Privilege escalation

There is a improper privilege management vulnerability in some Huawei smartphone. Successful exploitation of this vulnerability can cause information disclosure and malfunctions due to insufficient verification of data authenticity...

CVE-2020-9141

There is a improper privilege management vulnerability in some Huawei smartphone. Successful exploitation of this vulnerability can cause information disclosure and malfunctions due to insufficient verification of data authenticity...

CVE-2020-9141

Technical details for CVE-2020-9141 are not publicly available in the provided documents. No affected products, versions, or remediation are specified. Monitor for updates in forthcoming disclosures from vendors and security bulletins.

The vulnerability of the Firefox ESR and Firefox web browsers’ parsing module, as well as the Thunderbird email client, stems from a lack of mechanisms for verifying data authenticity. This allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Firefox ESR and Firefox web browsers’ parsing module, as well as the Thunderbird email client, is related to a lack of mechanisms for verifying data authenticity. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its...

The vulnerability of the unified information system for government management, Parus-Budget, due to insufficient verification of data authenticity, allows a perpetrator to execute arbitrary codes.

The vulnerability of the unified information system for government management, Parus-Budget, is related to insufficient verification of data authenticity. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary commands by replacing the update file...

The vulnerability of the network software tool Envoy, related to insufficient verification of data authenticity, allows a hacker to gain access to protected information.

The vulnerability of the network software tool Envoy is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to protected information...

Apache HTTP Server Data Forgery Issue Vulnerability

Apache HTTP Server is the United States Apache Software Apache Software Foundation of an open source web server . The server is fast, reliable and can be expanded through a simple API. A data forgery vulnerability exists in Apache HTTP Server. The vulnerability arises from a network system or...

The vulnerability of the dev_open() function in the software package for viewing television programs on PC LinuxTV Xawtv allows a intruder to gain unauthorized access to protected information.

The vulnerability of the devopen function in the PC LinuxTV Xawtv software package for viewing television programs is related to insufficient verification of data authenticity. Exploiting this vulnerability could allow an intruder to gain unauthorized access to protected information...

The vulnerability of SELinux’s mandatory access control system, combined with Linux Security Modules (LSM) in operating system kernels, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of SELinux’s mandatory access control system, along with the Linux Security Modules LSM modules in the operating system kernel, is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow an attacker to gain unauthorized access to...

The vulnerability in the kernel compilation process of Ubuntu-based operating systems allows a attacker to execute a type of attack known as “man-in-the-middle” attack.

The vulnerability of the kernel compilation process for Ubuntu-based operating systems is related to insufficient verification of data authenticity. Exploiting this vulnerability allows a remote attacker to execute a “man-in-the-middle” attack using a specially crafted malware package...

The vulnerability of the software for Cisco WebEx Business Suite web conferencing solutions, related to insufficient verification of data authenticity, allows attackers to execute “man-in-the-middle” attacks.

The vulnerability of the software for Cisco WebEx Business Suite-related web conferencing services is related to insufficient verification of data authenticity. Exploiting this vulnerability could allow a malicious actor to carry out a “man-in-the-middle” attack...

The vulnerability of Firefox browser, related to insufficient verification of data authenticity, allows attackers to compromise data integrity.

The vulnerability of the Firefox browser is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow a remote attacker to compromise the integrity of data...

CVE-2020-7487

A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists which could allow the attacker to execute malicious code on the Modicon M218, M241, M251, and M258 controllers...

Design/Logic Flaw

A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists which could allow the attacker to execute malicious code on the Modicon M218, M241, M251, and M258 controllers...

CVE-2020-7487

The CVE-2020-7487 entry concerns Schneider Electric Modicon M218, M241, M251, and M258 controllers affected by CWE-345: Insufficient Verification of Data Authenticity. The Red Hat/NVD-related and Tenable/NASL data in connected documents corroborate that this is a data-authenticity issue allowing ...

CVE-2020-7487

A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists which could allow the attacker to execute malicious code on the Modicon M218, M241, M251, and M258 controllers...

The vulnerability of the RADIUS server FreeRADIUS, related to insufficient verification of data authenticity, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the RADIUS-server FreeRADIUS is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

A vulnerability in the anycast function of the Cisco NX-OS operating system, which allows a attacker to compromise the integrity of protected information.

The vulnerability in the anycast function of the Cisco NX-OS operating system is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow a malicious actor to compromise the integrity of protected information...

CVE-2019-18905

A Insufficient Verification of Data Authenticity vulnerability in autoyast2 of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15 allows remote attackers to MITM connections when deprecated and unused functionality of autoyast is used to create images. This issue affects: SUSE Linux...

CVE-2019-18905

A Insufficient Verification of Data Authenticity vulnerability in autoyast2 of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15 allows remote attackers to MITM connections when deprecated and unused functionality of autoyast is used to create images. This issue affects: SUSE Linux...