Lucene search
+L

1322 matches found

NVD
NVD
added 2023/10/18 4:15 a.m.31 views

CVE-2023-38552

When the Node.js policy feature checks the integrity of a resource against a trusted manifest, the application can intercept the operation and return a forged checksum to the node's policy implementation, thus effectively disabling the integrity check. Impacts: This vulnerability affects all user...

7.5CVSS7.4AI score0.01107EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
added 2023/10/18 4:15 a.m.54 views

CVE-2023-38552

When the Node.js policy feature checks the integrity of a resource against a trusted manifest, the application can intercept the operation and return a forged checksum to the node's policy implementation, thus effectively disabling the integrity check. Impacts: This vulnerability affects all user...

7.5CVSS6.9AI score0.01107EPSS
SaveExploits0References4
OSV
OSV
added 2023/10/18 4:15 a.m.14 views

UBUNTU-CVE-2023-38552

When the Node.js policy feature checks the integrity of a resource against a trusted manifest, the application can intercept the operation and return a forged checksum to the node's policy implementation, thus effectively disabling the integrity check. Impacts: This vulnerability affects all user...

7.5CVSS6.9AI score0.01107EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2023/10/18 3:55 a.m.40 views

CVE-2023-38552

When the Node.js policy feature checks the integrity of a resource against a trusted manifest, the application can intercept the operation and return a forged checksum to the node's policy implementation, thus effectively disabling the integrity check. Impacts: This vulnerability affects all user...

7.7AI score0.01107EPSS
SaveExploits0References8
Vulnrichment
Vulnrichment
added 2023/10/18 3:55 a.m.28 views

CVE-2023-38552

When the Node.js policy feature checks the integrity of a resource against a trusted manifest, the application can intercept the operation and return a forged checksum to the node's policy implementation, thus effectively disabling the integrity check. Impacts: This vulnerability affects all user...

7AI score0.01107EPSS
SaveExploits0References8
AlpineLinux
AlpineLinux
added 2023/10/18 3:55 a.m.40 views

CVE-2023-38552

When the Node.js policy feature checks the integrity of a resource against a trusted manifest, the application can intercept the operation and return a forged checksum to the node's policy implementation, thus effectively disabling the integrity check. Impacts: This vulnerability affects all user...

7.5CVSS7.6AI score0.01107EPSS
SaveExploits0
OSV
OSV
added 2023/10/18 3:55 a.m.44 views

CVE-2023-38552

When the Node.js policy feature checks the integrity of a resource against a trusted manifest, the application can intercept the operation and return a forged checksum to the node's policy implementation, thus effectively disabling the integrity check. Impacts: This vulnerability affects all user...

6.7AI score
SaveExploits0References11
Debian CVE
Debian CVE
added 2023/10/18 3:55 a.m.34 views

CVE-2023-38552

When the Node.js policy feature checks the integrity of a resource against a trusted manifest, the application can intercept the operation and return a forged checksum to the node's policy implementation, thus effectively disabling the integrity check. Impacts: This vulnerability affects all user...

7.5CVSS7.3AI score0.01107EPSS
SaveExploits0
CVE
CVE
added 2023/10/18 3:55 a.m.679 views

CVE-2023-38552

CVE-2023-38552 affects Node.js where the experimental policy/ integrity-check mechanism can be bypassed by forging a checksum during policy validation. The root issue is interception of the integrity verification against a trusted manifest, enabling an attacker to disable the integrity check for ...

7.5CVSS7.3AI score0.01107EPSS
SaveExploits0References9Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/10/18 12:00 a.m.14 views

The vulnerability of the Suricata intrusion detection and prevention system, related to incorrect validation of the integrity check value, allows an intruder to bypass or neutralize any signature based on the TCP protocol.

The vulnerability of the Suricata intrusion detection and prevention system is related to incorrect validation of the integrity check value. Exploiting this vulnerability allows a malicious actor to bypass or neutralize any signature based on the TCP protocol...

10CVSS7.2AI score0.01724EPSS
SaveExploits0References7Affected Software2
Positive Technologies
Positive Technologies
added 2023/10/17 12:00 a.m.27 views

PT-2023-6457 · Node.Js +6 · Node.Js +6

Name of the Vulnerable Software and Affected Versions: Node.js versions 18.x through 20.x Description: The issue arises when the Node.js policy feature checks the integrity of a resource against a trusted manifest. An application can intercept this operation and return a forged checksum to the...

9.8CVSS6.5AI score0.99999EPSS
SaveExploits24References175
RedhatCVE
RedhatCVE
added 2023/10/16 4:49 p.m.56 views

CVE-2023-38552

When the Node.js policy feature checks the integrity of a resource against a trusted manifest, the application can intercept the operation and return a forged checksum to node's policy implementation, thus effectively disabling the integrity check...

7.5CVSS6.9AI score0.01107EPSS
SaveExploits0References3
Node JS Blog
Node JS Blog
added 2023/10/13 12:00 a.m.83 views

Friday October 13 2023 Security Releases

Friday October 13 2023 Security Releases Update 13-October-2023 Security releases available Updates are now available for the v18.x and v20.x Node.js release lines for the following issues. undici - Cookie headers are not cleared in cross-domain redirect in undici-fetch Low - CVE-2023-45143 Undic...

9.8CVSS7.7AI score0.99999EPSS
SaveExploits21
Tenable Nessus
Tenable Nessus
added 2023/10/06 12:00 a.m.30 views

Moxa NPort 5000 Series Improper Validation of Integrity Check Value (CVE-2023-4929)

All firmware versions of the NPort 5000 Series are affected by an improper validation of integrity check vulnerability. This vulnerability results from insufficient checks on firmware updates or upgrades, potentially allowing malicious users to manipulate the firmware and gain control of devices...

8.8CVSS8AI score0.00262EPSS
SaveExploits0References2
Prion
Prion
added 2023/10/03 2:15 p.m.27 views

Input validation

All firmware versions of the NPort 5000 Series are affected by an improper validation of integrity check vulnerability. This vulnerability results from insufficient checks on firmware updates or upgrades, potentially allowing malicious users to manipulate the firmware and gain control of devices...

6.5CVSS8.7AI score0.00262EPSS
SaveExploits0References1Affected Software108
Cvelist
Cvelist
added 2023/10/03 1:54 p.m.41 views

CVE-2023-4929 NPort 5000 Series Firmware Improper Validation of Integrity Check Vulnerability

All firmware versions of the NPort 5000 Series are affected by an improper validation of integrity check vulnerability. This vulnerability results from insufficient checks on firmware updates or upgrades, potentially allowing malicious users to manipulate the firmware and gain control of devices...

6.5CVSS9AI score0.00262EPSS
SaveExploits0References1
OSV
OSV
added 2023/09/03 2:15 p.m.13 views

CVE-2023-37220

Synel Terminals - CWE-494: Download of Code Without Integrity Check...

9.8CVSS5.8AI score0.0032EPSS
SaveExploits0References1
NVD
NVD
added 2023/09/03 2:15 p.m.43 views

CVE-2023-37220

Synel Terminals - CWE-494: Download of Code Without Integrity Check...

9.8CVSS7.8AI score0.0032EPSS
SaveExploits0References1
Prion
Prion
added 2023/09/03 2:15 p.m.27 views

Code injection

Synel Terminals - CWE-494: Download of Code Without Integrity Check...

7.5CVSS9.6AI score0.0032EPSS
SaveExploits0References1Affected Software21
CVE
CVE
added 2023/09/03 1:47 p.m.64 views

CVE-2023-37220

CVE-2023-37220 affects Synel Terminals, with the issue described as CWE-494: Download of Code Without Integrity Check. Public sources consistently state that vulnerable software is Synel Terminals, and the root cause is downloading code from a remote location without integrity verification, poten...

9.8CVSS7.8AI score0.0032EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder