CWE-345: Insufficient Verification of Data Authenticity
The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.
A kind of CWE-693 Protection Mechanism Failure.
From the CWE List. © The MITRE Corporation.
Newest
- quic-goquic-go affected by an ICMP Packet Too Large Injection Attack on Linux6.5 Medium
- sigstore sigstore-javaVulnerability with bundle verification in sigstore-java5.5 Medium
- eaton intelligent power protectorInsufficient verification of authenticity in IPP5.1 Medium
- echarge salia plcc firmware, hardy-barth cph2 echarge firmware +1 moreUnauthenticated Remote Command Injection in eCharge Salia PLCC9.0 Critical
- openstack neutronOpenStack Neutron can use an incorrect ID during policy enforcement7.5 High
- visteon infotainmentVisteon Infotainment VIP MCU Code Insufficient Validation of Data Authenticity Local Privilege Escalation Vulnerability8.8 High
- postgresqlPostgreSQL libpq retains an error message from man-in-the-middle3.1 Low
- moodleMoodle: cache poisoning via injection into storage7.7 High
- 2n access commanderIn 2N Access Commander versions 3.1.1.2 and prior, a local attacker can escalate their privileges...4.7 Medium
- 2n access commanderIn 2N Access Commander versions 3.1.1.2 and prior, an Insufficient Verification of Data...6.3 Medium
- laravel reverbLaravel Reverb has Missing API Signature Verification6.3 Medium
- rockwell automation rslogix 500®, rslogix™ 5, rockwellautomation rslogix 5 +5 more +7 moreRSLogix™ 5 and RSLogix 500® Remote Code Execution Via VBA Embedded Script8.8 High
- gradio-app gradioLack of integrity check on the downloaded FRP client in Gradio2.1 Low
- meshtastic firmwareUnauthorized usage of remote hardware module because of missing channel verification6.4 Medium
- gotenna, gotenna pro atak plugin +1 moregoTenna Pro ATAK Plugin Missing Support for Integrity Check6.0 Medium
- emlog proMissing Support for Integrity Check in goTenna Pro6.0 Medium
- sony xav-ax5500, xav-ax5500 firmware +1 moreSony XAV-AX5500 Insufficient Firmware Update Validation Remote Code Execution Vulnerability6.8 Medium
- traefikHTTP client can remove the X-Forwarded headers in Traefik9.8 Critical
- devfelixmoira limit login attempts plus, limit login attempts project login attempts plus, devfelixmoira limit login attempts plus – wordpress limit login attempts by felix +2 moreLimit Login Attempts Plus <= 1.1.0 - IP Address Spoofing to Protection Mechanism Bypass5.3 Medium
- technitium dns server, dnsserver +1 moreAn issue was discovered in Technitium through 11.0.3. It enables attackers to conduct a DNS cache...7.5 High
- espressif esp-nowESP-NOW Replay Attacks Vulnerability6.5 Medium
- open-xchange gmbh ox dovecot proDovecot accepts dot LF DOT LF symbol as end of DATA command. RFC requires that it should always...5.3 Medium
- miniorange web application firewall, cyberlord92 web application firewall – website security +1 moreWeb Application Firewall <= 2.1.2 - IP Address Spoofing to Protection Mechanism Bypass5.3 Medium
- google chromeInsufficient data validation in Installer in Google Chrome on Windows prior to 128.0.6613.84...7.8 High
- google chromeInsufficient data validation in Installer in Google Chrome on Windows prior to 128.0.6613.84...7.8 High
- microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation) +14 more +16 moreWindows DNS Spoofing Vulnerability7.5 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +33 more +35 moreWindows Print Spooler Elevation of Privilege Vulnerability7.5 High
- dieboldnixdorf vynamic security suiteDiebold Nixdorf Vynamic Security Suite (VSS) before 3.3.0 SR15, 4.0.0 SR05, 4.1.0 SR03, and 4.2.0...6.6 Medium
- regclientregclient may ignore pinned manifest digests5.2 Medium
- google chromeInsufficient data validation in Dawn in Google Chrome on Android prior to 127.0.6533.88 allowed a...8.8 High
- matrix tafnit v8, matrix-globalservices tafnit +1 moreMatrix – Tafnit v8 CWE-646: Reliance on File Name or Extension of Externally-Supplied File5.5 Medium
- dnsjavaDNSJava DNSSEC Bypass8.9 High
- byron gitoxidegitoxide's gix-path can use a fake program files location6.8 Medium
- certifi, certifi python-certifi, netapp management services for element software and netapp hci +2 more +4 moreCertifi removes GLOBALTRUST root certificate7.5 High
- mit kerberos 5, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreIn MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can modify the plaintext Extra Count...7.5 High
- omron corporation nj series cpu unit, nx series cpu unit, omron nj-pa3001 firmware +54 more +56 moreInsufficient verification of data authenticity issue exists in NJ Series CPU Unit all versions...7.5 High
- solidwp solid securityWordPress Solid Security plugin <= 9.3.1 - IP Spoofing Leading to Denial of Service vulnerability3.7 Low
- php, fedoraproject fedora +1 moreFilter bypass in filter_var (FILTER_VALIDATE_URL)5.3 Medium
- invisioncommunity communityInvision Community through 4.7.16 allows remote code execution via the applications/core/modules...7.2 High
- volkswagen group charging gmbh - elli, evbox id charger connect & pro, volkswagen group charging gmbh elli evbox id charger connect and pro, vw id.charger connect firmware +1 more +3 moreID Charger Connect & Pro - JWT-Null-Algorithm6.3 Medium
- clusterlabs booth, red hat enterprise linux 10, enterprise linux 7 +17 more +19 moreBooth: specially crafted hash can lead to invalid hmac being accepted by booth server5.9 Medium
- ishanverma authorize.net payment gateway for woocommerceAuthorize.net Payment Gateway For WooCommerce <= 8.0 - Insufficient Verification of Data Authenticity to Unauthenticated Payment Bypass5.3 Medium
- claudiosanches claudio sanches – checkout cielo for woocommerceClaudio Sanches – Checkout Cielo for WooCommerce <= 1.1.0 - Insufficient Verification of Data Authenticity to Order Payment Status Update5.3 Medium
- automationdirect p3-550e, p1-540 firmware, p1-550 firmware +4 more +6 moreA code injection vulnerability exists in the scan_lib.bin functionality of AutomationDirect P3-550E 1.2.10.9. A specially crafted scan_lib.bin can lead to arbitrary code execution. An attacker can pro…9.8 Critical
- cozmoslabs profile builderWordPress User Profile Builder plugin <= 3.11.2 - Bypass Vulnerability vulnerability5.3 Medium
- zoom video communications, inc. workplace vdi app for windows, zoom vdi windows meeting client, workplace virtual desktop infrastructure +2 moreZoom Workplace VDI App for Windows - Insufficient Verification of Data Authenticity6.7 Medium
- throughtek kalay sdk, owletcare cam 2 firmware, cam firmware +3 more +5 moreThroughTek Kalay SDK insufficient verification of message authenticity4.3 Medium
- tg123 sshpipersshpiper's Enabling of Proxy Protocol without proper feature flagging allows faking source address5.3 Medium
- fortinet fortios, fortiproxy +1 moreAn insufficient verification of data authenticity vulnerability [CWE-345] in Fortinet FortiOS SSL...4.7 Medium
- siemens simatic rtls locating managerA vulnerability has been identified in SIMATIC RTLS Locating Manager (6GT2780-0DA00) (All...6.9 Medium
- Show moreLoading…