CWE-345: Insufficient Verification of Data Authenticity
The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.
A kind of CWE-693 Protection Mechanism Failure.
From the CWE List. © The MITRE Corporation.
Newest
- cisco umbrella roaming client, umbrella enterprise roaming client for windows +1 moreCisco Umbrella Roaming Client for Windows Install Vulnerability4.4 Medium
- cisco anyconnect secure mobility clientCisco AnyConnect Secure Mobility Client for Android Service Hijack Vulnerability5.9 Medium
- titanhq spamtitanA sandbox escape issue was discovered in TitanHQ SpamTitan Gateway 7.07. It limits the admin user...7.2 High
- linuxfoundation the update framework, theupdateframework tuf +1 moreInvalid root may become trusted root in The Update Framework (TUF)8.7 High
- foxitsoftware phantompdf, reader +1 moreIn Foxit Reader and PhantomPDF before 10.0.1, and PhantomPDF before 9.7.3, attackers can obtain...8.1 High
- jitsi meet electronjitsi-meet-electron (aka Jitsi Meet Electron) before 2.3.0 calls the Electron shell.openExternal...7.5 High
- hashicorp vaultAuthentication Bypass by Spoofing and Insufficient Verification of Data Authenticity in Hashicorp Vault8.2 High
- teradici graphics agent, pcoip standard agent +1 moreA function in the Teradici PCoIP Standard Agent for Windows and Graphics Agent for Windows prior...6.7 Medium
- apache http serverIP address spoofing when proxying using mod_remoteip and mod_rewrite For configurations using...5.3 Medium
- grinGrin insufficient data validation7.5 High
- joomla joomla\!An issue was discovered in Joomla! through 3.9.19. Missing validation checks on the usergroups...5.3 Medium
- ledger liveLedger Live before 2.7.0 does not handle Bitcoin's Replace-By-Fee (RBF). It increases the user's...8.1 High
- cabsoftware reportexpress proplusReportexpress ProPlus contains a vulnerability that could allow an arbitrary code execution by...5.7 Medium
- nvidia gpu display driver, geforce experience, geforce firmware +3 more +5 moreNVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the service host...7.8 High
- gitlabUser email verification bypass in GitLab CE/EE 12.5 and later through 13.0.1 allows user to...4.3 Medium
- gitlabOAuth flow missing verification checks CE/EE 12.3 and later through 13.0.1 allows unverified user...7.5 High
- mattermost serverAn issue was discovered in Mattermost Server before 5.21.0. Socket read operations are not...7.5 High
- packagekit, canonical ubuntu linux +1 morePackagekit's apt backend lets user install untrusted local packages8.2 High
- mids\' reborn hero designer project reborn hero designerMids' Reborn Hero Designer 2.6.0.7 downloads the update manifest, as well as update files, over...8.1 High
- wago pfc200 firmwareAn exploitable code execution vulnerability exists in the Web-Based Management (WBM)...7.2 High
- cisco ios xe, ios xe software 16.4.1 +1 moreCisco IOS XE Software IPsec VPN Denial of Service Vulnerability6.8 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMozilla Developer Iain Ireland discovered a missing type check during unboxed objects removal,...8.8 High
- kernel selinux, linux kernel, redhat enterprise linux server +2 moreA flaw was found in the Linux kernels SELinux LSM hook implementation before version 5.7, where...6.1 Medium
- codesys runtimeAn exploitable code execution vulnerability exists in the PLC_Task functionality of 3S-Smart...9.9 Critical
- postfix** DISPUTED ** A certain Postfix 2.10.1-7 package could allow an attacker to send an email from...5.3 Medium
- schneider-electric ecostruxure machine expert, modicon m218 firmware, modicon m241 firmware +4 more +6 moreA CWE-345: Insufficient Verification of Data Authenticity vulnerability exists which could allow...9.8 Critical
- titan sf rush smart band firmwareAn issue was discovered on Tata Sonata Smart SF Rush 1.12 devices. It has been identified that...8.1 High
- canonical c-kernel, pc-kernel +1 moreUbuntu kernel snap build process could use unauthenticated sources8.4 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient data validation in developer tools in Google Chrome prior to 81.0.4044.92 allowed a...8.8 High
- cisco webex business suite, webex business suite 39 +1 moreCisco Webex Business Suite Host Header Value Integrity Vulnerability3.1 Low
- universal robots urx, universal-robots ur\+ +1 moreRVD#1487: No integrity checks on UR+ platform artifacts when installed in the robot8.8 High
- opensuse autoyast2, suse linux enterprise server 12, linux enterprise server 15 +2 moreDeprecated functionality in autoyast2 automatically imports gpg keys without checking them4.8 Medium
- zoom meetingsZoom Client for Meetings through 4.6.8 on macOS has the disable-library-validation entitlement,...2.3 Low
- google androidAn issue was discovered on Samsung mobile devices with N(7.1), O(8.x), P(9.0), and Q(10.0)...9.8 Critical
- google androidAn issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software....7.5 High
- openwrt lede, openwrt +1 moreAn issue was discovered in OpenWrt 18.06.0 to 18.06.6 and 19.07.0, and LEDE 17.01.0 to 17.01.7. A...8.1 High
- fortinet fortimanagerAn Insufficient Verification of Data Authenticity vulnerability in FortiManager 6.2.1, 6.2.0, 6.0...8.8 High
- wago pfc200 firmwareAn exploitable remote code execution vulnerability exists in the Cloud Connectivity functionality...9.1 Critical
- eclipse theia, the eclipse foundation eclipse theia +1 moreInsufficient Verification of Data Authenticity in Eclipse Theia8.1 High
- envoyproxy envoyRed Hat Security Advisory: Red Hat OpenShift Service Mesh 1.0.9 servicemesh-proxy security update5.3 Medium
- cisco nx-os, nx-os software 7.3(2)d1(1d) +1 moreCisco NX-OS Software Anycast Gateway Invalid ARP Vulnerability4.7 Medium
- stylemixthemes motors - car dealer\, classifieds \& listingincludes/options.php in the motors-car-dealership-classified-listings (aka Motors - Car Dealer &...6.5 Medium
- netgear nighthawk x10-r9000 firmwareAuth Bypass Via X-Forwarded-For Header in SOAP API9.1 Critical
- facebook hhvmInsufficient type checks were employed prior to casting input data in SimpleXMLElement_exportNode...9.8 Critical
- freebsdIn FreeBSD 12.0-RELEASE before 12.0-RELEASE-p13, a missing check in the ipsec packet processor...9.8 Critical
- hackerone nextcloud server, nextcloud server, opensuse backports +2 moreA bug in Nextcloud Server 17.0.1 causes the workflow rules to depend their behaviour on the file...8.0 High
- mozilla network security services, nss, netapp hci compute node +11 more +13 moreIn Network Security Services (NSS) before 3.46, several cryptographic primitives had missing...9.8 Critical
- proxymancom.proxyman.NSProxy.HelperTool in Privileged Helper Tool in Proxyman for macOS 1.11.0 and...3.7 Low
- barco clickshare button r9861500d01 firmwareBarco ClickShare Button R9861500D01 devices before 1.9.0 have Missing Support for Integrity Check...7.8 High
- barco clickshare button r9861500d01 firmwareBarco ClickShare Button R9861500D01 devices before 1.9.0 have Missing Support for Integrity Check...6.6 Medium
- Show moreLoading…