128 matches found
Siemens Interniche IP-Stack Improper Verification of Source of a Communication Channel (CVE-2025-40820)
Multiple Industrial products are affected by a vulnerability in the Interniche IP-Stack. The affected products do not properly enforce TCP sequence number validation in specific scenarios but accept values within a broad range. This could allow an unauthenticated remote attacker e.g. to interfere...
Improper Verification of Source of a Communication Channel
Overview @auth/core is an Authentication for the Web. Affected versions of this package are vulnerable to Improper Verification of Source of a Communication Channel via improper binding of OAuth check cookies to the provider that created them. An attacker can gain unauthorized access to a victim'...
ROS-20260713-73-0011
The vulnerability is related to a lack of mechanisms for verifying the source of information. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...
EUVD-2026-41411
Use of Default Cryptographic Key vulnerability in Erlang/OTP ssl DTLS server allows predictable DTLS cookie computation during the startup window, enabling source address verification bypass. On DTLS server startup, dtlsserverconnection:initialhello/3 initializes previouscookiesecret to the empty...
Уязвимость компонента Passwords (управление паролями) браузеров Google Chrome и Microsoft Edge, позволяющая нарушителю обойти ограничения безопасности
Уязвимость компонента Passwords управление паролями браузеров Google Chrome и Microsoft Edge связана с недостатками в механизме подтверждения источника данных. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, обойти ограничения безопасности...
Уязвимость компонента Password Manager браузера Google Chrome, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
Уязвимость компонента Password Manager браузера Google Chrome связана с недостатком в механизме подтверждения источника данных. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, получить несанкционированный доступ к защищаемой информации с помощью специально созданной...
Improper Verification of Source of a Communication Channel
Overview Affected versions of this package are vulnerable to Improper Verification of Source of a Communication Channel via improper validation of cross-origin messages in the window message listeners. An attacker can hijack authenticated editing sessions by sending crafted postMessage events fro...
Уязвимость функции конфиденциальности Fenced Frames браузеров Microsoft Edge и Google Chrome, позволяющая нарушителю обойти существующие механизмы безопасности
Уязвимость функции конфиденциальности Fenced Frames браузеров Microsoft Edge и Google Chrome связана с недостатком в механизме подтверждения источника. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, обойти существующие механизмы безопасности...
CVE-2026-40434
Anviz CrossChex Standard lacks source verification in the client/server channel, enabling TCP packet injection by an attacker on the same network to alter or disrupt application traffic...
Уязвимость функции автозаполнения Autofill браузеров Google Chrome и Microsoft Edge, позволяющая нарушителю раскрыть защищаемую информацию
Уязвимость функции автозаполнения Autofill браузеров Google Chrome и Microsoft Edge связана с недостатком в механизме подтверждения источника. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, раскрыть защищаемую информацию...
Уязвимость компонента Media браузеров Google Chrome и Microsoft Edge, позволяющая нарушителю обойти ограничения безопасности
Уязвимость компонента Media браузеров Google Chrome и Microsoft Edge связана с недостатком в механизме подтверждения источника. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, обойти ограничения безопасности...
The vulnerability of the iCore antivirus software service from Trend Micro Apex One allows a malicious actor to escalate their privileges and execute arbitrary code.
The vulnerability of the iCore antivirus software from Trend Micro’s Apex One service is related to a data source verification error. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary code...
The vulnerability of the Apex One NT Listener component of the Trend Micro Apex One antivirus software allows a hacker to escalate their privileges.
The vulnerability of the Apex One NT Listener antivirus software is related to a data source verification error. Exploiting this vulnerability can allow attackers to increase their privileges...
The vulnerability of the cloud-based platform for managing and protecting Microsoft Entra ID (formerly Azure Active Directory) relates to deficiencies in the data source verification mechanism, allowing attackers to escalate their privileges.
The vulnerability of the cloud-based platform for managing and protecting Microsoft Entra ID formerly Azure Active Directory is related to deficiencies in the data source verification mechanism. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...
The vulnerability of the Trend Micro Apex One antivirus software agent allows a hacker to increase their privileges.
The vulnerability of the Trend Micro Apex One antivirus software agent is related to a data source verification error. Exploiting this vulnerability can allow attackers to increase their privileges...
The vulnerability of the Trend Micro Apex One antivirus software agent allows a hacker to increase their privileges.
The vulnerability of the Trend Micro Apex One antivirus software agent is related to a data source verification error. Exploiting this vulnerability can allow attackers to increase their privileges...
The vulnerability of the Trend Micro Apex One antivirus software agent allows a hacker to increase their privileges.
The vulnerability of the Trend Micro Apex One antivirus software agent is related to a data source verification error. Exploiting this vulnerability can allow attackers to increase their privileges...
The vulnerability of the Trend Micro Apex One antivirus software agent allows a hacker to increase their privileges.
The vulnerability of the Trend Micro Apex One antivirus software agent is related to a data source verification error. Exploiting this vulnerability can allow attackers to increase their privileges...
The vulnerability of the Trend Micro Apex One antivirus software agent allows a hacker to increase their privileges.
The vulnerability of the Trend Micro Apex One antivirus software agent is related to a data source verification error. Exploiting this vulnerability can allow attackers to increase their privileges...
Microsoft Entra ID 访问控制错误漏洞
Microsoft Entra ID is a cloud-based identity and management solution provided by Microsoft Corporation. There is an access control vulnerability in Microsoft Entra ID, which stems from a source verification error. This vulnerability could allow unauthorized attackers to escalate their privileges...