The vulnerability of the HMAC component of the Nimbus JOSE + JWT Java library, which allows attackers to disclose protected information

The vulnerability of the HMAC component of the Nimbus JOSE + JWT Java library is related to the lack of integrity checks. Exploiting this vulnerability could allow a malicious actor, operating remotely, to disclose the protected information...

The vulnerability of the microprogramming software of the Wi-Fi repeater Netgear WPN824EXT lies in the lack of integrity checks, which allows a hacker to lower the firmware version.

The vulnerability of the built-in software of the Netgear WPN824EXT repeater is related to the lack of checks for the integrity of the firmware. Exploiting this vulnerability could allow an attacker, operating remotely, to downgrade the firmware version...

DEBIAN-CVE-2022-39237

syslabs/sif is the Singularity Image Format SIF reference implementation. In versions prior to 2.8.1the github.com/sylabs/sif/v2/pkg/integrity package did not verify that the hash algorithms used are cryptographically secure when verifying digital signatures. A patch is available in version =...

The vulnerability in the Maintenance Service of Mozilla Firefox and Mozilla Firefox ESR browsers for Windows allows a malicious actor to escalate their privileges.

The vulnerability of the Maintenance Service for Mozilla Firefox and Mozilla Firefox ESR browsers for Windows is related to the lack of integrity checks. Exploiting this vulnerability can allow attackers to increase their privileges...

CVE-2022-36174

FreshService Windows Agent 2.11.0 and FreshService macOS Agent 4.2.0 and FreshService Linux Agent 3.3.0. are vulnerable to Broken integrity checking via the FreshAgent client and scheduled update service...

Freshworks FreshService 安全漏洞

Freshworks FreshService is a cloud-based IT help desk and service management solution from Freshworks, Inc. It enables organizations to streamline their IT operations. A security vulnerability exists in Freshworks FreshService Windows Agent versions prior to 2.11.0, FreshService macOS Agent...

PT-2022-25034 · Samsung · Samsung Kies

Name of the Vulnerable Software and Affected Versions: Samsung Kies versions prior to 2.6.4.22074 Description: The issue is related to improper validation of integrity checks, allowing local attackers to delete arbitrary directories using directory junctions. Recommendations: For versions prior t...

Privilege escalation

HashiCorp Boundary up to 0.10.1 did not properly perform data integrity checks to ensure the resources were associated with the correct scopes, allowing potential privilege escalation for authorized users of another scope. Fixed in Boundary 0.10.2...

CVE-2022-36130

HashiCorp Boundary up to 0.10.1 did not properly perform data integrity checks to ensure the resources were associated with the correct scopes, allowing potential privilege escalation for authorized users of another scope. Fixed in Boundary 0.10.2...

HashiCorp Boundary 数据伪造问题漏洞

HashiCorp Boundary is an open source solution from the US-based HashiCorp Inc. It automates secure identity-based user access to hosts and services across environments. A security vulnerability exists in HashiCorp Boundary versions prior to 0.10.1 that stems from not properly performing data...

CVE-2022-36130: Insufficient Verification of Data Authenticity

HashiCorp Boundary up to 0.10.1 did not properly perform data integrity checks to ensure the resources were associated with the correct scopes, allowing potential privilege escalation for authorized users of another scope. Fixed in Boundary 0.10.2...

CVE-2022-29549

An issue was discovered in Qualys Cloud Agent 4.8.0-49. It executes programs at various full pathnames without first making ownership and permission checks e.g., to help ensure that a program was installed by root and without integrity checks e.g., a checksum comparison against known legitimate...

CVE-2022-29549

An issue was discovered in Qualys Cloud Agent 4.8.0-49. It executes programs at various full pathnames without first making ownership and permission checks e.g., to help ensure that a program was installed by root and without integrity checks e.g., a checksum comparison against known legitimate...

CVE-2022-29549

CVE-2022-29549 affects Qualys Cloud Agent (Linux) 4.8.0-49. The issue arises because the agent executes programs by full pathnames without prior ownership/permission checks or integrity verification, enabling local privilege escalation if a non-root user controls any targeted path (e.g., /opt/fir...

Qualys Cloud Agent 安全漏洞

Qualys Cloud Agent is a lightweight application from Qualys USA, Inc. A single agent for real-time, global visibility and response. A security vulnerability exists in Qualys Cloud Agent version 4.8.0-49, which stems from the lack of ownership and privilege checks, as well as integrity checks...

The vulnerability of microprogramming software in industrial software-hardware equipment from General Electric’s Renewable Energy iNET, iNET II, TD220X, and TD220MAX systems lies in the fact that code loading occurs without checking its integrity. This allows attackers to gain unauthorized access to the target system.

The vulnerability of microprogrammed software in industrial software-hardware equipment from General Electric’s Renewable Energy iNET, iNET II, TD220X, and TD220MAX systems lies in the fact that code can be loaded without checking its integrity. Exploiting this vulnerability allows a malicious...

Design/Logic Flaw

Motorola ACE1000 RTUs through 2022-05-02 mishandle application integrity. They allow for custom application installation via either STS software, the C toolkit, or the ACE1000 Easy Configurator. In the case of the Easy Configurator, application images as PLX/DAT/APP/CRC files are uploaded via the...

The vulnerability of the OSPF network protocol implementation in the microcomputer-based switching devices SCALANCE of the XM-400 and XR-500 series allows a intruder to trigger a service failure.

The vulnerability of the OSPF network protocol implementation in the microcomputer-based switching devices SCALANCE models XM-400 and XR-500 is related to the lack of integrity checks. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

Emerson DeltaV Distributed Control System

1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION: Exploitable on adjacent network/high attack complexity Vendor: Emerson Equipment: DeltaV Distributed Control System Vulnerabilities: Missing Authentication for Critical Function, Use of Hard-coded Credentials, Insufficient Verification of Data...

Emerson DeltaV Distributed Control System 数据伪造问题漏洞

Emerson DeltaV Distributed Control System is an automated distributed control system from Emerson. The system includes features such as network security management, alarm management, batch control, and change management. The Emerson DeltaV Distributed Control System is vulnerable to a data forger...