Lucene search
+L

1270 matches found

Vulnrichment
Vulnrichment
added 2025/02/13 5:45 a.m.8 views

CVE-2025-1058

CWE-494: Download of Code Without Integrity Check vulnerability exists that could render the device inoperable when malicious firmware is downloaded...

8.1CVSS7.5AI score0.00242EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/02/13 5:45 a.m.24 views

CVE-2025-1058

CWE-494: Download of Code Without Integrity Check vulnerability exists that could render the device inoperable when malicious firmware is downloaded...

8.1CVSS0.00242EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/06 3:45 a.m.26 views

CVE-2021-26608

An arbitrary file download and execution vulnerability was found in the HShell.dll of handysoft Co., Ltd groupware ActiveX module. This issue is due to missing support for integrity check of download URL or downloaded file hash...

9.8CVSS7AI score0.00595EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/06 3:36 a.m.11 views

CVE-2021-26610

The moveuploadedfile function in godomall5 does not perform an integrity check of extension or authority when user upload file. This vulnerability allows an attacker to execute an remote arbitrary code...

8.8CVSS7.3AI score0.00453EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/06 3:22 a.m.19 views

CVE-2021-35082

Improper integrity check can lead to race condition between tasks PDCP and RRC? right after a valid RRC security mode command packet has been received in Snapdragon Industrial IOT...

9.3CVSS7.3AI score0.00502EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 9:46 a.m.13 views

CVE-2024-30206

A vulnerability has been identified in SIMATIC RTLS Locating Manager 6GT2780-0DA00 All versions V3.0.1.1, SIMATIC RTLS Locating Manager 6GT2780-0DA10 All versions V3.0.1.1, SIMATIC RTLS Locating Manager 6GT2780-0DA20 All versions V3.0.1.1, SIMATIC RTLS Locating Manager 6GT2780-0DA30 All versions...

8.8CVSS6.8AI score0.00307EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2025/02/05 12:00 a.m.12 views

F5 Networks BIG-IP : BIG-IP APM endpoint inspection vulnerability (K000139656)

The version of F5 Networks BIG-IP installed on the remote host is prior to 16.1.5 / 17.1.2 / Hotfix- BIGIP-15.1.10.6.0.11.6-ENG.iso. It is, therefore, affected by a vulnerability as referenced in the K000139656 advisory. A missing integrity check vulnerability exists in BIG-IP APM access policy...

3.1CVSS6.1AI score0.0014EPSS
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins
added 2025/01/30 7:09 a.m.15 views

Security Bulletin: Vulnerability in OpenSSH affects watsonx.data

Summary The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks . This could affect watsonx.data. Vulnerability Details CVEID:CVE-2023-48795 DESCRIPTION: The SSH transport protocol with certain...

5.9CVSS7.1AI score0.93305EPSS
SaveExploits4Affected Software1
Rosalinux
Rosalinux
added 2025/01/28 6:49 p.m.30 views

Advisory ROSA-SA-2025-2638

software: heimdal 7.8.0 WASP: ROSA-CHROME packageevrstring: heimdal-7.8.0-2 CVE-ID: CVE-2022-45142 BDU-ID: 2023-02156 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the Kerberos5 heimdal protocol implementation is related to incorrect validation of the integrity check value. Exploitation of the...

7.5CVSS7.4AI score0.00491EPSS
SaveExploits0
CNVD
CNVD
added 2025/01/03 12:00 a.m.16 views

Huawei Myna Input Validation Error Vulnerability

Huawei Myna is a smart speaker from Chinese company Huawei Huawei. Huawei Myna suffers from an Input Validation Error vulnerability that originates from a module that does not adequately integrity check inputs in certain scenarios. An attacker can exploit this vulnerability to affect the normal...

6.8CVSS6.7AI score0.00149EPSS
SaveExploits0References1
NVD
NVD
added 2025/01/02 4:15 p.m.27 views

CVE-2024-56414

Web installer integrity check used weak hash algorithm. The following products are affected: Acronis Cyber Protect 16 Windows before build 39169...

5.5CVSS0.0011EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/01/02 3:26 p.m.33 views

CVE-2024-56414

Web installer integrity check used weak hash algorithm. The following products are affected: Acronis Cyber Protect 16 Windows before build 39169...

5.5CVSS0.0011EPSS
SaveExploits0References1
CVE
CVE
added 2025/01/02 3:26 p.m.65 views

CVE-2024-56414

The CVE-2024-56414 entry describes a vulnerability in Acronis Cyber Protect 16 for Windows prior to build 39169, where the web installer integrity check uses a weak hash algorithm. Affected product/version: Acronis Cyber Protect 16 (Windows) before build 39169. Impact and exploit details are not ...

5.5CVSS7.2AI score0.0011EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/01/02 3:26 p.m.23 views

CVE-2024-56414

Web installer integrity check used weak hash algorithm. The following products are affected: Acronis Cyber Protect 16 Windows before build 39169...

5.5CVSS7AI score0.0011EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/12/23 12:00 a.m.11 views

PT-2025-3277 · Acronis · Acronis Cyber Protect 16

Name of the Vulnerable Software and Affected Versions: Acronis Cyber Protect 16 Windows versions prior to build 39169 Description: The web installer integrity check used a weak hash algorithm. This issue affects the Acronis Cyber Protect 16 Windows product. Recommendations: For Acronis Cyber...

5.5CVSS7.3AI score0.0011EPSS
SaveExploits0References8
OSV
OSV
added 2024/12/16 1:56 p.m.15 views

BIT-NODE-MIN-2023-38552

When the Node.js policy feature checks the integrity of a resource against a trusted manifest, the application can intercept the operation and return a forged checksum to the node's policy implementation, thus effectively disabling the integrity check. Impacts: This vulnerability affects all user...

7.5CVSS7.1AI score0.01107EPSS
SaveExploits0References10
BDU FSTEC
BDU FSTEC
added 2024/12/02 12:00 a.m.12 views

The vulnerability of the MSASN1.dll library file, WifiAutoInstallDriver.exe, a microprogramming system for wireless USB adapters of TOTOLINK A600UB, allows a hacker to execute arbitrary code.

The vulnerability of the MSASN1.dll library file, WifiAutoInstallDriver.exe, which is part of the wireless USB adapter software for TOTOLINK A600UB, is related to improper checking of integrity values. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS5.8AI score0.00184EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2024/11/12 3:00 p.m.26 views

CVE-2024-33660 Potential Firmware update without integrity check

An exploit is possible where an actor with physical access can manipulate SPI flash without being detected...

5.2CVSS0.0015EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/11/12 3:00 p.m.18 views

CVE-2024-33660 Potential Firmware update without integrity check

An exploit is possible where an actor with physical access can manipulate SPI flash without being detected...

5.2CVSS6.7AI score0.0015EPSS
SaveExploits0References1
CVE
CVE
added 2024/11/12 3:00 p.m.61 views

CVE-2024-33660

CVE-2024-33660 describes a vulnerability in AMI AptioV firmware whereby an attacker with physical access can manipulate SPI flash without detection, potentially enabling firmware tampering. Connected sources (CNNVD, CIRCL, CVELIST, VULNRICHMENT) corroborate AMI AptioV/SPI‑flash context; however, ...

5.2CVSS4.5AI score0.0015EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder