Lucene search
K

42 matches found

RedhatCVE
RedhatCVE
added 2026/05/04 8:21 p.m.4 views

CVE-2026-7611

A vulnerability was found in TRENDnet TEW-821DAP up to 1.12B01. This impacts the function platformdoupgradecameodev of the file cameodev.sh of the component Firmware Update Handler. Performing a manipulation results in insufficient verification of data authenticity. The attack is possible to be...

8.1CVSS5AI score0.00034EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2026/05/04 8:21 p.m.4 views

CVE-2026-7606

A weakness has been identified in TRENDnet TEW-821DAP 1.12B01. This issue affects the function findhwid/newguiupdatefirmware of the component Firmware Update Handler. Executing a manipulation of the argument dest can lead to insufficient verification of data authenticity. The attack can be launch...

8.1CVSS5.4AI score0.00034EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2026/05/02 12:0 a.m.4 views

PT-2026-36585

A weakness has been identified in TRENDnet TEW-821DAP 1.12B01. This issue affects the function find hwid/new gui update firmware of the component Firmware Update Handler. Executing a manipulation of the argument dest can lead to insufficient verification of data authenticity. The attack can be...

6.3CVSS5.4AI score0.00034EPSS
Exploits1References5
Redos
Redos
added 2026/03/10 12:0 a.m.3 views

ROS-20260310-73-0051

Vulnerability in angie related to insufficient data authentication. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code...

8.2CVSS6.1AI score0.00021EPSS
Exploits0
Redos
Redos
added 2026/02/20 12:0 a.m.4 views

ROS-20260220-73-0012

A vulnerability in the dosmeacc function of the Linux operating system kernel is related to insufficient data authentication. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

5.5CVSS7.7AI score0.00121EPSS
Exploits0
NVD
NVD
added 2026/01/20 1:15 a.m.4 views

CVE-2026-1195

A weakness has been identified in MineAdmin 1.x/2.x. This impacts the function refresh of the file /system/refresh of the component JWT Token Handler. This manipulation causes insufficient verification of data authenticity. It is possible to initiate the attack remotely. The attack is considered ...

7.5CVSS0.00036EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-22007

Malicious code in bioql PyPI...

7.8CVSS4.4AI score0.00033EPSS
Exploits0References4
CVE
CVE
added 2025/08/24 6:32 a.m.12 views

CVE-2025-9379

This CVE concerns Belkin AX1800 router (firmware 1.1.00.016) with a vulnerability in the Firmware Update Handler. The issue is insufficient verification of data authenticity, enabling remote exploitation. Multiple connected sources corroborate that the vulnerability can be triggered remotely and ...

8.6CVSS7AI score0.0007EPSS
Exploits0References4
Packet Storm News
Packet Storm News
added 2025/07/10 12:0 a.m.2 views

TruChain: a Multi-Layer Architecture for Trusted, Verifiable, and Immutable Open Banking Data

Open banking framework enables third party providers to access financial data across banking institutions, leading to unprecedented innovations in the financial sector. However, some open banking standards remain susceptible to severe technological risks, including unverified data sources,...

6.9AI score
Exploits0
Vulnrichment
Vulnrichment
added 2025/02/27 1:54 p.m.4 views

CVE-2024-9334 Information Disclosure in E-Kent's Pallium Vehicle Tracking

Use of Hard-coded Credentials, Storage of Sensitive Data in a Mechanism without Access Control vulnerability in E-Kent Pallium Vehicle Tracking allows Authentication Bypass. This issue affects Pallium Vehicle Tracking: before 17.10.2024...

8.2CVSS5.8AI score0.00049EPSS
Exploits0References2
Redos
Redos
added 2024/12/16 12:0 a.m.8 views

ROS-20241216-07

A vulnerability in the asynchronous client and server implementation of the SSHv2 protocol on top of Python python-asyncssh is related to a lack of data authentication. Exploitation of the vulnerability could allow an attacker, acting remotely, to control a remote SSH client session by injecting ...

6.8CVSS6.8AI score0.00448EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2024/11/28 12:0 a.m.15 views

CBL Mariner 2.0 Security Update: hvloader (CVE-2023-2975)

The version of hvloader installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-2975 advisory. - Issue summary: The AES-SIV cipher implementation contains a bug that causes it to ignore empty associated...

5.3CVSS6.9AI score0.00198EPSS
Exploits0References2
Rosalinux
Rosalinux
added 2024/10/29 8:45 a.m.41 views

Advisory ROSA-SA-2024-2515

Software: httpd 2.4.6 OS: rosa-server79 packageevrstring: httpd-2.4.6-99.0.5.res7.1 CVE-ID: CVE-2021-26690 BDU-ID: 2021-03681 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the Apache HTTP Server web server is related to pointer dereferencing errors. Exploitation of the vulnerability could allow an...

9.8CVSS8.3AI score0.93858EPSS
Exploits2
Redos
Redos
added 2024/09/16 12:0 a.m.10 views

ROS-20240916-03

A vulnerability in the Node.js software platform is related to insufficient data authentication. Exploitation of the vulnerability could allow an attacker acting remotely to disable the validation of the integrity A vulnerability in the APIgenerateKeys function of the Node.js software platform is...

9.8CVSS8.1AI score0.00954EPSS
Exploits2
Redos
Redos
added 2024/08/20 12:0 a.m.18 views

ROS-20240820-08

A vulnerability in the filtervar function of the PHP programming language interpreter is related to insufficient data authentication. data authentication. Exploitation of the vulnerability could allow an attacker acting remotely, spoof URLs with erroneous data...

5.3CVSS6.7AI score0.03579EPSS
Exploits1
Redos
Redos
added 2024/08/20 12:0 a.m.7 views

ROS-20240820-16

A vulnerability in the filtervar function of the PHP programming language interpreter is related to insufficient data authentication. data authentication. Exploitation of the vulnerability could allow an attacker acting remotely, spoof URLs with erroneous data...

5.3CVSS5.4AI score0.03579EPSS
Exploits1
Redos
Redos
added 2024/08/20 12:0 a.m.7 views

ROS-20240820-15

A vulnerability in the filtervar function of the PHP programming language interpreter is related to insufficient data authentication. data authentication. Exploitation of the vulnerability could allow an attacker acting remotely, spoof URLs with erroneous data...

5.3CVSS5.4AI score0.03579EPSS
Exploits1
Positive Technologies
Positive Technologies
added 2024/05/27 12:0 a.m.1 views

PT-2024-5075 · Booth +5 · Booth +5

Name of the Vulnerable Software and Affected Versions: Booth affected versions not specified Description: A flaw was found in Booth, a cluster ticket manager, related to insufficient authentication of data. The issue is associated with the gcry md get algo dlen function. If a specially-crafted ha...

5.9CVSS6.6AI score0.01032EPSS
Exploits0References81
Redos
Redos
added 2024/04/10 12:0 a.m.31 views

ROS-20240410-20

A vulnerability in e-Tugra root certificates of SSL Certifi's SSL certificate validation package is related to with insufficient data authentication. Exploitation of the vulnerability could allow an attacker, acting remotely to execute a man-in-the-middle attack...

9.8CVSS7.3AI score0.00119EPSS
Exploits0
Redos
Redos
added 2024/04/10 12:0 a.m.11 views

ROS-20240410-25

A vulnerability in e-Tugra root certificates of SSL Certifi's SSL certificate validation package is related to with insufficient data authentication. Exploitation of the vulnerability could allow an attacker, acting remotely to execute a man-in-the-middle attack...

9.8CVSS7AI score0.00119EPSS
Exploits0
Rows per page
Query Builder