CWE-345: Insufficient Verification of Data Authenticity
The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.
A kind of CWE-693 Protection Mechanism Failure.
From the CWE List. © The MITRE Corporation.
Newest
- haxx curl, apple macos, debian linux +26 more +28 moreWhen curl >= 7.20.0 and <= 7.78.0 connects to an IMAP or POP3 server to retrieve data using...5.9 Medium
- handysoft hshell, hshell.dll +1 morehandysoft groupware arbitrary file download and execution vulnerability8.8 High
- abb base software for softcontrol, base software +1 moreABB Base Software for SoftControl Remote Code Execution vulnerability9.8 Critical
- rtb1 project rtb1A lack of target address verification in the BurnMe() function of Rob The Bank 1.0 allows...7.5 High
- tokensale project tokensaleA lack of target address verification in the selfdestructs() function of ICOVO 1.0 allows...7.5 High
- gnu inetutils, debian linux +1 moreThe ftp client in GNU Inetutils before 2.2 does not validate addresses returned by PASV/LSPV...6.5 Medium
- zohocorp manageengine adselfservice plusZoho ManageEngine ADSelfService Plus 6103 and prior is vulnerable to admin portal access...9.8 Critical
- cisco nx-os system software in aci mode, nx-os +1 moreCisco Nexus 9000 Series Fabric Switches ACI Mode Multi-Pod and Multi-Site TCP Denial of Service Vulnerability8.6 High
- bbraun spacecom2An Insufficient Verification of Data Authenticity vulnerability in B. Braun SpaceCom2 prior to...10.0 Critical
- nvidia caffe, nvcaffe +1 moreDependency injection in NVCaffe8.8 High
- hcc-embedded nichestackAn issue was discovered in HCC embedded InterNiche 4.0.1. This vulnerability allows the attacker...7.5 High
- wolfsslwolfSSL before 4.8.1 incorrectly skips OCSP verification in certain situations of irrelevant...5.9 Medium
- zte zxctn 6120h firmwareA ZTE's product of the transport network access layer has a security vulnerability. Because the...4.6 Medium
- huawei harmonyosA component of the HarmonyOS has a Insufficient Verification of Data Authenticity vulnerability....5.5 Medium
- sheetjs, sheetjs pro, oracle rest data services +2 moreDenial of Service in SheetJS Pro5.5 Medium
- dell powerflex, powerflex presentation server +1 moreDell EMC PowerFlex, v3.5.x contain a Cross-Site WebSocket Hijacking Vulnerability in the...6.5 Medium
- puttyPuTTY through 0.75 proceeds with establishing an SSH session even if it has never sent a...8.1 High
- mozilla firefoxAddress bar search suggestions in private browsing mode were re-using session data from normal...4.3 Medium
- onepeloton ttr01 firmwareInsufficient verification of data authenticity in Peloton TTR01 up to and including PTV55G allows...6.8 Medium
triton-vmcrates.ioTriton VM Soundness Vulnerability due to Missing Constraint6.9 Medium- mendix saml, siemens mendix saml module +1 moreA vulnerability has been identified in Mendix SAML Module (All versions < V2.1.2). The...8.8 High
- luca-app lucaThe server in Luca through 1.1.14 allows remote attackers to cause a denial of service (insertion...7.5 High
- wire, wireapp wire-ios +1 moreVerified groups not reliable8.8 High
- openstack neutron, the openstack project openstack-neutron, redhat openstack platform +2 moreOpenstack Neutron has Insufficient Verification of IPv6 addresses7.1 High
- websockets ws, netapp e-series performance analyzer +1 moreReDoS in Sec-Websocket-Protocol header5.3 Medium
- nagios fusion, xi +1 moreInsufficient Verification of Data Authenticity in Nagios Fusion 4.1.8 and earlier and Nagios XI 5...9.8 Critical
- huawei manageoneThere is a denial of service vulnerability in some versions of ManageOne. In specific scenarios,...6.5 Medium
- hom.ee brain cube coreThe USB firmware update script of homee Brain Cube v2 (2.28.2 and 2.28.4) devices allows an...6.8 Medium
- jetbrains pycharmIn JetBrains PyCharm before 2020.3.4, local code execution was possible because of insufficient...7.8 High
- python pillow, fedoraproject fedora +1 moreInsufficient Verification of Data Authenticity in Pillow5.5 Medium
- codesys development systemCODESYS Development System 3 before 3.5.17.0 displays or executes malicious documents or files...7.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient data validation in V8 in Google Chrome prior to 90.0.4430.93 allowed a remote...8.8 High
- piwigo localfiles editorshow_default.php in the LocalFilesEditor extension before 11.4.0.1 for Piwigo allows Local File...7.5 High
- pupnpDNS rebinding in pupnp7.6 High
- mozilla firefox, firefox esr, thunderbird +2 moreThrough complicated navigations with new windows, an HTTP page could have inherited a secure lock...6.5 Medium
- red hat, inc. rpm, fedoraproject fedora, redhat enterprise linux +1 more +3 moreA flaw was found in RPM's signature check functionality when reading a package file. This flaw...7.0 High
- cisco ios xe software, ios xe +1 moreCisco IOS XE Software Web UI Cross-Site WebSocket Hijacking Vulnerability7.4 High
- matrix-org matrix-react-sdkUser content sandbox can be confused into opening arbitrary documents2.6 Low
- foxit studio photo, foxitsoftware foxit studio photo +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- gnome evolution** DISPUTED ** GNOME Evolution through 3.38.3 produces a "Valid signature" message for an unknown...3.3 Low
- monalMonal before 4.9 does not implement proper sender verification on MAM and Message Carbon (XEP...9.8 Critical
- huawei emui, magic ui +1 moreThere is a improper privilege management vulnerability in some Huawei smartphone. Successful...9.1 Critical
- xen, debian linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in Xen through 4.14.x allowing x86 guest OS users to cause a denial of...7.8 High
- waysact webpack-subresource-integrityInvalid integrity hashes in webpack-subresource-integrity3.7 Low
- juniper mist cloud uiJuniper Networks Mist Cloud UI: SAML authentication attribute elements handling vulnerability.7.2 High
- apple ios, ipados, macos +4 more +6 moreAn issue existed in the handling of iMessage tapbacks. The issue was resolved with additional...5.5 Medium
- clamxavAn issue was discovered in ClamXAV 3 before 3.1.1. A malicious actor could use a properly signed...7.8 High
- huawei laya-al00ep firmware, mate 20 firmware, mate 20 x firmware +3 more +5 moreThere is an information disclosure vulnerability in several smartphones. The device does not...4.6 Medium
- huawei ws5800-10, ws5800-10 firmware +1 moreWS5800-10 version 10.0.3.25 has a denial of service vulnerability. Due to improper verification...6.5 Medium
- ory fositeReplay of private_key_jwt possible in ORY Fosite8.1 High
- Show moreLoading…