755 matches found
CVE-2023-45586
CVE-2023-45586 affects Fortinet FortiOS SSL-VPN tunnel mode (and FortiProxy) across multiple branches: FortiOS 7.0.x prior to 7.0.12, 7.2.x prior to 7.2.7, and 7.4.x prior to 7.4.1; FortiProxy similarly 7.0.x prior to 7.0.13, 7.2.x prior to 7.2.7, and 7.4.x prior to 7.4.1. The issue permits an au...
CVE-2023-45586
An insufficient verification of data authenticity vulnerability CWE-345 in Fortinet FortiOS SSL-VPN tunnel mode version 7.4.0 through 7.4.1, version 7.2.0 through 7.2.7 and before 7.0.12 & FortiProxy SSL-VPN tunnel mode version 7.4.0 through 7.4.1, version 7.2.0 through 7.2.7 and before 7.0.13...
PT-2024-3555 · Fortinet · Fortiproxy +1
Name of the Vulnerable Software and Affected Versions: FortiOS versions 7.0.0 through 7.0.11 FortiOS versions 7.2.0 through 7.2.7 FortiOS versions 7.4.0 through 7.4.1 FortiProxy versions 7.0.0 through 7.0.12 FortiProxy versions 7.2.0 through 7.2.7 FortiProxy versions 7.4.0 through 7.4.1...
Siemens 多款产品 数据伪造问题漏洞
SIMATIC RTLS Locating Manager is used to configure, operate and maintain the SIMATIC RTLS unit, a real-time wireless positioning system that provides locating solutions. Siemens SIMATIC RTLS Locating Manager suffers from a Data Authenticity Validation Insufficiency vulnerability due to an affecte...
Insufficient Verification Of Data Authenticity
org.wildfly.security:wildfly-elytron-http-oidc is vulnerable to Insufficient Verification of Data Authenticity. The vulnerability is due to the session token caching logic when an OIDC app serving multiple tenants accesses a new tenant with a different OIDC configuration. This flaw occurs in...
The vulnerability of the extract() function in Outdoorbits Little-Backup-Box software, which allows a hacker to execute arbitrary code.
The vulnerability of the extract function in image and multimedia file backup software from Outdoorbits Little-Backup-Box is related to insufficient data authenticity checking. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
CVE-2023-35764
Insufficient verification of data authenticity issue in Survey Maker prior to 3.6.4 allows a remote unauthenticated attacker to spoof an IP address when posting...
CVE-2023-35764
Insufficient verification of data authenticity issue in Survey Maker prior to 3.6.4 allows a remote unauthenticated attacker to spoof an IP address when posting...
CVE-2023-35764
Insufficient verification of data authenticity issue in Survey Maker prior to 3.6.4 allows a remote unauthenticated attacker to spoof an IP address when posting...
CVE-2023-35764
Insufficient verification of data authenticity issue in Survey Maker prior to 3.6.4 allows a remote unauthenticated attacker to spoof an IP address when posting...
WordPress plugin Survey Maker 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
PT-2024-12510 · Unknown · Survey Maker
Name of the Vulnerable Software and Affected Versions: Survey Maker versions prior to 3.6.4 Description: The issue is related to insufficient verification of data authenticity, allowing a remote unauthenticated attacker to spoof an IP address when posting. Recommendations: For versions prior to...
Multiple vulnerabilities in WordPress Plugin "Survey Maker"
Overview WordPress Plugin "Survey Maker" provided by AYS Pro Plugins contains multiple vulnerabilities listed below. Stored cross-site scripting CWE-79 - CVE-2023-34423 Insufficient verification of data authenticity CWE-345 - CVE-2023-35764 Atsuya Yoda of GMO Cybersecurity by Ierae, Inc. reported...
JVN#51098626: Multiple vulnerabilities in WordPress Plugin "Survey Maker"
WordPress Plugin "Survey Maker" provided by AYS Pro Plugins contains multiple vulnerabilities listed below. Stored cross-site scripting CWE-79 - CVE-2023-34423 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N| Base Score: 6.1 CVSS v2|...
The vulnerability of the Assets Discovery agent (formerly Insight Discovery), a data processing product of Atlassian Jira Service Management Data Center and Server, as well as Cloud, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the Assets Discovery agent previously known as Insight Discovery of Atlassian’s Jira Service Management Data Center and Server products and Cloud solutions is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow a malicious actor ...
The vulnerability of the SMB2 packet signing mechanism in the Samba networking communication software allows a attacker to execute a type of “man-in-the-middle” attack.
The vulnerability of the SMB2 packet signing mechanism in the Samba network communication software is related to insufficient verification of data authenticity. Exploiting this vulnerability allows a malicious actor to act remotely...
MikroTik RouterOS Insufficient Verification of Data Authenticity (CVE-2019-3979)
RouterOS versions 6.45.6 Stable, 6.44.5 Long-term, and below are vulnerable to a DNS unrelated data attack. The router adds all A records to its DNS cache even when the records are unrelated to the domain that was queried. Therefore, a remote attacker controlled DNS server can poison the router's...
CVE-2023-20576
A vulnerability was found in AMD hardware due to insufficient verification of data authenticity in AGESA. This issue may allow a local unauthenticated attacker to update SPI ROM data, potentially resulting in denial of service or privilege escalation. Mitigation Mitigation for this issue is eithe...
