CWE-345: Insufficient Verification of Data Authenticity
The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.
A kind of CWE-693 Protection Mechanism Failure.
From the CWE List. © The MITRE Corporation.
Newest
- sap netweaver, user interface technology, netweaver (ui infra) +3 more +5 moreA content spoofing vulnerability in the following components allows to render html pages...4.3 Medium
- gigabyte gb-bsi7h-6500, gb-bsi7h-6500 firmware, gb-bxi7-5775 +1 more +3 moreGIGABYTE BRIX UEFI firmware is not cryptographically signed9.8 Critical
- ecos secure boot stick firmwareInsufficient Verification of Data Authenticity vulnerability in ECOS Secure Boot Stick (aka SBS)...8.1 High
- ibm security identity managerIBM Security Identity Manager Virtual Appliance 7.0 processes patches, image backups and other...4.4 Medium
- totemo totemomail encryption gatewaytotemomail Encryption Gateway before 6.0_b567 allows remote attackers to obtain sensitive...7.5 High
- huawei appgalleryHuawei AppGallery versions before 8.0.4.301 has an arbitrary Javascript running vulnerability. An...8.8 High
- secutech project ris-11 firmware, ris-22 firmware, ris-33 firmware +2 moreSecutech RiS-11, RiS-22, and RiS-33 devices with firmware V5.07.52_es_FRI01 allow DNS settings...8.6 High
- foreman hammer cli, redhat satellite, satellite capsule +2 morehammer_cli_foreman Improper Certificate Validation vulnerability8.1 High
- ibm datapower gateways, datapower gateway +1 moreIBM DataPower Gateways 7.1, 7,2, 7.5, and 7.6 could allow an attacker using man-in-the-middle...4.0 Medium
- atom electronElectron vulnerable to URL spoofing via PDFium4.3 Medium
- siemens logo\! soft comfortSiemens LOGO! Soft Comfort (All versions before V8.2) lacks integrity verification of software...5.9 Medium
- trend micro scanmail for exchange, trendmicro scanmail +1 moreA vulnerability in Trend Micro ScanMail for Exchange 12.0 exists in which certain specific...7.5 High
- huawei technologies co., ltd. mate 9, huawei mate 9 firmware +1 moreMate 9 with software MHA-AL00AC00B125 has a denial of service (DoS) vulnerability. An attacker...3.3 Low
- akeo rufusAkeo Consulting Rufus prior to version 2.17.1187 does not adequately validate the integrity of...5.3 Medium
- juniper junos spaceJunos Space: Insufficient verification of node certificates.7.5 High
- really jwt-scalaInsufficient Data Verification in io.really:jwt-scala5.3 Medium
- good for enterpriseThe Good for Enterprise application 3.0.0.415 for Android does not use signature protection for...5.3 Medium
- connect2id nimbus jose\+jwtNimbus JOSE+JWT missing overflow check7.5 High
- apache tomcatInsufficient Verification of Data Authenticity in Apache Tomcat4.3 Medium
- trend micro, inc. micro deep discovery director, trendmicro deep discovery director +1 moreConfiguration and database backup archives are not signed or validated in Trend Micro Deep...7.5 High
- stashcat heinekingmediaAn issue was discovered in heinekingmedia StashCat through 1.7.5 for Android, through 0.0.80w for...8.1 High
- heimdal project heimdal, apple iphone os, mac os x +3 more +5 moreHeimdal before 7.4 allows remote attackers to impersonate services with Orpheus' Lyre attacks...8.1 High
- finecms project finecmsIn FineCMS through 2017-07-11, application/core/controller/style.php allows remote attackers to...7.5 High
- acronis true imageAcronis True Image up to and including version 2017 Build 8053 performs software updates using...8.8 High
- samsung magicianSamsung Magician 5.0 fails to validate TLS certificates for HTTPS software update traffic. Prior...8.8 High
- infotecs vipnet client, vipnet coordinator +1 moreInfotecs ViPNet Client and Coordinator before 4.3.2-42442 allow local users to gain privileges by...7.3 High
- google android, linux kernel +1 moreAn elevation of privilege vulnerability in the HTC touchscreen driver could enable a local...7.8 High
- ibm corporation access manager, ibm security access manager 9.0 firmware, security access manager for mobile 8.0 firmware +2 more +4 moreIBM Security Access Manager for Web processes patches, image backups and other updates without...4.4 Medium
- drupalDrupal Incorrect cache context on password reset page7.5 High
- huawei wear app, hilink app +1 moreThe Huawei Wear App application before 15.0.0.307 for Android does not validate SSL certificates,...6.5 Medium
- irz ruh2iRZ RUH2 before 2b does not validate firmware patches, which allows remote authenticated users to...7.2 High
- squid-cache squid, canonical ubuntu linux, oracle linux +2 moremime_header.cc in Squid before 3.5.18 allows remote attackers to bypass intended same-origin...8.6 High
- squid-cache squid, canonical ubuntu linux, oracle linux +2 moreclient_side.cc in Squid before 3.5.18 and 4.x before 4.0.10 does not properly ignore the Host...8.6 High
- allroundautomations pl\/sql developerAllround Automations PL/SQL Developer 11 before 11.0.6 relies on unverified HTTP data for updates...8.1 High
- mcafee advanced threat defenseMcAfee Advanced Threat Defense (ATD) before 3.4.8.178 might allow remote attackers to bypass...7.5 High
- broadcom single sign-onThe non-Domino web agents in CA Single Sign-On (aka SSO, formerly SiteMinder) R6, R12.0 before...9.1 Critical
- broadcom single sign-onThe Domino web agent in CA Single Sign-On (aka SSO, formerly SiteMinder) R6, R12.0 before SP3...9.1 Critical
- apple software updateApple Software Update before 2.2 on Windows does not use HTTPS, which makes it easier for man-in...5.9 Medium
- google androidThe caching functionality in the TrustManagerImpl class in TrustManagerImpl.java in Conscrypt in...5.9 Medium
- jenkins, redhat openshift +1 moreJenkins does not Verify Checksums for Plugin Files7.5 High
- intel driver update utilityIntel Driver Update Utility before 2.4 retrieves driver updates in cleartext, which makes it...7.5 High
- rsi video technologies frontel protocolThe Frontel protocol before 3 on RSI Video Technologies Videofied devices does not use integrity...5.9 Medium
- mobile devices c4 obd-ii dongle firmware, munic mobile devices (mdi) obd-ii dongles +1 more** DISPUTED ** Mobile Devices (aka MDI) C4 OBD-II dongles with firmware 2.x and 3.4.x, as used in...9.0 High
- timedoctorThe autoupdate implementation in TimeDoctor Pro 1.4.72.3 on Windows relies on unsigned installer...9.3 High
- redhat ansibleAnsible does not verify that the server hostname matches a domain name in certificates4.3 Medium
- hospira lifecare pca infusion system, lifecare pcainfusion firmware +1 moreHospira LifeCare PCA Infusion System7.6
- async-http-client project async-http-client, redhat jboss fuse +1 moreInsufficient Verification of Data Authenticity in Async Http Client4.3 Medium
- async-http-client project async-http-client, redhat jboss fuse +1 moreInsufficient Verification of Data Authenticity in Async Http Client4.3 Medium
- openstack novaOpenStack Compute (Nova) has Insufficient Verification of Data Authenticity5.1 Medium
- powerpc-utils project powerpc-utilsscripts/amsvis/powerpcAMS/amsnet.py in powerpc-utils-python uses the pickle Python module...10.0 High
- Show moreLoading…