CWE-345: Insufficient Verification of Data Authenticity
The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.
A kind of CWE-693 Protection Mechanism Failure.
From the CWE List. © The MITRE Corporation.
Newest
- mozilla firefoxWhen downloading an update for an addon, the downloaded addon update's version was not verified...6.5 Medium
- cisco adaptive security device manager, adaptive security appliance (asa) software, asa 5512-x firmware +3 more +5 moreCisco Adaptive Security Device Manager and Adaptive Security Appliance Software Client-side Arbitrary Code Execution Vulnerability9.1 Critical
- phoenix contact multiprog, proconos, proconos eclr +2 moreInsufficient Verification of Data Vulnerability in ProConOS/ProConOS eCLR SDK and MULTIPROG Engineering tool9.8 Critical
- phoenix contact axc 1050, axc 1050 xc, axc 3050 +31 more +33 moreInsufficient Verification of Data Vulnerability in PHOENIX CONTACT classic line industrial controllers9.8 Critical
- siemens sinema remote connect serverA vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The...6.5 Medium
- verbatim executive fingerprint secure ssd firmware, fingerprint secure portable hard drive firmware +1 moreAn issue was discovered in certain Verbatim drives through 2022-03-31. Due to missing integrity...4.6 Medium
- apache http server, fedoraproject fedora, netapp clustered data ontap +2 moremod_proxy X-Forwarded-For dropped by hop-by-hop mechanism9.8 Critical
- fastify github-action-merge-dependabot, github action merge dependabot +1 moreNo verification of commits origin in github-action-merge-dependabot6.5 Medium
- amd athlon™ series, ryzen 3 2200u firmware, ryzen 3 2300u firmware +69 more +71 moreInsufficient check of the process type in Trusted OS (TOS) may allow an attacker with privileges...4.4 Medium
- hcl bigfix inventoryThis vulnerability arises because the application allows the user to perform some sensitive...2.3 Low
- nextcloud server, kiteworks security-advisories +1 moreInsufficient Verification of Data Authenticity in Nextcloud Server2.4 Low
- cisco adaptive security appliance, adaptive security appliance (asa) software, adaptive security appliance software +1 more +3 moreCisco Adaptive Security Appliance and Cisco Firepower Threat Defense Software AnyConnect SSL VPN Denial of Service Vulnerability5.8 Medium
- mi miuiSome Xiaomi phones have information leakage vulnerabilities, and some of them may be able to...5.5 Medium
- mi browserAn intent redirection vulnerability in the Mi Browser product. This vulnerability is caused by...7.5 High
- red lion da50n, redlion da50n firmware +1 moreICSA-22-104-03 Red Lion DA50N8.4 High
- tobesoft nexacro, tobesoft co.,ltd nexacro 17 +1 moretobesoft Nexacro arbitrary file download vulnerability8.8 High
- cisco ip phone 7800 series with multiplatform firmware, ip phone 6825 firmware, ip phone 6841 firmware +15 more +17 moreCisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware Cross-Site Request Forgery Vulnerability6.8 Medium
- trend micro apex central, trend micro, inc. micro apex central, trendmicro apex one +2 moreAn arbitrary file upload vulnerability in Trend Micro Apex Central could allow an unauthenticated...9.8 Critical
- syltekSyltek Insufficient Verification of Data Authenticity7.5 High
- schneider electric apc smart-ups, smartconnect, schneider-electric scl series 1029 ups firmware +32 more +34 moreA CWE-287: Improper Authentication vulnerability exists that could cause an attacker to...9.1 Critical
- mi ax3600 firmwareA command injection vulnerability exists in the Xiaomi Router AX3600. The vulnerability is caused...9.8 Critical
- mi ax3600 firmwareA command injection vulnerability exists in the Xiaomi Router AX3600. The vulnerability is caused...7.8 High
- custom content shortcode project content shortcode, unknown custom content shortcode +1 moreCustom Content Shortcode < 4.0.2 - Authenticated Arbitrary File Access / LFI4.3 Medium
- google androidIn multiple functions of odsign_main.cpp, there is a possible way to persist system attack due to...6.7 Medium
- jetbrains hubIn JetBrains Hub before 2022.1.14434, SAML request takeover was possible.9.8 Critical
- pexip infinity connectPexip Infinity Connect before 1.8.0 omits certain provisioning authenticity checks. Thus,...9.8 Critical
- amd xilinx z-7007s firmware, xilinx z-7010 firmware, xilinx z-7012s firmware +7 more +9 moreOn Xilinx Zynq-7000 SoC devices, physical modification of an SD boot image allows for a buffer...6.8 Medium
- dell alienware area 51m r1 firmware, alienware area 51m r2 firmware, alienware m15 r3 firmware +212 more +214 moreSelect Dell Client Commercial and Consumer platforms are vulnerable to an insufficient...4.7 Medium
- mozilla firefoxRemote Agent, used in WebDriver, did not validate the Host or Origin headers. This could have...6.5 Medium
- western digital my cloud, westerndigital my cloud os +1 moreInsufficient Verification of Data Authenticity Remote Code Execution Vulnerability on Western Digital My Cloud devices.8.8 High
- moxa tn-5900 firmwareThe firmware on Moxa TN-5900 devices through 3.1 has a weak algorithm that allows an attacker to...7.5 High
- cryptsetup project cryptsetup, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreIt was found that a specially crafted LUKS header could trick cryptsetup into disabling...4.3 Medium
- silabs 700 series firmware, uzb-7 +1 moreZ-Wave devices based on Silicon Labs 700 series chipsets using S2 do not adequately authenticate...6.5 Medium
- dnslib project dnslibdnslib has DNS reply verification issue7.5 High
- encsecurity datavaultENC DataVault 7.1.1W uses an inappropriate encryption algorithm, such that an attacker (who does...4.2 Medium
- 4nb videoofficeAn arbitrary file download and execution vulnerability was found in the VideoOffice X2.9 and...9.8 Critical
- starcharge nova 360 cabinet firmware, titan 180 premium firmware +1 moreCertain Starcharge products are affected by Improper Input Validation. The affected products...8.8 High
- digi transport dr64 firmware, transport vc74 firmware, transport wr11 firmware +5 more +7 moreAn issue was discovered on Digi TransPort devices through 2021-07-21. An authenticated attacker...8.8 High
- fortinet fortiproxy, fortios +1 moreAn insufficient verification of data authenticity vulnerability (CWE-345) in the user interface...6.3 Medium
- bluez, debian linux +1 moreAn issue was discovered in bluetoothd in BlueZ through 5.48. The vulnerability lies in the...6.5 Medium
- amd 3rd gen amd epyc™, epyc 7003 firmware, epyc 72f3 firmware +18 more +20 moreWhen the AMD Platform Security Processor (PSP) boot rom loads, authenticates, and subsequently...7.8 High
- npmjs npm, fedoraproject fedora, netapp next generation application programming interface +2 moreThe npm ci command in npm 7.x and 8.x through 8.1.3 proceeds with an installation even if...9.0 Critical
- ffmpegFFmpeg N-98388-g76a3ee996b allows attackers to cause a denial of service (DoS) via a crafted...5.5 Medium
- google tensorflowMissing validation during checkpoint loading7.8 High
- huawei harmonyosA component of the HarmonyOS has a Insufficient Verification of Data Authenticity vulnerability....5.5 Medium
- nhn-commerce godomall5, nhn commerce godomall5 std, godomall5 pro +1 moregodomall5 remote code execution vulnerability7.2 High
- boston scientific zoom latitude, bostonscientific zoom latitude pogrammer\/recorder\/monitor 3120 firmware +1 moreMissing Support Integrity Check for Boston Scientific Zoom Latitude6.5 Medium
- golang-jwt jwtFile reference keys leads to incorrect hashes on HMAC algorithms4.4 Medium
- in-toto in-toto-golangImproperly Implemented path matching for in-toto-golang5.6 Medium
- enbra ewm, ewm 1.7.29 +1 moreInsufficient Verification of Data Authenticity in Enbra EWM (replay attack)6.5 Medium
- Show moreLoading…