Lucene search
+L

17 matches found

Cvelist
Cvelist
•added 2026/10/11 9:45 a.m.•49 views

CVE-2026-108568 InstantSoft icms2 Billing paypal.php validatePaypalOrder data authenticity

A vulnerability was determined in InstantSoft icms2 up to 2.18.2. The affected element is the function validatePaypalOrder of the file system/controllers/billing/actions/paypal.php of the component Billing Module. Executing a manipulation of the argument bid/sig can lead to insufficient...

5.3CVSS0.00133EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2026/09/25 12:00 a.m.•14 views

Netty Insufficient Data Authenticity Code Execution

The vulnerability of the framework for developing network applications, servers, and client protocols using Netty is related to insufficient verification of data authenticity. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

10CVSS8.4AI score0.00292EPSS
SaveExploits0References14Affected Software10
NVD
NVD
•added 2026/09/17 3:16 p.m.•23 views

CVE-2026-26950

Dell SmartFabric Manager, versions prior to 2.2.1, contains an Insufficient Verification of Data Authenticity vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

8.8CVSS0.00166EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/09/14 12:00 a.m.•9 views

PT-2026-94126

Уязвимость реализации технологий конфиденциальных вычислений Intel TDX, Intel Scalable SGX и AMD SEV-SNP микропрограммного обеспечения процессоров Intel и AMD связана с недостаточной проверкой подлинности данных. Эксплуатация уязвимости может позволить нарушителю оказать воздействие на...

6.8CVSS5.8AI score
SaveExploits0References6
CVE
CVE
•added 2026/08/04 12:02 a.m.•107 views

CVE-2026-11836

The CVE concerns Caliptra Core ROM and Core Firmware in subsystem mode, where validate_debug_unlock_token() fails to bind the token to a specific device. An attacker with access to the integrator’s debug unlock signing service can unlock production debug on an unintended device by presenting a va...

1.8CVSS5.8AI score0.0011EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/05/02 12:00 a.m.•26 views

TRENDnet TEW-821DAP: Data Forgery Vulnerability

TRENDnet TEW-821DAP is a wireless access point from the company TRENDnet. The version TRENDnet TEW-821DAP 1.12B01 has a vulnerability related to data falsification. This vulnerability stems from improper handling of the parameter dest in the findHWid/newGuiUpdateFirmware function within the...

8.1CVSS5.4AI score0.0031EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2026/02/23 1:31 p.m.•24 views

CVE-2026-2385

The The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce plugin for WordPress is vulnerable to Insufficient Verification of Data Authenticity in all versions up to, and including, 6.4.7. This is due to the plugin decrypting and trusting...

5.3CVSS5.8AI score0.00172EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2025/11/26 12:00 a.m.•15 views

Jitsi Meet Electron Code Execution

The vulnerability of the Jitsi Meet Electron software lies in the insufficient verification of data authenticity. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.8CVSS8.3AI score0.01022EPSS
SaveExploits1References4Affected Software1
Tenable Nessus
Tenable Nessus
•added 2025/10/13 12:00 a.m.•15 views

F5 Networks BIG-IP : IPMI vulnerability (K000156992)

The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K000156992 advisory. AMI MegaRAC SPx12 and SPx13 devices have Insufficient Verification of Data Authenticity.CVE-2023-28863 Tenable has...

9.1CVSS8.3AI score0.0035EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/08/14 7:02 p.m.•46 views

CVE-2025-8978 D-Link DIR-619L boa FirmwareUpgrade data authenticity

A vulnerability was determined in D-Link DIR-619L 6.02CN02. Affected is the function FirmwareUpgrade of the component boa. The manipulation leads to insufficient verification of data authenticity. It is possible to launch the attack remotely. The complexity of an attack is rather high. The...

7.5CVSS0.00547EPSS
SaveExploits1References5
NVD
NVD
•added 2025/06/25 6:15 p.m.•25 views

CVE-2025-5833

Pioneer DMH-WT7600NEX Root Filesystem Insufficient Verification of Data Authenticity Vulnerability. This vulnerability allows physically present attackers to bypass authentication on affected installations of Pioneer DMH-WT7600NEX devices. Authentication is not required to exploit this...

6.8CVSS0.00261EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/02/07 1:40 p.m.•51 views

CVE-2025-1108 Insufficient data authenticity vulnerability in Janto

Insufficient data authenticity verification vulnerability in Janto, versions prior to r12. This allows an unauthenticated attacker to modify the content of emails sent to reset the password. To exploit the vulnerability, the attacker must create a POST request by injecting malicious content into...

8.6CVSS0.00211EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/09/23 12:00 a.m.•67 views

PT-2024-9226 · 2N · 2N Access Commander

Name of the Vulnerable Software and Affected Versions: 2N Access Commander versions 3.1.1.2 and prior Description: The issue is related to an Insufficient Verification of Data Authenticity, which could allow an attacker to escalate their privileges and gain root access to the system. This...

9CVSS7.7AI score0.00371EPSS
SaveExploits0References10
GithubExploit
GithubExploit
•added 2023/08/28 10:08 p.m.•28 views

Exploit for Insufficient Verification of Data Authenticity in Rarlab Winrar

CVE-2023-38831-winrar-expoit-simple-Poc Very important I h...

7.8CVSS7.1AI score0.99815EPSS
SaveExploits49
osv_cve
osv_cve
•added 2023/03/21 7:15 a.m.•21 views

CVE-2023-27982

A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists in the Data Server that could cause manipulation of dashboard files in the IGSS project report directory, when an attacker sends specific crafted messages to the Data Server TCP port, this could lead to remote code...

8.8CVSS6.3AI score0.00403EPSS
SaveExploits0References1
Prion
Prion
•added 2023/03/21 7:15 a.m.•41 views

Remote code execution

A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists in the Data Server that could cause manipulation of dashboard files in the IGSS project report directory, when an attacker sends specific crafted messages to the Data Server TCP port, this could lead to remote code...

6.8CVSS8.8AI score0.00403EPSS
SaveExploits0References1Affected Software3
attackerkb
attackerkb
•added 2022/02/07 12:00 a.m.•16 views

CVE-2022-22567

Select Dell Client Commercial and Consumer platforms are vulnerable to an insufficient verification of data authenticity vulnerability. An authenticated malicious user may exploit this vulnerability in order to install modified BIOS firmware...

5.1CVSS6.1AI score0.00138EPSS
SaveExploits0References2
Rows per page
Query Builder