Lucene search
+L

729 matches found

Kitploit
Kitploit
•added 2026/09/26 12:37 p.m.•9 views

CVE-2017-9606

CVE-2017-9606 Debido a la insuficiente verificación de integridad, autenticidad y los bajos privilegios de usuario en la carpeta de actualización, un usuario local puede crear archivos de actualización ViPNet falsos con código de ejecución arbitrario y colocarlos en la carpeta de actualización de...

7.3CVSS7.5AI score0.00301EPSS
SaveExploits0
NVD
NVD
•added 2026/09/22 8:17 p.m.•19 views

CVE-2026-28324

SolarWinds Observability Self-Hosted was found to be affected by an unauthenticated remote code execution vulnerability due to the insufficient integrity checks. Installations configured in a non-default and non-secure configuration are affected...

9.8CVSS0.00654EPSS
SaveExploits0References4
CVE
CVE
•added 2026/09/22 7:11 p.m.•90 views

CVE-2026-28324

The SolarWinds Observability Self-Hosted platform is vulnerable to an unauthenticated remote code execution (RCE) vulnerability. The root cause is identified as insufficient integrity checks affecting installations configured in non-default and non-secure configurations . This vulnerability has a...

9.8CVSS6.2AI score0.00654EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/09/22 7:11 p.m.•16 views

EUVD-2026-84807

SolarWinds Observability Self-Hosted was found to be affected by an unauthenticated remote code execution vulnerability due to the insufficient integrity checks. Installations configured in a non-default and non-secure configuration are affected...

9.8CVSS6.2AI score0.00654EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/09/22 7:11 p.m.•61 views

CVE-2026-28324 SolarWinds Observability Self-Hosted Remote Code Execution Vulnerability

SolarWinds Observability Self-Hosted was found to be affected by an unauthenticated remote code execution vulnerability due to the insufficient integrity checks. Installations configured in a non-default and non-secure configuration are affected...

9.8CVSS0.00654EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/22 12:00 a.m.•4 views

CVE-2026-28324: Insufficient Verification of Data Authenticity

SolarWinds Observability Self-Hosted was found to be affected by an unauthenticated remote code execution vulnerability due to the insufficient integrity checks. Installations configured in a non-default and non-secure configuration are affected...

9.8CVSS6.2AI score0.00654EPSS
SaveExploits0References2
Redos
Redos
•added 2026/09/21 12:00 a.m.•7 views

ROS-20260921-73-0079

The vulnerability is related to the lack of integrity checks. Exploiting this vulnerability can allow an attacker to cause a service failure...

4.8CVSS6.2AI score0.00141EPSS
SaveExploits0
Cvelist
Cvelist
•added 2026/09/14 8:50 p.m.•37 views

CVE-2026-84533

A cryptographic issue was addressed with improved integrity checks. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, watchOS 27. An attacker in a privileged network position may be able to modify network traffic...

0.00165EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/09/14 8:50 p.m.•11 views

EUVD-2026-77894

A cryptographic issue was addressed with improved integrity checks. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, watchOS 27. An attacker in a privileged network position may be able to modify network traffic...

5.7AI score0.00165EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/09/14 12:00 a.m.•18 views

PT-2026-91595

A cryptographic issue was addressed with improved integrity checks. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, watchOS 27. An attacker in a privileged network position may be able to modify network traffic...

5.7AI score0.00165EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2026/08/20 12:00 a.m.•126 views

The vulnerability of the GSSAPI component of the PostgreSQL database management system, related to data type mixing errors, allows attackers to perform “man-in-the-middle” attacks.

The vulnerability of the GSSAPI component in the PostgreSQL database management system is related to the lack of integrity checks during the transmission of messages through the communication channel. Exploiting this vulnerability allows a malicious actor to carry out “man-in-the-middle” attacks...

5CVSS6.4AI score0.00066EPSS
SaveExploits0References3Affected Software2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/19 12:00 a.m.•2 views

CVE-2026-75569: Reliance on Insufficiently Trustworthy Component

A flaw was found in mce-operator-bundle. The build process fetches and executes scripts from a remote repository without performing integrity checks, such as commit pinning or signature verification. This allows a malicious actor with write access to the remote repository to inject and execute...

7.7CVSS6.4AI score0.00598EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/12 12:00 a.m.•0 views

CVE-2025-59324: Improper Verification of Cryptographic Signature

CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to properly validate LUKS encryption and, if encryption is present, all CryptoPro file integrity checks are skipped...

9.1CVSS5.7AI score0.00199EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/12 12:00 a.m.•2 views

CVE-2025-59327: Improper Verification of Cryptographic Signature

In CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4, bootxsa.efi fails to properly validate LUKS encryption and, if encryption is present, all CryptoPro file integrity checks are skipped...

7.5CVSS5.7AI score0.00194EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/08/12 12:00 a.m.•42 views

CVE-2025-59327

In CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4, bootxsa.efi fails to properly validate LUKS encryption and, if encryption is present, all CryptoPro file integrity checks are skipped...

0.00194EPSS
SaveExploits0References3
OSV
OSV
•added 2026/08/07 7:16 a.m.•14 views

UBUNTU-CVE-2026-12261

A vulnerability in nltk.downloader in nltk/nltk versions = 3.9.4 allows for cross-package resource and model poisoning. The downloader extracts package archives into shared namespaces such as corpora/ and taggers/ instead of package-isolated roots, and validates package integrity only after the...

6.5CVSS5.6AI score0.00205EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/08/07 6:25 a.m.•18 views

EUVD-2026-54393

A vulnerability in nltk.downloader in nltk/nltk versions = 3.9.4 allows for cross-package resource and model poisoning. The downloader extracts package archives into shared namespaces such as corpora/ and taggers/ instead of package-isolated roots, and validates package integrity only after the...

5.3CVSS5.8AI score0.00205EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/08/07 6:25 a.m.•50 views

CVE-2026-12261 Improper Access Control in nltk/nltk

A vulnerability in nltk.downloader in nltk/nltk versions = 3.9.4 allows for cross-package resource and model poisoning. The downloader extracts package archives into shared namespaces such as corpora/ and taggers/ instead of package-isolated roots, and validates package integrity only after the...

5.3CVSS0.00205EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/08/05 8:23 p.m.•11 views

CVE-2026-17583 Thermo Fisher Applied Biosystems Genetic Analyzers Missing Support for Integrity Check

The affected Thermo Fisher Applied Biosystems Genetic Analyzers are vulnerable because .fsa/.hid output files can be edited. An attacker could tamper with these files, altering DNA data and resulting in inaccurate DNA test outcomes...

8.4CVSS5.8AI score0.00141EPSS
SaveExploits1References3
CVE
CVE
•added 2026/08/05 8:23 p.m.•454 views

CVE-2026-17583

Summary (CVE-2026-17583) Thermo Fisher Applied Biosystems Genetic Analyzers are vulnerable to tampering of .fsa/.hid output files, enabling unauthorized modification of DNA test data before analysis. Demonstrations show tampering can merge two profiles into a single file and go undetected by anal...

8.4CVSS5.8AI score0.00141EPSS
SaveExploits1References3Affected Software8
Rows per page
Query Builder