Lucene search
+L

49 matches found

The Hacker News
The Hacker News
•added 2021/08/25 10:28 a.m.•62 views

B. Braun Infusomat Pumps Could Let Attackers Remotely Alter Medication Dosages

Cybersecurity researchers have disclosed five previously unreported security vulnerabilities affecting B. Braun's Infusomat Space Large Volume Pump and SpaceStation that could be abused by malicious parties to tamper with medication doses without any prior authentication. McAfee, which discovered...

10CVSS0.4AI score0.0558EPSS
SaveExploits4
attackerkb
attackerkb
•added 2021/08/03 6:15 p.m.•13 views

CVE-2021-22419

A component of the HarmonyOS has a Insufficient Verification of Data Authenticity vulnerability. Local attackers may exploit this vulnerability to cause persistent dos...

5.5CVSS5.8AI score0.00102EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2021/02/19 12:00 a.m.•20 views

The vulnerability of the Kaspersky Endpoint Security anti-virus protection component and the Kaspersky Rescue Disk boot disk, related to insufficient verification of data authenticity, allows attackers to bypass the UEFI Secure Boot security mechanism.

The vulnerability of the Kaspersky Endpoint Security anti-virus protection component and the Kaspersky Rescue Disk boot disk is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow a remote attacker to bypass the UEFI Secure Boot security mechanism...

5.3CVSS7AI score0.00231EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2020/05/29 12:00 a.m.•13 views

The vulnerability of the software for Cisco WebEx Business Suite web conferencing solutions, related to insufficient verification of data authenticity, allows attackers to execute “man-in-the-middle” attacks.

The vulnerability of the software for Cisco WebEx Business Suite-related web conferencing services is related to insufficient verification of data authenticity. Exploiting this vulnerability could allow a malicious actor to carry out a “man-in-the-middle” attack...

4.3CVSS5.5AI score0.00336EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2020/04/06 12:00 a.m.•18 views

A vulnerability in the anycast function of the Cisco NX-OS operating system, which allows a attacker to compromise the integrity of protected information.

The vulnerability in the anycast function of the Cisco NX-OS operating system is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow a malicious actor to compromise the integrity of protected information...

4.7CVSS5.5AI score0.00292EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2019/08/20 12:00 a.m.•14 views

The vulnerability of the IcedTea-Web plugin, which stems from insufficient verification of data authenticity, allows a hacker to inject arbitrary code into the JAR file.

The vulnerability of the IcedTea-Web plugin is related to insufficient verification of data authenticity. Exploiting this vulnerability allows a remote attacker to inject arbitrary code into the JAR file...

8.1CVSS5.8AI score0.01165EPSS
SaveExploits0References12Affected Software6
NVD
NVD
•added 2018/11/02 5:29 p.m.•35 views

CVE-2018-7798

A Insufficient Verification of Data Authenticity CWE-345 vulnerability exists in the Modicon M221, all versions, which could cause a change of IPv4 configuration IP address, mask and gateway when remotely connected to the device...

8.2CVSS8.1AI score0.00655EPSS
SaveExploits0References2
Core Security
Core Security
•added 2018/02/21 12:00 a.m.•579 views

Trend Micro Email Encryption Gateway Multiple Vulnerabilities

1. Advisory Information Title: Trend Micro Email Encryption Gateway Multiple Vulnerabilities Advisory ID: CORE-2017-0006 Advisory URL:http://www.coresecurity.com/core-labs/advisories/trend-micro-email-encryption-gateway-multiple-vulnerabilities Date published: 2018-02-21 Date of last update:...

10CVSS9.3AI score0.10247EPSS
SaveExploits16
BDU FSTEC
BDU FSTEC
•added 2016/02/24 12:00 a.m.•16 views

Vulnerability of the Windows operating system, allowing a perpetrator to execute arbitrary code

The vulnerability of the Windows Reader component of the Windows operating system is related to insufficient verification of data authenticity. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created Reader file from a remote location...

9.3CVSS7.7AI score0.26162EPSS
SaveExploits0References2
Rows per page
Query Builder