755 matches found
The vulnerability of Johnson Controls VideoEdge network video recorder software lies in insufficient verification of data authenticity. This allows intruders to modify configuration files and trigger service failures.
The vulnerability of the Johnson Controls VideoEdge network video recorder software is related to insufficient verification of data authenticity. Exploiting this vulnerability could allow an intruder to modify configuration files and cause service failures...
The vulnerability of the IBM Aspera Faspex application’s configuration, related to insufficient data authenticity verification, allows a perpetrator to compromise the integrity of the protected information.
The vulnerability of the IBM Aspera Faspex file-sharing application relates to insufficient verification of data authenticity. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the protected information...
The vulnerability of the iPXE network loading standard implementation for the Cisco IOS XR operating system allows a hacker to load arbitrary files.
The vulnerability of the iPXE network loading standard implementation for the Cisco IOS XR operating system is related to insufficient verification of data authenticity during file loading. Exploiting this vulnerability could allow attackers to load arbitrary files...
Siemens RUGGEDCOM ROX II Insufficient Verification of Data Authenticity (CVE-2019-17006)
In Network Security Services NSS before 3.46, several cryptographic primitives had missing length checks. In cases where the application calling the library did not perform a sanity check on the inputs it could result in a crash due to a buffer overflow. This plugin only works with Tenable.ot...
The vulnerability of the IOCTL component of the AMD uProf software profiling tool allows a hacker to load an unsigned driver and execute arbitrary code.
The vulnerability of the IOCTL component of the AMD uProf software profiling tool is related to insufficient verification of data authenticity. Exploiting this vulnerability could allow an attacker to load unsigned drivers and execute arbitrary code...
CVE-2023-4589
Delinea Secret Server 10.9.000002 is affected by an insufficient verification of data authenticity vulnerability in its update mechanism. The root cause is that software updates lack digital signatures and do not validate update package integrity, allowing an attacker with administrator privilege...
Authentication flaw
ManageEngine ADSelfService Plus GINA Client Insufficient Verification of Data Authenticity Authentication Bypass Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of ManageEngine ADSelfService Plus. Authentication is not...
CVE-2023-35719 ManageEngine ADSelfService Plus GINA Client Insufficient Verification of Data Authenticity Authentication Bypass Vulnerability
ManageEngine ADSelfService Plus GINA Client Insufficient Verification of Data Authenticity Authentication Bypass Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of ManageEngine ADSelfService Plus. Authentication is not...
CVE-2023-35719 ManageEngine ADSelfService Plus GINA Client Insufficient Verification of Data Authenticity Authentication Bypass Vulnerability
ManageEngine ADSelfService Plus GINA Client Insufficient Verification of Data Authenticity Authentication Bypass Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of ManageEngine ADSelfService Plus. Authentication is not...
Honeywell Experion PKS, LX and PlantCruise Insufficient Verification of Data Authenticity (CVE-2023-25178)
Controller may be loaded with malicious firmware which could enable remote code execution This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid501611;...
Exploit for Insufficient Verification of Data Authenticity in Rarlab Winrar
CVE-2023-38831-winrar-expoit-simple-Poc Very important I h...
Exploit for Insufficient Verification of Data Authenticity in Rarlab Winrar
CVE-2023-38831 Vulnerable: WinRAR = 6.22 https://www.wi...
CODESYS Development System
1. EXECUTIVE SUMMARY CVSS v3 9.6 ATTENTION: Exploitable remotely/low attack complexity Vendor: CODESYS, GmbH Equipment: CODESYS Development System Vulnerability: Insufficient Verification of Data Authenticity. 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an...
CVE-2023-36541
Insufficient verification of data authenticity in Zoom Desktop Client for Windows before 5.14.5 may allow an authenticated user to enable an escalation of privilege via network access...
CVE-2023-36541
Insufficient verification of data authenticity in Zoom Desktop Client for Windows before 5.14.5 may allow an authenticated user to enable an escalation of privilege via network access...
Authorization
Insufficient verification of data authenticity in Zoom Desktop Client for Windows before 5.14.5 may allow an authenticated user to enable an escalation of privilege via network access...
CVE-2023-36541
Insufficient verification of data authenticity in Zoom Desktop Client for Windows before 5.14.5 may allow an authenticated user to enable an escalation of privilege via network access...
CVE-2023-36541
CVE-2023-36541 affects Zoom Desktop Client for Windows prior to 5.14.5. The issue is described as insufficient verification of data authenticity, enabling an authenticated user to escalate privileges via network access. Affected component: Zoom Desktop Client for Windows (Windows builds before 5....
The vulnerability of the CODESYS Development System, a programming platform for applications, stems from insufficient verification of data authenticity. This allows attackers to modify the content of notifications received via HTTP from the CODESYS notification server.
The vulnerability of the CODESYS Development System, a programming platform for applications, is related to insufficient verification of data authenticity. Exploiting this vulnerability could allow an attacker to modify the content of notifications received through HTTP from the CODESYS...
The vulnerability of the DevTools set of tools for web development in Google Chrome allows a hacker to circumvent existing navigation restrictions.
The vulnerability of the DevTools set of tools for web development in Google Chrome is related to insufficient verification of data authenticity. Exploiting this vulnerability could allow an attacker to circumvent existing navigation restrictions remotely...