998 matches found
CVE-2026-103296 CAI Content Credentials | Improper Verification of Cryptographic Signature (CWE-347)
CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does no...
CVE-2026-95633 CAI Content Credentials | Improper Verification of Cryptographic Signature (CWE-347)
CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does no...
CVE-2026-95633
The CAI Content Credentials software is affected by an Improper Verification of Cryptographic Signature (CWE-347) vulnerability. An attacker can exploit this flaw to bypass security measures and obtain unauthorized write access without requiring any user interaction. The vulnerability results in ...
CVE-2026-102502
CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this issue...
CVE-2026-102502 CAI Content Credentials | Improper Verification of Cryptographic Signature (CWE-347)
CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this issue...
CVE-2026-102502 CAI Content Credentials | Improper Verification of Cryptographic Signature (CWE-347)
CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this issue...
CVE-2026-102502
CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature (CWE-347) vulnerability. This flaw could allow an attacker to bypass security measures and obtain unauthorized limited write access . Exploitation of this vulnerability does not require any user interaction...
CVE-2026-95632
CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does no...
CVE-2026-95632
The CAI Content Credentials software is affected by an Improper Verification of Cryptographic Signature (CWE-347) vulnerability. This flaw allows an attacker to bypass security measures and gain unauthorized write access without any user interaction. The documentation does not provide specific de...
CVE-2026-95632 CAI Content Credentials | Improper Verification of Cryptographic Signature (CWE-347)
CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does no...
CVE-2026-70071
Improper verification of cryptographic signature in DNS Server allows an authorized attacker to perform tampering locally...
CVE-2026-108971: Improper Verification of Cryptographic Signature
A flaw has been found in D-Link DCS-930L B1.08B4. This impacts the function mpfddecode of the file bootloaderregion.bin of the component Emergency HTTP Recovery Server. Executing a manipulation of the argument firmware can lead to improper verification of cryptographic signature. The attack may b...
PT-2026-113527
Name of the Vulnerable Software and Affected Versions CAI Content Credentials affected versions not specified Description An improper verification of cryptographic signatures allows for a security feature bypass. This issue enables an attacker to bypass security measures and obtain unauthorized...
PT-2026-113525
CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this issue...
PT-2026-113528
CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does no...
Security Bulletin: Multiple vulnerabilities addressed in IBM SevOne Network Performance Management for September 2026.
Summary IBM SevOne Network Performance Management has addressed these security vulnerabilities in the Data Insight DI component with a Service Pack update. Please understand that the new use of security bulletins represents a change in our communication process, not an increase in security...
CVE-2026-109359
Contrast 1.8.0 before 1.24.1 contains an improper verification vulnerability in Coordinator peer recovery that fails to confirm the serving peer uses the same manifest generation. Attackers with write access to manifest history can replay a superseded history head so withdrawn workloads obtain...
CVE-2026-85972
Progress MarkLogic Server versions 12.x (before 12.1.0) and 11.x (before 11.3.7) are vulnerable to improper Kerberos server verification . In specific password-based authentication configurations, the software fails to sufficiently verify the identity of the Kerberos authentication service. A net...
CVE-2026-85972 Improper Kerberos server verification in Progress MarkLogic Server
Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not sufficiently verify the identity of a Kerberos authentication service in certain password-based authentication configurations. A network-positioned attacker could impersonate trusted authentication...
EUVD-2026-97661
Contrast 1.8.0 before 1.24.1 contains an improper verification vulnerability in Coordinator peer recovery that fails to confirm the serving peer uses the same manifest generation. Attackers with write access to manifest history can replay a superseded history head so withdrawn workloads obtain...