943 matches found
Improper Verification of Cryptographic Signature
Overview Affected versions of this package are vulnerable to Improper Verification of Cryptographic Signature which allow HMAC verification with ANY asymmetric public key. If the' algorithm' field is left unspecified, an attacker can manipulate the verification process by exploiting the flexibili...
CVE-2024-1721
Improper Verification of Cryptographic Signature vulnerability in HYPR Passwordless on Windows allows Malicious Software Update.This issue affects HYPR Passwordless: before 9.1...
CVE-2024-1721: Improper Verification of Cryptographic Signature
Improper Verification of Cryptographic Signature vulnerability in HYPR Passwordless on Windows allows Malicious Software Update.This issue affects HYPR Passwordless: before 9.1...
CVE-2024-27244: Improper Verification of Cryptographic Signature
Insufficient verification of data authenticity in the installer for Zoom Workplace VDI App for Windows may allow an authenticated user to conduct an escalation of privilege via local access...
CVE-2024-20870
Improper verification of intent by broadcast receiver vulnerability in Galaxy Store prior to version 4.5.71.8 allows local attackers to write arbitrary files with the privilege of Galaxy Store...
CVE-2024-20870
CVE-2024-20870 affects Samsung Galaxy Store; prior to version 4.5.71.8 it allows a local attacker to write arbitrary files via a broadcast receiver that improperly validates intent. The root cause is improper verification of intent by the broadcast receiver. Impact is privilege escalation to Gala...
PT-2024-3999
Name of the Vulnerable Software and Affected Versions GNOME GLib versions prior to 2.78.5 GNOME GLib versions 2.79.x GNOME GLib versions 2.80.x prior to 2.80.1 Description An issue was discovered in GNOME GLib where a GDBus-based client subscribing to signals from a trusted system service, such a...
CVE-2024-20870: Undefined Security Weakness
Improper verification of intent by broadcast receiver vulnerability in Galaxy Store prior to version 4.5.71.8 allows local attackers to write arbitrary files with the privilege of Galaxy Store...
CVE-2024-32962 XML signature verification bypass due improper verification of signature / signature spoofing
xml-crypto is an xml digital signature and encryption library for Node.js. In affected versions the default configuration does not check authorization of the signer, it only checks the validity of the signature per section 3.2.2 of the w3 xmldsig-core-20080610 spec. As such, without additional...
CVE-2024-32962: Improper Verification of Cryptographic Signature
xml-crypto is an xml digital signature and encryption library for Node.js. In affected versions the default configuration does not check authorization of the signer, it only checks the validity of the signature per section 3.2.2 of the w3 xmldsig-core-20080610 spec. As such, without additional...
Improper Signature Validation
python-jose is vulnerable to Improper Signature Validation. This vulnerability is due to improper verification of OpenSSH ECDSA keys along with other key formats, allowing attackers to bypass security measures or manipulate cryptographic functions by submitting crafted signatures with a specific...
CVE-2022-35503
Open Source MANO versions v7 through v12 are vulnerable to arbitrary code execution due to improper verification of user input. An authenticated attacker can exploit this by using a Virtual Network Function (VNF) descriptor to execute code within the LCM module container . Successful exploitation...
CVE-2024-26194: Improper Verification of Cryptographic Signature
Secure Boot Security Feature Bypass Vulnerability...
CVE-2024-27247: Improper Verification of Cryptographic Signature
Improper privilege management in the installer for Zoom Desktop Client for macOS before version 5.17.10 may allow a privileged user to conduct an escalation of privilege via local access...
CVE-2024-26228: Improper Verification of Cryptographic Signature
Windows Cryptographic Services Security Feature Bypass Vulnerability...
The vulnerability of the OSBuild Composer service, related to improper verification of the cryptographic signature, allows a hacker to execute a “man-in-the-middle” attack.
The vulnerability of the OSBuild Composer service for creating system load images is related to improper verification of the cryptographic signature. Exploiting this vulnerability could allow a attacker to execute a “man-in-the-middle” attack...
CVE-2023-52538: Improper Verification of Cryptographic Signature
Vulnerability of package name verification being bypassed in the HwIms module. Impact: Successful exploitation of this vulnerability will affect availability...
Authentication Bypass
causal/oidc is vulnerable to Authentication Bypass. The vulnerability is due to improper verification of the OpenID Connect authentication state from the user lookup chain, leading to authentication of any valid frontend user with a non-empty "txoidc" field...
CVE-2023-52043: Improper Verification of Cryptographic Signature
An issue in D-Link COVR 1100, 1102, 1103 AC1200 Dual-Band Whole-Home Mesh Wi-Fi System Hardware Rev B1 truncates Wireless Access Point Passwords WPA-PSK allowing an attacker to gain unauthorized network access via weak authentication controls...