Lucene search
+L

758 matches found

Cvelist
Cvelist
added 2025/03/11 5:4 p.m.26 views

CVE-2025-0149 Zoom Apps - Insufficient Verification of Data Authenticity

Insufficient verification of data authenticity in some Zoom Workplace Apps may allow an unprivileged user to conduct a denial of service via network access...

6.5CVSS0.00231EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/03/11 12:0 a.m.8 views

PT-2025-10794 · Zoom · Zoom Workplace Apps

Name of the Vulnerable Software and Affected Versions: Zoom Workplace Apps affected versions not specified Description: Insufficient verification of data authenticity in some Zoom Workplace Apps may allow an unprivileged user to conduct a denial of service via network access. Recommendations: At...

7.5CVSS7AI score0.00231EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2025/03/11 12:0 a.m.6 views

Zoom Workplace 数据伪造问题漏洞

Zoom Workplace is an AI-first collaboration platform from Zoom that integrates core features such as team communication, meetings, document collaboration, and a built-in AI Companion smart assistant to boost productivity. Zoom Workplace suffers from a denial-of-service vulnerability that stems fr...

7.5CVSS6.6AI score0.00231EPSS
SaveExploits0References2
Snyk
Snyk
added 2025/03/10 12:30 p.m.5 views

Insufficient Verification of Data Authenticity

Overview picklescan is a Security scanner detecting Python Pickle files performing suspicious actions Affected versions of this package are vulnerable to Insufficient Verification of Data Authenticity due to improper handling of modified ZIP file flag bits. Attackers can exploit this by altering...

9.8CVSS6.9AI score0.00512EPSS
SaveExploits1References2
NVD
NVD
added 2025/03/10 9:15 a.m.7 views

CVE-2025-27257

Insufficient Verification of Data Authenticity vulnerability in GE Vernova UR IED family devices allows an authenticated user to install a modified firmware. The firmware signature verification is enforced only on the client-side dedicated software Enervista UR Setup, allowing the integration che...

6.1CVSS0.0017EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/03/10 9:5 a.m.17 views

CVE-2025-27257

Insufficient Verification of Data Authenticity vulnerability in GE Vernova UR IED family devices allows an authenticated user to install a modified firmware. The firmware signature verification is enforced only on the client-side dedicated software Enervista UR Setup, allowing the integration che...

6.1CVSS0.0017EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/03/10 9:5 a.m.4 views

CVE-2025-27257

Insufficient Verification of Data Authenticity vulnerability in GE Vernova UR IED family devices allows an authenticated user to install a modified firmware. The firmware signature verification is enforced only on the client-side dedicated software Enervista UR Setup, allowing the integration che...

6.1CVSS7AI score0.0017EPSS
SaveExploits0References2
CVE
CVE
added 2025/03/10 9:5 a.m.69 views

CVE-2025-27257

CVE-2025-27257 affects the GE Vernova UR IED family devices. The root cause is insufficient data authenticity verification, with firmware signature checks enforced only by the client-side Enervista UR Setup, enabling an authenticated user to bypass integration checks and install modified firmware...

6.1CVSS7AI score0.0017EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/03/07 1:38 a.m.15 views

CVE-2025-27680

Vasion Print formerly PrinterLogic before Virtual Appliance Host 1.0.750 Application 20.0.1442 allows Insecure Firmware Image with Insufficient Verification of Data Authenticity V-2024-004...

9.1CVSS7.1AI score0.00295EPSS
SaveExploits1References1
OSV
OSV
added 2025/03/05 6:15 a.m.5 views

CVE-2025-27680

Vasion Print formerly PrinterLogic before Virtual Appliance Host 1.0.750 Application 20.0.1442 allows Insecure Firmware Image with Insufficient Verification of Data Authenticity V-2024-004...

9.1CVSS5.8AI score0.00295EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2025/03/05 12:0 a.m.26 views

CVE-2025-27680

Vasion Print formerly PrinterLogic before Virtual Appliance Host 1.0.750 Application 20.0.1442 allows Insecure Firmware Image with Insufficient Verification of Data Authenticity V-2024-004...

0.00295EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
added 2025/03/05 12:0 a.m.8 views

The vulnerability of the Thunderbird email client, specifically Thunderbird ESR, arises from insufficient verification of data authenticity, allowing attackers to influence the integrity of the data.

The vulnerability of the Thunderbird email client, specifically Thunderbird ESR, is related to insufficient verification of data authenticity. Exploiting this vulnerability could allow a malicious actor to influence the integrity of data...

7.8CVSS7.7AI score0.00233EPSS
SaveExploits0References11Affected Software6
Vulnrichment
Vulnrichment
added 2025/03/05 12:0 a.m.7 views

CVE-2025-27680

Vasion Print formerly PrinterLogic before Virtual Appliance Host 1.0.750 Application 20.0.1442 allows Insecure Firmware Image with Insufficient Verification of Data Authenticity V-2024-004...

7.2AI score0.00295EPSS
SaveExploits1References2
CVE
CVE
added 2025/03/05 12:0 a.m.67 views

CVE-2025-27680

Vasion Print (PrinterLogic) before Virtual Appliance Host 1.0.750 Application 20.0.1442 is affected by CVE-2025-27680, described as an insecure firmware image with insufficient verification of data authenticity (V-2024-004). The issue is documented with a CRITICAL CVSS v3.1 score (9.1) impacting ...

9.1CVSS7.2AI score0.00295EPSS
SaveExploits1References3Affected Software2
RedhatCVE
RedhatCVE
added 2025/03/02 5:19 p.m.6 views

CVE-2025-24843

Insecure file retrieval process that facilitates potential for file manipulation to affect product stability and confidentiality, integrity, authenticity, and attestation of stored data...

5.1CVSS6.7AI score0.00143EPSS
SaveExploits0References1
NVD
NVD
added 2025/02/28 5:15 p.m.9 views

CVE-2025-24843

Insecure file retrieval process that facilitates potential for file manipulation to affect product stability and confidentiality, integrity, authenticity, and attestation of stored data...

5.1CVSS0.00143EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/02/28 12:0 a.m.4 views

Dario Health 安全漏洞

Dario Health is a software from Dario Health that provides digital health solutions for people with chronic conditions. Dario Health has a security vulnerability that stems from an insecure file retrieval process that could lead to file manipulation, impacting product stability and data...

5.1CVSS6.6AI score0.00143EPSS
SaveExploits0References3
IBM Security Bulletins
IBM Security Bulletins
added 2025/02/26 6:42 p.m.8 views

Security Bulletin: IBM watsonx Orchestrate Cartridge affected by vulnerability in Certifi python-certifi

Summary IBM watsonx Orchestrate Cartridge contains a vulnerable version of Certifi python-certifi Vulnerability Details CVEID:CVE-2024-39689 DESCRIPTION: Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS...

7.5CVSS7.4AI score0.01049EPSS
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/02/20 12:0 a.m.10 views

The vulnerability of the Xerox Workplace Suite print management server, related to insufficient verification of data authenticity, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the Xerox Workplace Suite print management server is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

5CVSS5.5AI score0.00179EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2025/02/12 10:15 p.m.29 views

CVE-2024-39805

Insufficient verification of data authenticity in some IntelR DSA software before version 23.4.39 may allow an authenticated user to potentially enable escalation of privilege via local access...

7.8CVSS0.00128EPSS
SaveExploits0References1
Rows per page
Query Builder