Lucene search
+L

1008 matches found

Cvelist
Cvelist
•added 2021/10/28 12:31 p.m.•38 views

CVE-2021-22460

A component of the HarmonyOS has a Insufficient Verification of Data Authenticity vulnerability. Local attackers may exploit this vulnerability to bypass the control mechanism...

5.7AI score0.00108EPSS
SaveExploits0References1
CVE
CVE
•added 2021/10/28 12:31 p.m.•75 views

CVE-2021-22460

HarmonyOS vulnerability CVE-2021-22460 involves insufficient verification of data authenticity in a HarmonyOS component. The issue enables a local attacker to bypass control mechanisms. Affected versions are HarmonyOS prior to 2.0 (per connected Red Hat/CNVD/CNNVD entries). The exact vulnerable c...

5.5CVSS5.4AI score0.00108EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/10/28 12:00 a.m.•7 views

CVE-2021-22460: Insufficient Verification of Data Authenticity

A component of the HarmonyOS has a Insufficient Verification of Data Authenticity vulnerability. Local attackers may exploit this vulnerability to bypass the control mechanism...

5.5CVSS5.8AI score0.00108EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/10/28 12:00 a.m.•15 views

Huawei HarmonyOS 数据伪造问题漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security bypass vulnerability exists in HarmonyOS versions prior to 2.0, where a component of HarmonyOS does not adequately validate data authenticity...

5.5CVSS5.7AI score0.00108EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/10/28 12:00 a.m.•6 views

PT-2021-15076

Name of the Vulnerable Software and Affected Versions: HarmonyOS affected versions not specified Description: A component of the HarmonyOS has an Insufficient Verification of Data Authenticity issue. Local attackers may exploit this to bypass the control mechanism. Recommendations: At the moment,...

5.5CVSS0.00108EPSS
SaveExploits0References4
Huntr
Huntr
•added 2021/10/05 2:26 p.m.•20 views

Use of a Broken or Risky Cryptographic Algorithm in anonaddy/anonaddy

Description MD5 and SHA-1 are popular cryptographic hash algorithms often used to verify the integrity of messages and other data. Recent advances in cryptanalysis have discovered weaknesses in both algorithms. Consequently, MD5 and SHA-1 should no longer be relied upon to verify the authenticity...

0.2AI score
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2021/09/17 12:00 a.m.•20 views

The vulnerability of the SSH protocol implementation in the cryptographic security tool PuTTY allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the SSH protocol implementation in the cryptography security tool PuTTY is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

8.1CVSS7.5AI score0.01106EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
•added 2021/09/03 12:00 a.m.•15 views

The vulnerability of the Adobe Download Manager administrator, related to insufficient verification of data authenticity, allows attackers to enhance their privileges.

The vulnerability of the Adobe Download Manager’s download manager is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow an attacker operating remotely to enhance their privileges...

10CVSS7.7AI score0.03311EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2021/08/26 12:00 a.m.•17 views

The vulnerability of microprogrammed software for Modicon M218, M218, M241, M251, and M258 logic controllers lies in insufficient data authenticity checking, allowing attackers to execute arbitrary codes.

The vulnerability of microprogrammed software in Modicon M218, M218, M241, M251, and M258 logic controllers is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow an attacker operating remotely to execute arbitrary codes...

5.4CVSS8.1AI score0.00692EPSS
SaveExploits0References2Affected Software4
OSV
OSV
•added 2021/08/25 12:15 p.m.•15 views

CVE-2021-33885

An Insufficient Verification of Data Authenticity vulnerability in B. Braun SpaceCom2 prior to 012U000062 allows a remote unauthenticated attacker to send the device malicious data that will be used in place of the correct data. This results in full system command access and execution because of...

9.8CVSS7.7AI score0.0558EPSS
SaveExploits1References2
Prion
Prion
•added 2021/08/25 12:15 p.m.•34 views

Design/Logic Flaw

An Insufficient Verification of Data Authenticity vulnerability in B. Braun SpaceCom2 prior to 012U000062 allows a remote unauthenticated attacker to send the device malicious data that will be used in place of the correct data. This results in full system command access and execution because of...

10CVSS9.6AI score0.0558EPSS
SaveExploits1References2Affected Software1
attackerkb
attackerkb
•added 2021/08/25 12:15 p.m.•12 views

CVE-2021-33885

An Insufficient Verification of Data Authenticity vulnerability in B. Braun SpaceCom2 prior to 012U000062 allows a remote unauthenticated attacker to send the device malicious data that will be used in place of the correct data. This results in full system command access and execution because of...

10CVSS7.6AI score0.0558EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2021/08/25 11:38 a.m.•41 views

CVE-2021-33885

An Insufficient Verification of Data Authenticity vulnerability in B. Braun SpaceCom2 prior to 012U000062 allows a remote unauthenticated attacker to send the device malicious data that will be used in place of the correct data. This results in full system command access and execution because of...

10CVSS9.7AI score0.0558EPSS
SaveExploits1References2
CVE
CVE
•added 2021/08/25 11:38 a.m.•74 views

CVE-2021-33885

CVE-2021-33885 is a vulnerability in B. Braun SpaceCom2 before 012U000062 (CWE-345, Insufficient Verification of Data Authenticity). A remote, unauthenticated attacker can send malicious data that is used in place of correct data, enabling full system command access and execution due to the lack ...

10CVSS9.6AI score0.0558EPSS
SaveExploits1References2Affected Software1
The Hacker News
The Hacker News
•added 2021/08/25 10:28 a.m.•63 views

B. Braun Infusomat Pumps Could Let Attackers Remotely Alter Medication Dosages

Cybersecurity researchers have disclosed five previously unreported security vulnerabilities affecting B. Braun's Infusomat Space Large Volume Pump and SpaceStation that could be abused by malicious parties to tamper with medication doses without any prior authentication. McAfee, which discovered...

10CVSS0.4AI score0.0558EPSS
SaveExploits4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/25 12:00 a.m.•8 views

CVE-2021-33885: Improper Verification of Cryptographic Signature

An Insufficient Verification of Data Authenticity vulnerability in B. Braun SpaceCom2 prior to 012U000062 allows a remote unauthenticated attacker to send the device malicious data that will be used in place of the correct data. This results in full system command access and execution because of...

10CVSS6.1AI score0.0558EPSS
SaveExploits1References2
Snyk
Snyk
•added 2021/08/12 3:15 p.m.•7 views

Insufficient Verification of Data Authenticity

Overview Affected versions of this package are vulnerable to Insufficient Verification of Data Authenticity wolfSSL before 4.8.1 incorrectly skips OCSP verification in certain situations of irrelevant response data that contains the NoCheck extension. Remediation Upgrade wolfssl to version 4.8.1 ...

5.9CVSS6.9AI score0.00483EPSS
SaveExploits0References2
OSV
OSV
•added 2021/08/03 6:15 p.m.•14 views

CVE-2021-22419

A component of the HarmonyOS has a Insufficient Verification of Data Authenticity vulnerability. Local attackers may exploit this vulnerability to cause persistent dos...

5.5CVSS5.8AI score0.00102EPSS
SaveExploits0References1
NVD
NVD
•added 2021/08/03 6:15 p.m.•32 views

CVE-2021-22419

A component of the HarmonyOS has a Insufficient Verification of Data Authenticity vulnerability. Local attackers may exploit this vulnerability to cause persistent dos...

5.5CVSS0.00102EPSS
SaveExploits0References1
Prion
Prion
•added 2021/08/03 6:15 p.m.•29 views

Design/Logic Flaw

A component of the HarmonyOS has a Insufficient Verification of Data Authenticity vulnerability. Local attackers may exploit this vulnerability to cause persistent dos...

4.9CVSS5.4AI score0.00102EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder