The vulnerability of SELinux’s mandatory access control system, combined with Linux Security Modules (LSM) in operating system kernels, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of SELinux’s mandatory access control system, along with the Linux Security Modules LSM modules in the operating system kernel, is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow an attacker to gain unauthorized access to...

The vulnerability of the dev_open() function in the software package for viewing television programs on PC LinuxTV Xawtv allows a intruder to gain unauthorized access to protected information.

The vulnerability of the devopen function in the PC LinuxTV Xawtv software package for viewing television programs is related to insufficient verification of data authenticity. Exploiting this vulnerability could allow an intruder to gain unauthorized access to protected information...

The vulnerability in the kernel compilation process of Ubuntu-based operating systems allows a attacker to execute a type of attack known as “man-in-the-middle” attack.

The vulnerability of the kernel compilation process for Ubuntu-based operating systems is related to insufficient verification of data authenticity. Exploiting this vulnerability allows a remote attacker to execute a “man-in-the-middle” attack using a specially crafted malware package...

The vulnerability of the software for Cisco WebEx Business Suite web conferencing solutions, related to insufficient verification of data authenticity, allows attackers to execute “man-in-the-middle” attacks.

The vulnerability of the software for Cisco WebEx Business Suite-related web conferencing services is related to insufficient verification of data authenticity. Exploiting this vulnerability could allow a malicious actor to carry out a “man-in-the-middle” attack...

The vulnerability of Firefox browser, related to insufficient verification of data authenticity, allows attackers to compromise data integrity.

The vulnerability of the Firefox browser is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow a remote attacker to compromise the integrity of data...

CVE-2020-7487

A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists which could allow the attacker to execute malicious code on the Modicon M218, M241, M251, and M258 controllers...

Design/Logic Flaw

A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists which could allow the attacker to execute malicious code on the Modicon M218, M241, M251, and M258 controllers...

CVE-2020-7487

The CVE-2020-7487 entry concerns Schneider Electric Modicon M218, M241, M251, and M258 controllers affected by CWE-345: Insufficient Verification of Data Authenticity. The Red Hat/NVD-related and Tenable/NASL data in connected documents corroborate that this is a data-authenticity issue allowing ...

CVE-2020-7487

A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists which could allow the attacker to execute malicious code on the Modicon M218, M241, M251, and M258 controllers...

The vulnerability of the RADIUS server FreeRADIUS, related to insufficient verification of data authenticity, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the RADIUS-server FreeRADIUS is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

A vulnerability in the anycast function of the Cisco NX-OS operating system, which allows a attacker to compromise the integrity of protected information.

The vulnerability in the anycast function of the Cisco NX-OS operating system is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow a malicious actor to compromise the integrity of protected information...

CVE-2019-18905

A Insufficient Verification of Data Authenticity vulnerability in autoyast2 of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15 allows remote attackers to MITM connections when deprecated and unused functionality of autoyast is used to create images. This issue affects: SUSE Linux...

CVE-2019-18905

A Insufficient Verification of Data Authenticity vulnerability in autoyast2 of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15 allows remote attackers to MITM connections when deprecated and unused functionality of autoyast is used to create images. This issue affects: SUSE Linux...

Design/Logic Flaw

A Insufficient Verification of Data Authenticity vulnerability in autoyast2 of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15 allows remote attackers to MITM connections when deprecated and unused functionality of autoyast is used to create images. This issue affects: SUSE Linux...

CVE-2019-18905 Deprecated functionality in autoyast2 automatically imports gpg keys without checking them

A Insufficient Verification of Data Authenticity vulnerability in autoyast2 of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15 allows remote attackers to MITM connections when deprecated and unused functionality of autoyast is used to create images. This issue affects: SUSE Linux...

CVE-2019-18905

CVE-2019-18905 describes an insufficient verification of data authenticity in autoyast2 for SUSE Linux Enterprise Server 12 (autoyast2 4.1.9-3.9.1 and earlier) and SLES 15 (autoyast2 4.0.70-3.20.1 and earlier). This could enable a remote attacker to perform MITM when deprecated/unused autoyast fu...

CVE-2019-17654

An Insufficient Verification of Data Authenticity vulnerability in FortiManager 6.2.1, 6.2.0, 6.0.6 and below may allow an unauthenticated attacker to perform a Cross-Site WebSocket Hijacking CSWSH attack...

CVE-2019-17654

An Insufficient Verification of Data Authenticity vulnerability in FortiManager 6.2.1, 6.2.0, 6.0.6 and below may allow an unauthenticated attacker to perform a Cross-Site WebSocket Hijacking CSWSH attack...

Cross site scripting

An Insufficient Verification of Data Authenticity vulnerability in FortiManager 6.2.1, 6.2.0, 6.0.6 and below may allow an unauthenticated attacker to perform a Cross-Site WebSocket Hijacking CSWSH attack...

CVE-2019-17654

CVE-2019-17654 pertains to FortiManager: an insufficient verification of data authenticity vulnerability could allow an unauthenticated attacker to perform a Cross-Site WebSocket Hijacking (CSWSH) attack. Affected products/versions are FortiManager 6.2.1, 6.2.0, 6.0.6 and below. The connected doc...