Lucene search
+L

755 matches found

BDU FSTEC
BDU FSTEC
added 2023/09/28 12:0 a.m.12 views

The vulnerability of Johnson Controls VideoEdge network video recorder software lies in insufficient verification of data authenticity. This allows intruders to modify configuration files and trigger service failures.

The vulnerability of the Johnson Controls VideoEdge network video recorder software is related to insufficient verification of data authenticity. Exploiting this vulnerability could allow an intruder to modify configuration files and cause service failures...

7.1CVSS5.9AI score0.0011EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/09/19 12:0 a.m.5 views

The vulnerability of the IBM Aspera Faspex application’s configuration, related to insufficient data authenticity verification, allows a perpetrator to compromise the integrity of the protected information.

The vulnerability of the IBM Aspera Faspex file-sharing application relates to insufficient verification of data authenticity. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the protected information...

5.3CVSS7.2AI score0.00314EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/09/19 12:0 a.m.8 views

The vulnerability of the iPXE network loading standard implementation for the Cisco IOS XR operating system allows a hacker to load arbitrary files.

The vulnerability of the iPXE network loading standard implementation for the Cisco IOS XR operating system is related to insufficient verification of data authenticity during file loading. Exploiting this vulnerability could allow attackers to load arbitrary files...

6.8CVSS7.3AI score0.00095EPSS
Exploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2023/09/14 12:0 a.m.30 views

Siemens RUGGEDCOM ROX II Insufficient Verification of Data Authenticity (CVE-2019-17006)

In Network Security Services NSS before 3.46, several cryptographic primitives had missing length checks. In cases where the application calling the library did not perform a sanity check on the inputs it could result in a crash due to a buffer overflow. This plugin only works with Tenable.ot...

10CVSS6.9AI score0.03596EPSS
Exploits1References6
BDU FSTEC
BDU FSTEC
added 2023/09/13 12:0 a.m.6 views

The vulnerability of the IOCTL component of the AMD uProf software profiling tool allows a hacker to load an unsigned driver and execute arbitrary code.

The vulnerability of the IOCTL component of the AMD uProf software profiling tool is related to insufficient verification of data authenticity. Exploiting this vulnerability could allow an attacker to load unsigned drivers and execute arbitrary code...

7.8CVSS7.5AI score0.0115EPSS
Exploits2References3Affected Software1
CVE
CVE
added 2023/09/06 11:48 a.m.34 views

CVE-2023-4589

Delinea Secret Server 10.9.000002 is affected by an insufficient verification of data authenticity vulnerability in its update mechanism. The root cause is that software updates lack digital signatures and do not validate update package integrity, allowing an attacker with administrator privilege...

9.1CVSS7.4AI score0.00267EPSS
Exploits0References1Affected Software1
Prion
Prion
added 2023/09/06 5:15 a.m.22 views

Authentication flaw

ManageEngine ADSelfService Plus GINA Client Insufficient Verification of Data Authenticity Authentication Bypass Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of ManageEngine ADSelfService Plus. Authentication is not...

4.6CVSS7AI score0.26426EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/09/06 4:3 a.m.13 views

CVE-2023-35719 ManageEngine ADSelfService Plus GINA Client Insufficient Verification of Data Authenticity Authentication Bypass Vulnerability

ManageEngine ADSelfService Plus GINA Client Insufficient Verification of Data Authenticity Authentication Bypass Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of ManageEngine ADSelfService Plus. Authentication is not...

6.8CVSS7.6AI score0.26426EPSS
Exploits0References2
Cvelist
Cvelist
added 2023/09/06 4:3 a.m.40 views

CVE-2023-35719 ManageEngine ADSelfService Plus GINA Client Insufficient Verification of Data Authenticity Authentication Bypass Vulnerability

ManageEngine ADSelfService Plus GINA Client Insufficient Verification of Data Authenticity Authentication Bypass Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of ManageEngine ADSelfService Plus. Authentication is not...

6.8CVSS7.2AI score0.26426EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2023/09/05 12:0 a.m.19 views

Honeywell Experion PKS, LX and PlantCruise Insufficient Verification of Data Authenticity (CVE-2023-25178)

Controller may be loaded with malicious firmware which could enable remote code execution This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid501611;...

9.8CVSS8.5AI score0.0052EPSS
Exploits0References3
GithubExploit
GithubExploit
added 2023/08/28 10:8 p.m.19 views

Exploit for Insufficient Verification of Data Authenticity in Rarlab Winrar

CVE-2023-38831-winrar-expoit-simple-Poc Very important I h...

7.8CVSS7.2AI score0.97798EPSS
Exploits49
GithubExploit
GithubExploit
added 2023/08/28 2:48 p.m.100 views

Exploit for Insufficient Verification of Data Authenticity in Rarlab Winrar

CVE-2023-38831 Vulnerable: WinRAR = 6.22 https://www.wi...

7.8CVSS7.3AI score0.97798EPSS
Exploits49
ICS
ICS
added 2023/08/24 6:0 a.m.39 views

CODESYS Development System

1. EXECUTIVE SUMMARY CVSS v3 9.6 ATTENTION: Exploitable remotely/low attack complexity Vendor: CODESYS, GmbH Equipment: CODESYS Development System Vulnerability: Insufficient Verification of Data Authenticity. 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an...

8.8CVSS9.2AI score0.01034EPSS
Exploits0References10
NVD
NVD
added 2023/08/08 6:15 p.m.26 views

CVE-2023-36541

Insufficient verification of data authenticity in Zoom Desktop Client for Windows before 5.14.5 may allow an authenticated user to enable an escalation of privilege via network access...

8.8CVSS8.5AI score0.00455EPSS
Exploits0References1
OSV
OSV
added 2023/08/08 6:15 p.m.3 views

CVE-2023-36541

Insufficient verification of data authenticity in Zoom Desktop Client for Windows before 5.14.5 may allow an authenticated user to enable an escalation of privilege via network access...

8.8CVSS5.8AI score0.00455EPSS
Exploits0References1
Prion
Prion
added 2023/08/08 6:15 p.m.28 views

Authorization

Insufficient verification of data authenticity in Zoom Desktop Client for Windows before 5.14.5 may allow an authenticated user to enable an escalation of privilege via network access...

6.5CVSS8.7AI score0.00455EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/08/08 5:27 p.m.14 views

CVE-2023-36541

Insufficient verification of data authenticity in Zoom Desktop Client for Windows before 5.14.5 may allow an authenticated user to enable an escalation of privilege via network access...

8CVSS7.1AI score0.00455EPSS
Exploits0References1
CVE
CVE
added 2023/08/08 5:27 p.m.53 views

CVE-2023-36541

CVE-2023-36541 affects Zoom Desktop Client for Windows prior to 5.14.5. The issue is described as insufficient verification of data authenticity, enabling an authenticated user to escalate privileges via network access. Affected component: Zoom Desktop Client for Windows (Windows builds before 5....

8.8CVSS8.8AI score0.00455EPSS
Exploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/08/08 12:0 a.m.11 views

The vulnerability of the CODESYS Development System, a programming platform for applications, stems from insufficient verification of data authenticity. This allows attackers to modify the content of notifications received via HTTP from the CODESYS notification server.

The vulnerability of the CODESYS Development System, a programming platform for applications, is related to insufficient verification of data authenticity. Exploiting this vulnerability could allow an attacker to modify the content of notifications received through HTTP from the CODESYS...

10CVSS7.2AI score0.01034EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/08/07 12:0 a.m.6 views

The vulnerability of the DevTools set of tools for web development in Google Chrome allows a hacker to circumvent existing navigation restrictions.

The vulnerability of the DevTools set of tools for web development in Google Chrome is related to insufficient verification of data authenticity. Exploiting this vulnerability could allow an attacker to circumvent existing navigation restrictions remotely...

7.8CVSS6.5AI score0.003EPSS
Exploits1References4Affected Software2
Rows per page
Query Builder