Fortinet FortiMail和FortiClient 数据伪造问题漏洞

Fortinet FortiMail and FortiClient are both products of the U.S. Fitta Fortinet. fortiMail is a set of e-mail security gateway products. The product provides e-mail security and data protection features. FortiClient is a structure agent. Used to provide protection, compliance, and secure access i...

The vulnerability of microprogrammed software in STARDOM FCN/FCJ programmable logic controllers lies in insufficient data authenticity checking, allowing a intruder to execute arbitrary code.

The vulnerability of microprogrammed software in STARDOM FCN/FCJ programmable logic controllers is related to insufficient verification of data authenticity. Exploiting this vulnerability could allow an attacker operating remotely to execute arbitrary code...

The vulnerability of the SAP Business Objects Business Intelligence Platform, related to insufficient verification of data authenticity, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the SAP Business Objects Business Intelligence Platform is related to insufficient verification of data authenticity. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the “Private Browsing” function in the Mozilla Firefox browser, which allows a hacker to trigger a service failure.

The vulnerability of the “Private Browsing” function in the Mozilla Firefox browser is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow an attacker to induce a service failure...

The vulnerability of microprogrammed software in STARDOM FCN/FCJ programmable logic controllers is related to insufficient verification of data authenticity, allowing an intruder to gain full control over the device.

The vulnerability of microprogrammed software in STARDOM FCN/FCJ programmable logic controllers is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow an attacker operating remotely to gain full control over the device...

CVE-2022-2789

Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulnerable to CWE-345 Insufficient Verification of Data Authenticity, and can display logic that is different than the compiled logic...

CVE-2022-2789

Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulnerable to CWE-345 Insufficient Verification of Data Authenticity, and can display logic that is different than the compiled logic...

Design/Logic Flaw

Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulnerable to CWE-345 Insufficient Verification of Data Authenticity, and can display logic that is different than the compiled logic...

CVE-2022-2789

CVE-2022-2789 affects Emerson Proficy Machine Edition (engineering workstation) versions 9.00 and earlier (commonly cited as 9.00 and prior; some sources reference 9.80 and prior). Root cause: insufficient verification of data authenticity, allowing the PLC logic display to differ from the compil...

CVE-2022-2789

Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulnerable to CWE-345 Insufficient Verification of Data Authenticity, and can display logic that is different than the compiled logic...

CVE-2022-2789

Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulnerable to CWE-345 Insufficient Verification of Data Authenticity, and can display logic that is different than the compiled logic...

多款Emerson产品数据伪造问题漏洞

Emerson ROC800 and others are products of Emerson Corporation, U.S.A. Emerson ROC800 is a series of remote operation controllers.Emerson ROC800L is a series of remote operation controllers.Emerson DL8000 is a series of electronic preset controllers. A security vulnerability exists in the Emerson...

The vulnerability of the AAD Handler component in the Nimbus JOSE + JWT Java library, due to insufficient data authentication checks, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the AAD Handler component in the Nimbus JOSE + JWT Java library is related to insufficient verification of data authenticity. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information by uploading...

Design/Logic Flaw

Honeywell Experion PKS Safety Manager SM and FSC through 2022-05-06 has Insufficient Verification of Data Authenticity. According to FSCT-2022-0053, there is a Honeywell Experion PKS Safety Manager insufficient logic security controls issue. The affected components are characterized as: Honeywell...

CVE-2022-30315

CVE-2022-30315 affects Honeywell Experion PKS Safety Manager (SM and FSC) through 2022-05-06. The vulnerability stems from the unauthenticated Safety Builder protocol used to download control logic (block-by-block FLD code) to the CPU module, with no cryptographic authentication or memory protect...

CVE-2022-30315

Honeywell Experion PKS Safety Manager SM and FSC through 2022-05-06 has Insufficient Verification of Data Authenticity. According to FSCT-2022-0053, there is a Honeywell Experion PKS Safety Manager insufficient logic security controls issue. The affected components are characterized as: Honeywell...

CVE-2022-30316

Honeywell Experion PKS Safety Manager 5.02 has Insufficient Verification of Data Authenticity. According to FSCT-2022-0054, there is a Honeywell Experion PKS Safety Manager unauthenticated firmware update issue. The affected components are characterized as: Firmware update functionality. The...

CVE-2022-30316

Honeywell Experion PKS Safety Manager 5.02 is affected by CVE-2022-30316 due to Insufficient Verification of Data Authenticity in the firmware update flow. The flaw stems from unauthenticated firmware images and dependencies on insecure checksums, with firmware images unsigned. A serial interface...

Citrix ADC and Citrix Gateway Security Bulletin for CVE-2022-27509

A vulnerability has been discovered in Citrix ADC and Citrix Gateway which enables an attacker to create a specially crafted URL that redirects to a malicious website. This vulnerability has the following identifier: CVE-ID| Description| CWE| Pre-conditions ---|---|---|--- CVE-2022-27509|...

Western Digital My Cloud 安全漏洞

Western Digital My Cloud is a personal cloud storage device from Western Digital. A security vulnerability exists in the Western Digital My Cloud Web App. An attacker could exploit the vulnerability to compromise the integrity, confidentiality, and authenticity of transmitted information...