Lucene search
+L

1270 matches found

NVD
NVD
added 2025/04/04 3:15 p.m.19 views

CVE-2025-31130

gitoxide is an implementation of git written in Rust. Before 0.42.0, gitoxide uses SHA-1 hash implementations without any collision detection, leaving it vulnerable to hash collision attacks. gitoxide uses the sha1smol or sha1 crate, both of which implement standard SHA-1 without any mitigations...

6.8CVSS0.0025EPSS
SaveExploits0References2
CVE
CVE
added 2025/04/04 2:41 p.m.277 views

CVE-2025-31130

gitoxide (Rust) before version 0.42.0 used SHA-1 implementations (sha1_smol/sha1) without collision detection, risking broken Git object integrity if two distinct objects shared a SHA-1 hash. The CVE-2025-31130 vulnerability is fixed in 0.42.0. Affected users should upgrade to 0.42.0 or later to ...

6.8CVSS6.5AI score0.0025EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/03/16 3:23 p.m.30 views

CVE-2024-47573

An improper validation of integrity check value vulnerability CWE-354 in FortiNDR version 7.4.2 and below, version 7.2.1 and below, version 7.1.1 and below, version 7.0.6 and below may allow an authenticated attacker with at least Read/Write permission on system maintenance to install a corrupted...

6.5CVSS7AI score0.0021EPSS
SaveExploits0References1
NVD
NVD
added 2025/03/14 3:15 p.m.20 views

CVE-2024-47573

An improper validation of integrity check value vulnerability CWE-354 in FortiNDR version 7.4.2 and below, version 7.2.1 and below, version 7.1.1 and below, version 7.0.6 and below may allow an authenticated attacker with at least Read/Write permission on system maintenance to install a corrupted...

6.5CVSS0.0021EPSS
SaveExploits0References1
CVE
CVE
added 2025/03/14 3:04 p.m.58 views

CVE-2024-47573

This CVE concerns FortiNDR where an improper validation of an integrity check value (CWE-354) in FortiNDR versions <= 7.4.2, <= 7.2.1, <= 7.1.1, and

6.5CVSS6.4AI score0.0021EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/03/14 3:04 p.m.18 views

CVE-2024-47573

An improper validation of integrity check value vulnerability CWE-354 in FortiNDR version 7.4.2 and below, version 7.2.1 and below, version 7.1.1 and below, version 7.0.6 and below may allow an authenticated attacker with at least Read/Write permission on system maintenance to install a corrupted...

6.5CVSS6.4AI score0.0021EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/03/14 3:04 p.m.32 views

CVE-2024-47573

An improper validation of integrity check value vulnerability CWE-354 in FortiNDR version 7.4.2 and below, version 7.2.1 and below, version 7.1.1 and below, version 7.0.6 and below may allow an authenticated attacker with at least Read/Write permission on system maintenance to install a corrupted...

6.5CVSS0.0021EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/03/14 12:00 a.m.26 views

Fortinet FortiNDR 安全漏洞

Fortinet FortiNDR is a network detection and response solution from Fortinet, Inc. A security vulnerability exists in Fortinet FortiNDR versions 7.4.2 and earlier, 7.2.1 and earlier, 7.1.1 and earlier, 7.0.6 and earlier, which stems from improper validation of the integrity check value and could...

6.5CVSS6.7AI score0.0021EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:00 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2023-38552

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When the Node.js policy feature checks the integrity of a resource against a trusted manifest, the application can intercept the operation and return a forged...

7.5CVSS7AI score0.01107EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:00 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2021-29507

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GENIVI Diagnostic Log and Trace DLT provides a log and trace interface. In versions of GENIVI DLT between 2.10.0 and 2.18.6, a configuration file containing the...

6.5CVSS6.6AI score0.00749EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/02/26 12:00 a.m.18 views

SunGrow WiNet-S 安全漏洞

The SunGrow WiNet-S is a LAN communication module from China's SunGrow Power SunGrow. A security vulnerability exists in SunGrow WiNet-S version V200.001.00.P025 and prior versions, which stems from a firmware upgrade that lacks integrity checking...

7.5CVSS6.8AI score0.00221EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/02/19 6:22 a.m.13 views

CVE-2024-47935

Improper Validation of Integrity Check Value vulnerability in TXOne Networks StellarProtect Legacy Mode, StellarEnforce, and Safe Lock allows an attacker to escalate their privileges in the victim’s device. The attacker needs to hijack the DLL file in advance. This issue affects StellarProtect...

6.7CVSS7.1AI score0.001EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/02/19 12:00 a.m.19 views

PT-2025-20492

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL dereference issue has been resolved in the Linux kernel. The problem occurs when malloc returns NULL due to low memory, causing the config pointer to be NULL. A check has been add...

5.5CVSS6.7AI score0.00282EPSS
SaveExploits0
Cvelist
Cvelist
added 2025/02/17 6:11 a.m.21 views

CVE-2024-47935 TXOne Networks StellarProtect (Legacy Mode), StellarEnforce, and Safe Lock Improper Validation of Integrity Check Value Vulnerability

Improper Validation of Integrity Check Value vulnerability in TXOne Networks StellarProtect Legacy Mode, StellarEnforce, and Safe Lock allows an attacker to escalate their privileges in the victim’s device. The attacker needs to hijack the DLL file in advance. This issue affects StellarProtect...

6.7CVSS0.001EPSS
SaveExploits0References1
CVE
CVE
added 2025/02/17 6:11 a.m.59 views

CVE-2024-47935

TXOne Networks' vulnerabilities CVE-2024-47935 affect StellarProtect (Legacy Mode) and StellarEnforce (before 3.2) and Safe Lock (3.0.0–3.1.1076). Root cause: improper validation of an integrity check value, requiring attackers to hijack a DLL to escalate privileges on the victim device. Impacted...

6.7CVSS7.2AI score0.001EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/02/17 12:00 a.m.11 views

PT-2025-6700 · Txone Networks · Stellarprotect +2

Name of the Vulnerable Software and Affected Versions: StellarProtect Legacy Mode versions prior to 3.2 StellarEnforce versions prior to 3.2 Safe Lock versions 3.0.0 through 3.1.1076 Description: The issue is related to improper validation of the integrity check value in TXOne Networks products,...

6.7CVSS7.4AI score0.001EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2025/02/15 6:23 a.m.13 views

CVE-2025-1058

CWE-494: Download of Code Without Integrity Check vulnerability exists that could render the device inoperable when malicious firmware is downloaded...

8.1CVSS7.1AI score0.00242EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/14 11:20 a.m.16 views

CVE-2024-27438

Download of Code Without Integrity Check vulnerability in Apache Doris. The jdbc driver files used for JDBC catalog is not checked and may resulting in remote command execution. Once the attacker is authorized to create a JDBC catalog, he/she can use arbitrary driver jar file with unchecked code...

9.8CVSS7.6AI score0.00962EPSS
SaveExploits0References1
NVD
NVD
added 2025/02/13 6:15 a.m.16 views

CVE-2025-1058

CWE-494: Download of Code Without Integrity Check vulnerability exists that could render the device inoperable when malicious firmware is downloaded...

8.1CVSS0.00242EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/02/13 5:45 a.m.8 views

CVE-2025-1058

CWE-494: Download of Code Without Integrity Check vulnerability exists that could render the device inoperable when malicious firmware is downloaded...

8.1CVSS7.5AI score0.00242EPSS
SaveExploits0References1
Rows per page
Query Builder