted audio file due to insufficient verification of data authenticity...

5.5CVSS6.4AI score0.00367EPSS
SaveExploits1References1
OSV
OSV
added 2021/11/10 10:15 p.m.23 views

CVE-2020-23906

FFmpeg N-98388-g76a3ee996b allows attackers to cause a denial of service DoS via a crafted audio file due to insufficient verification of data authenticity...

5.5CVSS6.6AI score
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2021/11/10 10:15 p.m.30 views

CVE-2020-23906

FFmpeg N-98388-g76a3ee996b allows attackers to cause a denial of service DoS via a crafted audio file due to insufficient verification of data authenticity...

5.5CVSS6.7AI score0.00367EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2021/11/10 9:26 p.m.37 views

CVE-2020-23906

FFmpeg N-98388-g76a3ee996b allows attackers to cause a denial of service DoS via a crafted audio file due to insufficient verification of data authenticity...

5.3AI score0.00367EPSS
SaveExploits1References1
Debian CVE
Debian CVE
added 2021/11/10 9:26 p.m.52 views

CVE-2020-23906

FFmpeg N-98388-g76a3ee996b allows attackers to cause a denial of service DoS via a crafted audio file due to insufficient verification of data authenticity...

5.5CVSS5.2AI score0.00367EPSS
SaveExploits1
CNNVD
CNNVD
added 2021/11/10 12:00 a.m.13 views

FFmpeg 数据伪造问题漏洞

FFmpeg is a complete solution for recording, converting, and streaming audio and video from the FFmpeg Ffmpeg team. FFmpeg N-98388-g76a3ee996b contains a security vulnerability that could be exploited by an attacker to cause a denial of service DoS via a crafted audio file due to insufficient...

5.5CVSS7.7AI score0.00367EPSS
SaveExploits1References2
CNVD
CNVD
added 2021/10/31 12:00 a.m.29 views

HarmonyOS Security Bypass Vulnerability (CNVD-2021-87048)

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security bypass vulnerability exists in HarmonyOS versions prior to 2.0, where a component of HarmonyOS does not adequately validate data authenticity...

5.5CVSS6.6AI score0.00108EPSS
SaveExploits0References1
OSV
OSV
added 2021/10/28 1:15 p.m.10 views

CVE-2021-22460

A component of the HarmonyOS has a Insufficient Verification of Data Authenticity vulnerability. Local attackers may exploit this vulnerability to bypass the control mechanism...

5.5CVSS5.8AI score0.00108EPSS
SaveExploits0References1
Prion
Prion
added 2021/10/28 1:15 p.m.25 views

Security feature bypass

A component of the HarmonyOS has a Insufficient Verification of Data Authenticity vulnerability. Local attackers may exploit this vulnerability to bypass the control mechanism...

2.1CVSS5.5AI score0.00108EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2021/10/28 12:31 p.m.69 views

CVE-2021-22460

HarmonyOS vulnerability CVE-2021-22460 involves insufficient verification of data authenticity in a HarmonyOS component. The issue enables a local attacker to bypass control mechanisms. Affected versions are HarmonyOS prior to 2.0 (per connected Red Hat/CNVD/CNNVD entries). The exact vulnerable c...

5.5CVSS5.4AI score0.00108EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/10/28 12:31 p.m.37 views

CVE-2021-22460

A component of the HarmonyOS has a Insufficient Verification of Data Authenticity vulnerability. Local attackers may exploit this vulnerability to bypass the control mechanism...

5.7AI score0.00108EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/10/28 12:00 a.m.11 views

Huawei HarmonyOS 数据伪造问题漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security bypass vulnerability exists in HarmonyOS versions prior to 2.0, where a component of HarmonyOS does not adequately validate data authenticity...

5.5CVSS5.7AI score0.00108EPSS
SaveExploits0References2
HackRead
HackRead
added 2021/10/12 9:33 a.m.19 views

Why You Should Use Dynamic QR Code Generator

By Owais Sultan To make your brand more authentic, you need to have a dynamic QR code generator generating customized codes for your brand. This is a post from HackRead.com Read the original post: Why You Should Use Dynamic QR Code Generator...

2.6AI score
SaveExploits0
Huntr
Huntr
added 2021/10/05 2:26 p.m.19 views

Use of a Broken or Risky Cryptographic Algorithm in anonaddy/anonaddy

Description MD5 and SHA-1 are popular cryptographic hash algorithms often used to verify the integrity of messages and other data. Recent advances in cryptanalysis have discovered weaknesses in both algorithms. Consequently, MD5 and SHA-1 should no longer be relied upon to verify the authenticity...

0.2AI score
SaveExploits0References2
Prion
Prion
added 2021/10/04 6:15 p.m.24 views

Design/Logic Flaw

The programmer installation utility does not perform a cryptographic authenticity or integrity checks of the software on the flash drive. An attacker could leverage this weakness to install unauthorized software using a specially crafted USB...

4.6CVSS6.6AI score0.00173EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2021/09/17 12:00 a.m.13 views

The vulnerability of the SSH protocol implementation in the cryptographic security tool PuTTY allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the SSH protocol implementation in the cryptography security tool PuTTY is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

8.1CVSS7.5AI score0.01106EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder