CWE-345: Insufficient Verification of Data Authenticity
The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.
A kind of CWE-693 Protection Mechanism Failure.
From the CWE List. © The MITRE Corporation.
Newest
- mmaitre314 picklescanpicklescan - Arbitrary Code Execution via torch.utils.bottleneck.__main__.run_cprofile7.6 High
- tenda g1, g1 firmware +1 moreTenda G1 Firmware Update check_upload_file data authenticity7.5 High
- tenda ac15, ac15 firmware +1 moreTenda AC15 Firmware Update check_fw data authenticity7.5 High
- d-link dir-619l, dlink dir-619l firmware +1 moreD-Link DIR-619L boa FirmwareUpgrade data authenticity7.5 High
- localsendLocalSend is Vulnerable to Man-in-the-Middle Attacks, Leading to File Interception9.3 Critical
- progress hybrid data pipelinePossibilities of IP Spoofing via X-Forwarded-For (XFF) Header8.4 High
- mozilla firefox, thunderbird +1 moreCSP frame-src was not correctly enforced for paths9.8 Critical
- ollamaOllama vulnerable to Cross-Domain Token Exposure6.9 Medium
- powerdns recursorA Recursor configured to send out ECS enabled queries can be sensitive to spoofing attempts7.5 High
- eluktronics control centerEluktronics Control Center REG File data authenticity4.8 Medium
- clerk javascript@clerk/backend Performs Insufficient Verification of Data Authenticity7.5 High
- comodo internet security premium, internet security +1 moreComodo Internet Security Premium Manifest File cis_update_x64.xml integrity check9.2 Critical
- pioneer dmh-wt7600nex, dmh-wt7600nex firmware +1 morePioneer DMH-WT7600NEX Root Filesystem Insufficient Verification of Data Authenticity Vulnerability4.6 Medium
- pioneer dmh-wt7600nex, dmh-wt7600nex firmware +1 morePioneer DMH-WT7600NEX Software Update Signing Insufficient Verification of Data Authenticity Vulnerability6.8 Medium
- mozilla firefox, thunderbird +1 moreNo warning when opening executable terminal files on macOS8.8 High
- risc0RISC Zero zkVM Underconstrained Vulnerability2.7 Low
taylorednpmTaylored webhook validation vulnerabilitiesNo score- sick field analyticsBackup files can be modified and uploaded8.8 High
- fabiolb fabioFabio allows HTTP clients to manipulate custom headers it adds9.1 Critical
- gradio-app gradiogradio-app gradio CORS is_valid_origin privilege escalation6.3 Medium
kernelopenEuler,linuxDebian,linux-6.1Debian +148 more +150 moreIEEE P802.11-REVme D1.1 through D7.0 allows FragAttacks against mesh networks. In mesh networks...9.1 Critical- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +23 more +25 moreUrlMon Security Feature Bypass Vulnerability7.5 High
mithril-clientcrates.ioMithril snapshots for Cardano database could be compromised by an adversary4.9 Medium- @tanstack react-routerReact Router allows pre-render data spoofing on React-Router framework mode8.2 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +23 more +25 moreWindows Virtualization-Based Security (VBS) Security Feature Bypass Vulnerability6.0 Medium
- nearform fast-jwtFast-JWT Improperly Validates iss Claims6.5 Medium
- iroad dash cam x5, dash cam x6 +1 moreIROAD Dash Cam X5/Dash Cam X6 Domain origin validation6.3 Medium
- zoom workplace, zoom communications, inc apps, zoom meeting software development kit +4 more +6 moreZoom Apps - Insufficient Verification of Data Authenticity6.5 Medium
- devolutions serverVela Server has Insufficient Webhook Payload Data Verification8.6 High
- mmaitre314 picklescanpicklescan - Zip Flag Bit Exploit Crashes Picklescan But Not PyTorch5.3 Medium
- mmaitre314 picklescanpicklescan ZIP archive manipulation attack leads to crash5.3 Medium
- ge vernova b30 multilin, b90 multilin, c30 multilin +16 more +18 moreInsufficient Verification of Data Authenticity vulnerability in GE Vernova UR IED family devices...6.1 Medium
- printerlogic vasion print, virtual appliance +1 moreVasion Print (formerly PrinterLogic) before Virtual Appliance Host 1.0.750 Application 20.0.1442...9.1 Critical
- google androidIn handleBondStateChanged of AdapterService.java, there is a possible permission bypass due to...6.5 Medium
- whisperfish libsignal-service-rslibsignal-service-rs Doesn't Check Origin of Sync Messages8.5 High
- No product listedInsufficient verification of data authenticity in some Intel(R) DSA software before version 23.4...7.3 High
- eprosima fast dds, fast-dds +1 moreFast DDS does not verify Permissions CA4.5 Medium
- hickory-dnsDNSSEC validation may accept broken authentication chains5.7 Medium
- impronta jantoInsufficient data authenticity vulnerability in Janto8.6 High
hickory-protocrates.ioHickory DNS failure to verify self-signed RRSIG for DNSKEYsNo score- f5 big-ip, big-ip access policy manager +1 moreBIG-IP APM Endpoint Inspection vulnerability2.3 Low
- mozilla thunderbirdAddress of e-mail sender can be spoofed by malicious email6.5 Medium
- smci mbd-x12dpg-oa6SMC BMC Firmware Image Authentication Design Issue7.2 High
github.com/cometbft/cometbftGoCometBFT allows a malicious peer to stall the network by disseminating seemingly valid block partsNo score- xerox workplace suiteMail spoofing5.3 Medium
- exelban statsLocal Privilege Escalation via Exposed XPC Method Due to Client Verification Failure in stats8.7 High
- huawei harmonyosRead/Write vulnerability in the image decoding module Impact: Successful exploitation of this...5.7 Medium
- red hat build of keycloak, jboss enterprise application platform 7, jboss enterprise application platform 8 +1 more +3 moreElytron-oidc-client: oidc authorization code injection4.2 Medium
- lorex 2k indoor wi-fi security camera, lorextechnology w461asc-e firmware +1 moreLorex 2K Indoor Wi-Fi Security Camera - Code signing bypass6.7 Medium
- cephCeph is vulnerable to authentication bypass through RadosGW8.1 High
- Show moreLoading…