The vulnerability of OpenShift containerized application platforms, related to the loading of code without checking its integrity, allows a hacker to execute a type of “man-in-the-middle” attack.

The vulnerability of OpenShift container platforms relates to the loading of code without checking its integrity. Exploiting this vulnerability allows a remote attacker to execute a “man-in-the-middle” type attack...

CVE-2020-15528

An issue was discovered in GOG Galaxy Client 2.0.17. Local escalation of privileges is possible when a user starts or uninstalls a game because of weak file permissions and missing file integrity checks...

CVE-2020-15528

An issue was discovered in GOG Galaxy Client 2.0.17. Local escalation of privileges is possible when a user starts or uninstalls a game because of weak file permissions and missing file integrity checks...

Design/Logic Flaw

An issue was discovered in GOG Galaxy Client 2.0.17. Local escalation of privileges is possible when a user starts or uninstalls a game because of weak file permissions and missing file integrity checks...

CVE-2020-15528

An issue was discovered in GOG Galaxy Client 2.0.17. Local escalation of privileges is possible when a user starts or uninstalls a game because of weak file permissions and missing file integrity checks...

PT-2020-14479

Name of the Vulnerable Software and Affected Versions GOG Galaxy Client version 2.0.17 Description An issue in the GOG Galaxy Client allows for local escalation of privileges. This occurs when a user starts or uninstalls a game due to weak file permissions and missing file integrity checks...

CVE-2020-15528: Incorrect Permission Assignment for Critical Resource

An issue was discovered in GOG Galaxy Client 2.0.17. Local escalation of privileges is possible when a user starts or uninstalls a game because of weak file permissions and missing file integrity checks...

CVE-2020-1834

HUAWEI P30 and HUAWEI P30 Pro with versions earlier than 10.1.0.135C00E135R2P11 and versions earlier than 10.1.0.135C00E135R2P8 have an insufficient integrity check vulnerability. The system does not check certain software package's integrity sufficiently. Successful exploit could allow an attack...

CVE-2020-11614

Mids' Reborn Hero Designer 2.6.0.7 downloads the update manifest, as well as update files, over cleartext HTTP. Additionally, the application does not perform file integrity validation for files after download. An attacker can perform a man-in-the-middle attack against this connection and replace...

CVE-2020-6228

SAP Business Client, versions 6.5, 7.0, does not perform necessary integrity checks which could be exploited by an attacker under certain conditions to modify the installer...

CVE-2020-6228

SAP Business Client, versions 6.5, 7.0, does not perform necessary integrity checks which could be exploited by an attacker under certain conditions to modify the installer...

Design/Logic Flaw

SAP Business Client, versions 6.5, 7.0, does not perform necessary integrity checks which could be exploited by an attacker under certain conditions to modify the installer...

PT-2020-19026 · Sap · Sap Business Client

Name of the Vulnerable Software and Affected Versions: SAP Business Client versions 6.5, 7.0 Description: The issue is related to the lack of necessary integrity checks in the SAP Business Client, which could be exploited by an attacker under certain conditions to modify the installer...

Multiple Huawei products with insufficient integrity checks vulnerability

The Huawei OSCA-550, among others, is a smart screen device from the Chinese company Huawei Huawei. A security vulnerability exists in multiple Huawei products, which stems from the device not adequately verifying the integrity of a file during the loading process of that file. An attacker could...

CVE-2020-10266

UR+ Universal Robots+ is a platform of hardware and software component sellers, for Universal Robots robots. When installing any of these components in the robots e.g. in the UR10, no integrity checks are performed. Moreover, the SDK for making such components can be easily obtained from Universa...

Design/Logic Flaw

UR+ Universal Robots+ is a platform of hardware and software component sellers, for Universal Robots robots. When installing any of these components in the robots e.g. in the UR10, no integrity checks are performed. Moreover, the SDK for making such components can be easily obtained from Universa...

CVE-2020-10266

CVE-2020-10266 affects UR+ (Universal Robots+) components used with Universal Robots robotic arms (e.g., UR10). The vulnerability arises because installing components from UR+ involves no integrity checks, and the SDK to create such components is publicly available. An attacker could craft a mali...

CVE-2020-10266 RVD#1487: No integrity checks on UR+ platform artifacts when installed in the robot

UR+ Universal Robots+ is a platform of hardware and software component sellers, for Universal Robots robots. When installing any of these components in the robots e.g. in the UR10, no integrity checks are performed. Moreover, the SDK for making such components can be easily obtained from Universa...

CVE-2020-10266: Missing Support for Integrity Check

UR+ Universal Robots+ is a platform of hardware and software component sellers, for Universal Robots robots. When installing any of these components in the robots e.g. in the UR10, no integrity checks are performed. Moreover, the SDK for making such components can be easily obtained from Universa...

PT-2020-12015

Name of the Vulnerable Software and Affected Versions UR+ Universal Robots+ affected versions not specified Description The issue concerns the lack of integrity checks when installing components in Universal Robots robots through the UR+ platform. An attacker can exploit this by crafting a custom...