Lucene search
+L

755 matches found

BDU FSTEC
BDU FSTEC
added 2024/12/05 12:0 a.m.10 views

The vulnerability of the QUIC protocol implementation in the quic-go library, written in the Go programming language, arises from insufficient verification of data authenticity. This allows attackers to influence the accessibility of protected information.

The vulnerability of the QUIC protocol implementation in the Go programming language library quic-go is related to insufficient verification of data authenticity. Exploiting this vulnerability could allow a malicious actor, operating remotely, to compromise the accessibility of protected...

6.5CVSS6.5AI score0.00608EPSS
SaveExploits0References7Affected Software5
Tenable Nessus
Tenable Nessus
added 2024/12/04 12:0 a.m.7 views

Phoenix Contact Classic Line Controllers Insufficient Verification of Data Authenticity (CVE-2022-31800)

An unauthenticated, remote attacker could upload malicious logic to devices based on ProConOS/ProConOS eCLR in order to gain full control over the device. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C...

10CVSS8.5AI score0.01455EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2024/12/03 12:0 a.m.12 views

PT-2024-35369 · Lorex · Lorex 2K Indoor Wi-Fi Security Camera

Name of the Vulnerable Software and Affected Versions: Lorex 2K Indoor Wi-Fi Security Camera versions prior to 2.800.0000000.8.R.20241111 Description: An attacker who can execute arbitrary Operating Systems commands can bypass code signing enforcements in the kernel and execute arbitrary native...

6.7CVSS8.1AI score0.00163EPSS
SaveExploits1References7
IBM Security Bulletins
IBM Security Bulletins
added 2024/11/26 9:10 p.m.16 views

Security Bulletin: Insufficient verification of data authenticity might affect IBM Storage Defender – Resiliency Service

Summary IBM Storage Defender – Resiliency Service is vulnerable to insufficient verification of data authenticity. The vulnerability has been addressed. CVE-2023-37920 Vulnerability Details CVEID:CVE-2023-37920 DESCRIPTION: An unspecified error with the removal of e-Tugra root certificate in...

9.8CVSS6.7AI score0.00468EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
added 2024/11/25 12:0 a.m.5 views

Eaton IPP 安全漏洞

Eaton IPP is a power management software from Eaton Corporation USA. A security vulnerability exists in Eaton IPP versions prior to v1.71, which stems from insufficient validation of data authenticity and could cause the system to accept invalid data...

5.1CVSS6.5AI score0.00112EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/11/25 12:0 a.m.8 views

PT-2024-11583 · Eaton · Ipp

Name of the Vulnerable Software and Affected Versions: IPP versions prior to v1.71 Description: The issue is related to insufficient verification of data authenticity, causing the software to accept invalid data. This affects multiple versions of the Eaton products. Recommendations: For versions...

5.1CVSS7AI score0.00112EPSS
SaveExploits0References6
NVD
NVD
added 2024/11/22 10:15 p.m.27 views

CVE-2024-8356

Visteon Infotainment VIP MCU Code Insufficient Validation of Data Authenticity Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Visteon Infotainment systems. An attacker must first obtain the ability to execute...

8.8CVSS0.0017EPSS
SaveExploits0References1
OSV
OSV
added 2024/11/22 10:15 p.m.4 views

CVE-2024-8356

Visteon Infotainment VIP MCU Code Insufficient Validation of Data Authenticity Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Visteon Infotainment systems. An attacker must first obtain the ability to execute...

7.8CVSS6.2AI score0.0017EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/11/22 9:32 p.m.16 views

CVE-2024-8356 Visteon Infotainment VIP MCU Code Insufficient Validation of Data Authenticity Local Privilege Escalation Vulnerability

Visteon Infotainment VIP MCU Code Insufficient Validation of Data Authenticity Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Visteon Infotainment systems. An attacker must first obtain the ability to execute...

8.8CVSS7.4AI score0.0017EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/11/22 9:32 p.m.35 views

CVE-2024-8356 Visteon Infotainment VIP MCU Code Insufficient Validation of Data Authenticity Local Privilege Escalation Vulnerability

Visteon Infotainment VIP MCU Code Insufficient Validation of Data Authenticity Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Visteon Infotainment systems. An attacker must first obtain the ability to execute...

8.8CVSS0.0017EPSS
SaveExploits0References1
NVD
NVD
added 2024/11/05 10:20 a.m.35 views

CVE-2024-47254

In 2N Access Commander versions 3.1.1.2 and prior, an Insufficient Verification of Data Authenticity vulnerability could allow an attacker to escalate their privileges and gain root access to the system...

7.2CVSS0.0034EPSS
SaveExploits0References1
OSV
OSV
added 2024/11/05 10:20 a.m.4 views

CVE-2024-47254

In 2N Access Commander versions 3.1.1.2 and prior, an Insufficient Verification of Data Authenticity vulnerability could allow an attacker to escalate their privileges and gain root access to the system...

7.2CVSS5.8AI score0.0034EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/11/05 9:13 a.m.31 views

CVE-2024-47254

In 2N Access Commander versions 3.1.1.2 and prior, an Insufficient Verification of Data Authenticity vulnerability could allow an attacker to escalate their privileges and gain root access to the system...

6.3CVSS0.0034EPSS
SaveExploits0References1
CVE
CVE
added 2024/11/05 9:13 a.m.70 views

CVE-2024-47254

CVE-2024-47254 affects 2N Access Commander v3.1.1.2 and earlier. The advisory details two issues: (1) path traversal could allow arbitrary file writes and remote code execution; (2) insufficient verification of data authenticity could enable privilege escalation and root access. Impact includes p...

7.2CVSS7.5AI score0.0034EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/11/05 9:13 a.m.14 views

CVE-2024-47254

In 2N Access Commander versions 3.1.1.2 and prior, an Insufficient Verification of Data Authenticity vulnerability could allow an attacker to escalate their privileges and gain root access to the system...

6.3CVSS7.3AI score0.0034EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/11/05 12:0 a.m.6 views

2N Access Commander 安全漏洞

2N Access Commander is an access control solution from 2N. A security vulnerability exists in 2N Access Commander version 3.1.1.2 and prior versions, which stems from the presence of a Data Authenticity Validation Insufficiency vulnerability that allows an attacker to elevate its privileges and...

7.2CVSS6.7AI score0.0034EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2024/10/04 12:0 a.m.5 views

The vulnerability of the SSL Certificate reliability checking package lies in the insufficient verification of data authenticity, allowing attackers to influence the integrity of the protected information.

The vulnerability of the SSL certificate integrity checking package is related to insufficient verification of data authenticity during the processing of the GLOBALTRUST root certificate. Exploiting this vulnerability could allow a malicious actor to influence the integrity of the protected...

7.8CVSS6.6AI score0.01049EPSS
SaveExploits0References6Affected Software3
BDU FSTEC
BDU FSTEC
added 2024/10/03 12:0 a.m.9 views

Vulnerability of Google Chrome and Microsoft Edge browser installers, allowing attackers to increase their privileges

The vulnerability of Google Chrome and Microsoft Edge browsers is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created link...

7.8CVSS7.2AI score0.00221EPSS
SaveExploits0References6Affected Software5
BDU FSTEC
BDU FSTEC
added 2024/10/03 12:0 a.m.9 views

The vulnerability of the Reverse Proxy Server Containous Traefik, due to insufficient verification of data authenticity, allows a hacker to execute arbitrary code.

The vulnerability of the Reverse Proxy Server of Containous Traefik is related to insufficient verification of data authenticity. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code using a specially created HTTP request...

10CVSS8.4AI score0.01513EPSS
SaveExploits0References6Affected Software1
Positive Technologies
Positive Technologies
added 2024/09/23 12:0 a.m.51 views

PT-2024-9226 · 2N · 2N Access Commander

Name of the Vulnerable Software and Affected Versions: 2N Access Commander versions 3.1.1.2 and prior Description: The issue is related to an Insufficient Verification of Data Authenticity, which could allow an attacker to escalate their privileges and gain root access to the system. This...

9CVSS7.7AI score0.0034EPSS
SaveExploits0References10
Rows per page
Query Builder