CWE-347: Improper Verification of Cryptographic Signature
The product does not verify, or incorrectly verifies, the cryptographic signature for data.
A kind of CWE-345 Insufficient Verification of Data Authenticity.
From the CWE List. © The MITRE Corporation.
Newest
- aveva system platformAVEVA System Platform Improper Verification of Cryptographic Signature7.2 High
- belden eagle 20 tofino 943 987-501-tx\/tx firmware, eagle 20 tofino 943 987-502 -tx\/mm firmware, eagle 20 tofino 943 987-504-mm\/tx firmware +10 more +12 moreOn Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F22 before 03.23, TCSEFEA23F3F20/21,...6.8 Medium
- yubico ykneo-openpgpYubico ykneo-openpgp before 1.0.10 has a typo in which an invalid PIN can be used. When first...8.8 High
- google firebase php-jwtFirebase PHP-JWT key/algorithm type confusion9.1 Critical
- saltstack saltSaltStack Improper Verification of Cryptographic Signature8.8 High
- digitalbazaar forgeImproper Verification of Cryptographic Signature in `node-forge`7.5 High
- digitalbazaar forgeImproper Verification of Cryptographic Signature in node-forge7.5 High
- chainsafe js-libp2p-noiseFailure to validate signature during handshake in @chainsafe/libp2p-noise8.1 High
- wire wire-serverImproper Verification of Cryptographic Signature in wire-server9.1 Critical
- st j-safe3 firmware, stsafe-j firmware +1 moreSTMicroelectronics STSAFE-J 1.1.4, J-SAFE3 1.2.5, and J-SIGN sometimes allow attackers to obtain...6.2 Medium
- st j-safe3 firmware, stsafe-j firmware +1 moreSTMicroelectronics STSAFE-J 1.1.4, J-SAFE3 1.2.5, and J-SIGN sometimes allow attackers to abuse...6.2 Medium
- octobercms octoberMissing server signature validation in OctoberCMS4.8 Medium
- libreoffice, fedoraproject fedora +1 moreIncorrect trust validation of signature with ambiguous KeyInfo children7.5 High
- cisco small business rv160, rv260, rv340, and rv345 series routers, small business rv series router firmware, rv160 firmware +8 more +10 moreCisco Small Business RV Series Routers Vulnerabilities10.0 Critical
jsrsasignnpmSignatures are mistakenly recognized to be valid in jsrsasignNo score- huawei emui, harmonyos, magic ui +2 moreThere is a vulnerability of signature verification mechanism failure in system upgrade through...5.5 Medium
- acronis cyber protect home office, true image 2021, true image +2 moreLocal privilege escalation due to unrestricted loading of unsigned libraries7.8 High
- reolink rlc-410w firmwareA firmware update vulnerability exists in the "update" firmware checks functionality of...8.3 High
- digitalbazaar forgeImproper Verification of Cryptographic Signature in `node-forge`5.3 Medium
- pac4jPac4j token validation bypass if OpenID Connect provider supports none algorithm7.5 High
- trendnet tew-827dru firmwareTrendnet AC2600 TEW-827DRU version 2.08B01 contains an improper access control configuration that...6.5 Medium
github.com/tendermint/tendermintGoSignature verification failure in TendermintNo score- fedoraproject fedora, perl comprehensive perl archive network +1 moreCPAN 2.28 allows Signature Verification Bypass.7.8 High
- app\ \, fedoraproject fedora +1 moreThe App::cpanminus package 1.7044 for Perl allows Signature Verification Bypass.7.8 High
- intel ac1550 firmware, ac 3165 firmware, ac 3168 firmware +12 more +14 moreImproper verification of cryptographic signature in the installer for some Intel(R) Wireless...5.5 Medium
- red hat, inc. rpmThere is a flaw in RPM's signature functionality. OpenPGP subkeys are associated with a primary...4.7 Medium
- zoom client for meetings, zoom video communications inc client for meetings for windows +1 moreZoom Windows installation executable signature bypass4.7 Medium
- starkbank elixir ecdsaecdsa-elixir fails to check signatures, vulnerable to message forging9.8 Critical
- starkbank ecdsa-javaImproper Verification of Cryptographic Signature in starkbank-ecdsa9.8 Critical
- starkbank ecdsa-nodeImproper Verification of Cryptographic Signature in starkbank-ecdsa9.8 Critical
- starkbank ecdsa-pythonImproper Verification of Cryptographic Signature in starkbank-ecdsa9.8 Critical
- starkbank ecdsa-dotnetImproper Verification of Cryptographic Signature in starkbank-ecdsa9.8 Critical
com.starkbank:ecdsa-javaMaven,starkbank-ecdsanpm +1 moreSignature verification vulnerability in Stark Bank ecdsa librariesNo score- gitlabLack of email address ownership verification in the CODEOWNERS feature in all versions of GitLab...5.3 Medium
- huawei imanager neteco 6000 firmware, imanager neteco firmware +1 moreThere is a signature management vulnerability in some huawei products. An attacker can forge...7.2 High
- redhat coreos-installercoreos-installer improperly verifies GPG signature when decompressing gzipped artifact7.8 High
- apache openofficeContent Manipulation with Certificate Validation Attack7.5 High
- apache openofficeTimestamp Manipulation with Signature Wrapping5.3 Medium
- apache openofficeDouble Certificate Attack7.5 High
- esri portal for arcgisThere is an privilege escalation vulnerability in organization-specific logins in Esri Portal for ArcGIS versions 10.9 and below.8.8 High
- zohocorp manageengine admanager plusZoho ManageEngine ADManager Plus version 7110 and prior allows account takeover via SSO.9.8 Critical
- mcafee agent, mcafee,llc mcafee agent for windows +1 moreImproper privilege management in repair process of MA for Windows8.2 High
- mcafee agent, mcafee,llc mcafee agent for windows +1 moreDLL side loading vulnerability in MA for Windows8.2 High
- cisco ios xr software, ios xr +1 moreCisco IOS XR Software for Cisco 8000 and Network Convergence System 540 Series Routers Image Verification Vulnerabilities6.0 Medium
- cisco ios xr software, ios xr +1 moreCisco IOS XR Software for Cisco 8000 and Network Convergence System 540 Series Routers Image Verification Vulnerabilities6.0 Medium
- palo alto networks cortex xsoarCortex XSOAR: Authentication Bypass in SAML Authentication8.1 High
- apple ipados, macos, tvos +3 more +5 moreAn issue in code signature validation was addressed with improved checks. This issue is fixed in...7.5 High
- bbraun spacecom2An Insufficient Verification of Data Authenticity vulnerability in B. Braun SpaceCom2 prior to...10.0 Critical
- eclipse californium, the eclipse foundation eclipse californium +1 moreIn Eclipse Californium version 2.0.0 to 2.6.4 and 3.0.0-M1 to 3.0.0-M3, the certificate based ...7.5 High
- cisco expressway, telepresence video communication server, telepresence video communication server (vcs) expressway +2 moreCisco Expressway Series and TelePresence Video Communication Server Image Verification Vulnerability4.7 Medium
- Show moreLoading…