CWE-345: Insufficient Verification of Data Authenticity
The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.
A kind of CWE-693 Protection Mechanism Failure.
From the CWE List. © The MITRE Corporation.
Newest
- advantech eki-1242eims, eki-1242ieims +1 moreNozomi Networks Labs identified a CWE-345: Insufficient Verification of Data Authenticity...8.6 High
- ag-ui-protocol ag-uiag-ui-protocol ag-ui Event Application Layer agent.ts prepareRunAgentInput origin validation5.3 Medium
- arista networks eosSecurity Advisory 01717.0 High
- nlnet labs unboundPossible ZONEMD verification bypass window4.4 Medium
- arraytics eventinEventin < 4.1.24 - Unauthenticated Payment Bypass via Stripe and PayPal Cross-Order Transaction Replay5.3 Medium
- unknown formidable formsFormidable Forms 6.34 - Unauthenticated Stored Content Injection via 'updated_by' Parameter4.3 Medium
- arista networks eosSecurity Advisory 01617.0 High
- No product listedkkFileView >= 4.2.0 is vulnerable to Server-Side Request Forgery (SSRF). The cross-origin file...9.1 Critical
- arista networks eosOn affected platforms running Arista EOS with Dynamic Host Configuration Protocol (DHCP) relay configured, an unauthenticated attacker with network access could send a crafted DHCP reply packet from a…6.5 Medium
- eclipse foundation data plane coreIn Siglet current and past versions the refresh token handler do not enforce proof of possession...6.3 Medium
- unknown quads ads manager for google adsenseQuads Ads Manager for Google AdSense < 3.0.5 - Subscriber+ Ad-Selling Payment Bypass via Unverified Success Return URL4.3 Medium
- wwbn avideoAVideo Missing Authorization via AD_Server log.php Wallet Credit7.1 High
- unknown persian elementorPersian Elementor < 2.8.2 - Unauthenticated ZarinPal Payment Callback Authority Bypass5.3 Medium
- unknown payment gateway paypay for woocommerceWC PayPay Gateway 0.5 - 0.9.3 - Unauthenticated Payment Bypass via Unverified Webhook5.9 Medium
- dell secure connect gateway 5.0 - appliance, secure connect gateway 5.0 - application, secure connect gateway +2 moreDell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior...9.8 Critical
- unknown wp express checkoutWP Express Checkout < 2.5.0 - Unauthenticated Payment Bypass via wpec_process_empty_payment5.3 Medium
- xenforoXenForo < 2.3.13 Payment Replay via PayPal REST Payment Provider8.7 High
- lobehubLobeChat 2.2.1 Webhook Signature Verification Bypass QQ Feishu6.9 Medium
- unknown epayco payment gateway for woocommerceePayco Payment Gateway for WooCommerce < 8.4.7 - Unauthenticated Payment Confirmation Bypass5.3 Medium
- mit moos-ivpMOOS-IvP through 24.8.1 uFldNodeBroker Unauthenticated Shore Route Enrollment9.3 Critical
- mit moos-ivpMOOS-IvP through 24.8.1 uFldShoreBroker Bridge Route Injection via Unverified Node Ping9.3 Critical
- themoos essential-moosMOOS essential-moos through 10.0.1 pMOOSBridge Unauthenticated UDP Packet Injection8.7 High
- themoos essential-moosMOOS essential-moos through 10.0.1 pShare Unauthenticated UDP Datagram Republishing8.8 High
- mit moos-ivpMOOS-IvP through 24.8.1 uFldNodeComms Node Message Source Spoofing8.7 High
- nexcess bookitWordPress BookIt plugin <= 2.6.0.3 - Bypass Vulnerability vulnerability5.3 Medium
- hickory-dnsHickory DNS through 0.26.0-alpha.1 DNSSEC Validation Bypass via Ancestor-Delegation NSEC8.7 High
- hickory-dnsHickory DNS through 0.26.0-alpha.1 DNSSEC Validation Bypass via Ancestor-Delegation NSEC38.7 High
- hickory-dnsHickory DNS through 0.26.0-alpha.1 DNSSEC NSEC Validation Bypass for Empty Non-Terminals6.3 Medium
- hickory-dnsHickory DNS 0.26.0-beta.1 before 0.26.2 DNSSEC Validation Bypass via Missing RFC 6840 Checks8.2 High
- hickory-dnsHickory DNS through 0.26.0-alpha.1 DNSSEC Validation Bypass via Unrelated RRset6.9 Medium
- amd ryzen™ 3000 series desktop processors, ryzen™ 4000 series desktop processors with radeon™ graphics, ryzen™ 5000 series desktop processors +10 more +12 moreInsufficient Verification of Data Authenticity in AGESA™ may allow an attacker to update SPI ROM...7.7 High
- cisco secure emailCisco Secure Email S/MIME Ciphertext Decryption Vulnerabilty5.9 Medium
- unknown wp express checkoutWP Express Checkout < 2.4.9 - Unauthenticated Payment Bypass via wpec_process_payment5.3 Medium
- progress software telerik ui for asp.net ajaxDialogHandler UploadPaths Tampering Vulnerability in Telerik UI for ASP.NET AJAX8.1 High
- unknown catalogxCatalogX < 6.1.3 - Unauthenticated Email Content Injection via Shared Transient4.3 Medium
- ben group tubebuddy for youtube extensionBEN Group TubeBuddy for YouTube Extension tubebuddymaster1.js TBGlobal.GetToken data authenticity5.3 Medium
- toggl oü track extensionToggl OÜ Toggl Track Extension postMessage origin validation5.3 Medium
- google cloud buildGoogle Cloud Build Comment Control Bypass via Webhook Suppression9.4 Critical
- linux foundation magmaLinux Foundation Magma SecurityModeComplete integrity check6.9 Medium
- pac4jpac4j-saml before 6.5.6 Session Destruction via Unsigned LogoutRequest6.9 Medium
- pac4jpac4j-oidc before 6.5.6 Authentication Bypass via Access Token Substitution6.9 Medium
- igel os 11, os 12 +1 moreIGEL OS 12 / 11 Boot Registry Parameter Injection via Unsigned Configuration Area8.6 High
- crossplane crossplane-runtimecrossplane crossplane-runtime ImageConfig client.go Get toctou6.9 Medium
- jahlives openssl encryptopenssl_encrypt before 1.4.9 Key Substitution via Identity Shadowing9.3 Critical
- jahlives openssl encryptopenssl_encrypt before 1.4.9 Key Substitution via Identity Load9.3 Critical
- versatica mediasoupmediasoup: SCTP state cookie lacks cryptographic authentication, enabling unauthorized association establishment (RFC 9260 violation)5.6 Medium
- apache hiveApache Hive: Unauthenticated authentication bypass in HiveServer2 HTTP SAML bearer-token validation allows impersonation of any Hive user7.4 High
- authlib joserfcjoserfc claim-validation bypass via array-typed single-string claims (iss/sub/jti)6.5 Medium
- devolutions remote desktop managerInsufficient verification of data authenticity in the IronVNC client in Devolutions Remote...4.3 Medium
- siyuan-note siyuanSiYuan before v3.7.4 Plugin Overwrite via Bazaar Install5.9 Medium
- Show moreLoading…