825 matches found
The vulnerability of the mod_remoteip and mod_rewrite modules in the Apache HTTP Server allows a hacker to replace an IP address.
The vulnerability of the modremoteip and modrewrite modules in the Apache HTTP Server is related to insufficient verification of data authenticity. Exploiting this vulnerability allows a remote attacker to perform IP address substitution attacks...
Siemens RUGGEDCOM ROX II
1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Siemens Equipment: RUGGEDCOM ROX IIB Vulnerabilities: Improper Input Validation, NULL Pointer Dereference, Out-of-Bounds Write, Insufficient Verification of Data Authenticity, Improper Certificate...
CVE-2020-9141
There is a improper privilege management vulnerability in some Huawei smartphone. Successful exploitation of this vulnerability can cause information disclosure and malfunctions due to insufficient verification of data authenticity...
CVE-2020-9141
There is a improper privilege management vulnerability in some Huawei smartphone. Successful exploitation of this vulnerability can cause information disclosure and malfunctions due to insufficient verification of data authenticity...
Privilege escalation
There is a improper privilege management vulnerability in some Huawei smartphone. Successful exploitation of this vulnerability can cause information disclosure and malfunctions due to insufficient verification of data authenticity...
CVE-2020-9141
There is a improper privilege management vulnerability in some Huawei smartphone. Successful exploitation of this vulnerability can cause information disclosure and malfunctions due to insufficient verification of data authenticity...
CVE-2020-9141
Technical details for CVE-2020-9141 are not publicly available in the provided documents. No affected products, versions, or remediation are specified. Monitor for updates in forthcoming disclosures from vendors and security bulletins.
The vulnerability of the Firefox ESR and Firefox web browsers’ parsing module, as well as the Thunderbird email client, stems from a lack of mechanisms for verifying data authenticity. This allows attackers to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the Firefox ESR and Firefox web browsers’ parsing module, as well as the Thunderbird email client, is related to a lack of mechanisms for verifying data authenticity. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its...
The vulnerability of the unified information system for government management, Parus-Budget, due to insufficient verification of data authenticity, allows a perpetrator to execute arbitrary codes.
The vulnerability of the unified information system for government management, Parus-Budget, is related to insufficient verification of data authenticity. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary commands by replacing the update file...
The vulnerability of the network software tool Envoy, related to insufficient verification of data authenticity, allows a hacker to gain access to protected information.
The vulnerability of the network software tool Envoy is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to protected information...
Apache HTTP Server Data Forgery Issue Vulnerability
Apache HTTP Server is the United States Apache Software Apache Software Foundation of an open source web server . The server is fast, reliable and can be expanded through a simple API. A data forgery vulnerability exists in Apache HTTP Server. The vulnerability arises from a network system or...
The vulnerability of the dev_open() function in the software package for viewing television programs on PC LinuxTV Xawtv allows a intruder to gain unauthorized access to protected information.
The vulnerability of the devopen function in the PC LinuxTV Xawtv software package for viewing television programs is related to insufficient verification of data authenticity. Exploiting this vulnerability could allow an intruder to gain unauthorized access to protected information...
The vulnerability of SELinux’s mandatory access control system, combined with Linux Security Modules (LSM) in operating system kernels, allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of SELinux’s mandatory access control system, along with the Linux Security Modules LSM modules in the operating system kernel, is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow an attacker to gain unauthorized access to...
The vulnerability in the kernel compilation process of Ubuntu-based operating systems allows a attacker to execute a type of attack known as “man-in-the-middle” attack.
The vulnerability of the kernel compilation process for Ubuntu-based operating systems is related to insufficient verification of data authenticity. Exploiting this vulnerability allows a remote attacker to execute a “man-in-the-middle” attack using a specially crafted malware package...
The vulnerability of the software for Cisco WebEx Business Suite web conferencing solutions, related to insufficient verification of data authenticity, allows attackers to execute “man-in-the-middle” attacks.
The vulnerability of the software for Cisco WebEx Business Suite-related web conferencing services is related to insufficient verification of data authenticity. Exploiting this vulnerability could allow a malicious actor to carry out a “man-in-the-middle” attack...
The vulnerability of Firefox browser, related to insufficient verification of data authenticity, allows attackers to compromise data integrity.
The vulnerability of the Firefox browser is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow a remote attacker to compromise the integrity of data...
CVE-2020-7487
A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists which could allow the attacker to execute malicious code on the Modicon M218, M241, M251, and M258 controllers...
Design/Logic Flaw
A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists which could allow the attacker to execute malicious code on the Modicon M218, M241, M251, and M258 controllers...
CVE-2020-7487
The CVE-2020-7487 entry concerns Schneider Electric Modicon M218, M241, M251, and M258 controllers affected by CWE-345: Insufficient Verification of Data Authenticity. The Red Hat/NVD-related and Tenable/NASL data in connected documents corroborate that this is a data-authenticity issue allowing ...
