Lucene search
K

15 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2018-0139

Malware in sbrugna...

5.9CVSS5.7AI score0.00161EPSS
Exploits0References7
CVE
CVE
added 2023/11/14 6:5 p.m.78 views

CVE-2023-28002

CVE-2023-28002 affects Fortinet FortiOS/ FortiGate VM where an improper validation of the integrity check value (CWE-354) can allow a local admin to boot a malicious image and bypass filesystem integrity checks. Affected: FortiOS/ FortiGate VM images on versions 7.2.0–7.2.3, 7.0.0–7.0.12, 6.4 (al...

6.7CVSS6.6AI score0.00006EPSS
Exploits0References1Affected Software2
Tenable Nessus
Tenable Nessus
added 2023/11/14 12:0 a.m.81 views

Fortinet Fortigate VM - Bypass of root file system integrity checks at boot time on VM (FG-IR-22-396)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-22-396 advisory. - An improper validation of integrity check value vulnerability CWE-354 in FortiOS 7.2.0 through 7.2.3, 7.0.0 through 7.0.12,...

6.7CVSS6.6AI score0.00006EPSS
Exploits0References2
Packet Storm
Packet Storm
added 2022/01/31 12:0 a.m.222 views

Moxa TN-5900 Firmware Upgrade Checksum Validation

KL-001-2022-001: Moxa TN-5900 Firmware Upgrade Checksum Validation Vulnerability Title: Moxa TN-5900 Firmware Upgrade Checksum Validation Vulnerability Advisory ID: KL-001-2022-001 Publication Date: 2022.01.28 Publication URL: https://korelogic.com/Resources/Advisories/KL-001-2022-001.txt 1...

0.5AI score0.00113EPSS
Exploits2
KoreLogic Security
KoreLogic Security
added 2022/01/28 12:0 a.m.17 views

Moxa TN-5900 Firmware Upgrade Checksum Validation Vulnerability

Vulnerability Details Affected Vendor: Moxa Affected Product: TN-5900 Affected Version: v3.1 and prior Platform: Moxa Linux CWE Classification: CWE-354 Improper Validation of Integrity Check Value CVE ID: CVE-2021-46559 2. Vulnerability Description Moxa TN-5900 v3.1.0 and prior uses an insecure...

7.5CVSS7.6AI score0.00113EPSS
Exploits2Affected Software1
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2020/12/11 12:0 a.m.36 views

JVN#55917325: Multiple vulnerabilities in Aterm SA3500G

Aterm SA3500G provided by NEC Corporation contains multiple vulnerabilities listed below. OS command injection CWE-78 - CVE-2020-5635 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H| Base Score: 8.8 CVSS v2| AV:A/AC:L/Au:N/C:P/I:P/A:P| Base Score: 5.8 OS...

8.8CVSS7.7AI score0.00414EPSS
Exploits0
OSV
OSV
added 2018/07/12 8:30 p.m.14 views

GHSA-CWH5-3CW7-4286 tlslite-ng off-by-one error on mac checking

tlslite-ng version 0.7.3 and earlier, since commit d7b288316bca7bcdd082e6ccff5491e241305233 contains a CWE-354: Improper Validation of Integrity Check Value vulnerability in TLS implementation, tlslite/utils/constanttime.py: ctcheckcbcmacandpad; line endpos = datalen - 1 - mac.digestsize that can...

8.2CVSS5.7AI score0.00161EPSS
Exploits0References6
Github Security Blog
Github Security Blog
added 2018/07/12 8:30 p.m.17 views

tlslite-ng off-by-one error on mac checking

tlslite-ng version 0.7.3 and earlier, since commit d7b288316bca7bcdd082e6ccff5491e241305233 contains a CWE-354: Improper Validation of Integrity Check Value vulnerability in TLS implementation, tlslite/utils/constanttime.py: ctcheckcbcmacandpad; line endpos = datalen - 1 - mac.digestsize that can...

5.9CVSS5.8AI score0.00161EPSS
Exploits0References6Affected Software1
UbuntuCve
UbuntuCve
added 2018/04/18 7:29 p.m.13 views

CVE-2018-1000159

tlslite-ng version 0.7.3 and earlier, since commit d7b288316bca7bcdd082e6ccff5491e241305233 contains a CWE-354: Improper Validation of Integrity Check Value vulnerability in TLS implementation, tlslite/utils/constanttime.py: ctcheckcbcmacandpad; line "endpos = datalen - 1 - mac.digestsize" that c...

5.9CVSS6.2AI score0.00161EPSS
Exploits0References5
PyPA
PyPA
added 2018/04/18 7:29 p.m.5 views

PYSEC-2018-31

tlslite-ng version 0.7.3 and earlier, since commit d7b288316bca7bcdd082e6ccff5491e241305233 contains a CWE-354: Improper Validation of Integrity Check Value vulnerability in TLS implementation, tlslite/utils/constanttime.py: ctcheckcbcmacandpad; line "endpos = datalen - 1 - mac.digestsize" that c...

5.9CVSS6.9AI score0.00161EPSS
Exploits0References2Affected Software1
NVD
NVD
added 2018/04/18 7:29 p.m.8 views

CVE-2018-1000159

tlslite-ng version 0.7.3 and earlier, since commit d7b288316bca7bcdd082e6ccff5491e241305233 contains a CWE-354: Improper Validation of Integrity Check Value vulnerability in TLS implementation, tlslite/utils/constanttime.py: ctcheckcbcmacandpad; line "endpos = datalen - 1 - mac.digestsize" that c...

5.9CVSS5.8AI score0.00161EPSS
Exploits0References1
Prion
Prion
added 2018/04/18 7:29 p.m.10 views

Input validation

tlslite-ng version 0.7.3 and earlier, since commit d7b288316bca7bcdd082e6ccff5491e241305233 contains a CWE-354: Improper Validation of Integrity Check Value vulnerability in TLS implementation, tlslite/utils/constanttime.py: ctcheckcbcmacandpad; line "endpos = datalen - 1 - mac.digestsize" that c...

4.3CVSS5.8AI score0.00161EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2018/04/18 7:0 p.m.84 views

CVE-2018-1000159

tlslite-ng

5.9CVSS5.7AI score0.00161EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2018/04/18 7:0 p.m.14 views

CVE-2018-1000159

tlslite-ng version 0.7.3 and earlier, since commit d7b288316bca7bcdd082e6ccff5491e241305233 contains a CWE-354: Improper Validation of Integrity Check Value vulnerability in TLS implementation, tlslite/utils/constanttime.py: ctcheckcbcmacandpad; line "endpos = datalen - 1 - mac.digestsize" that c...

5.8AI score0.00161EPSS
Exploits0References1
Debian CVE
Debian CVE
added 2018/04/18 7:0 p.m.11 views

CVE-2018-1000159

Removed by vendor...

5.9CVSS5.8AI score0.00161EPSS
Exploits0
Rows per page
Query Builder