CWE-347: Improper Verification of Cryptographic Signature
The product does not verify, or incorrectly verifies, the cryptographic signature for data.
A kind of CWE-345 Insufficient Verification of Data Authenticity.
From the CWE List. © The MITRE Corporation.
Newest
- openpubkey, opkssh +1 moreAuthentication Bypass in OpenPubKey9.3 Critical
- cisco iosA vulnerability in Cisco IOS Software for Cisco Catalyst 2960X, 2960XR, 2960CX, and 3560CX Series...6.8 Medium
- auth0 passport-wsfed-saml2passport-wsfed-saml2 Has SAML Authentication Bypass via Signature Wrapping9.3 Critical
- microsoft azure functionsAzure Functions Remote Code Execution Vulnerability7.5 High
- libreofficePDF signature forgery with adbe.pkcs7.sha1 SubFilter2.4 Low
- carlinkit cpc200-ccpa, autokit +1 moreCarlinKit CPC200-CCPA update.cgi Improper Verification of Cryptographic Signature Code Execution Vulnerability8.0 High
- carlinkit cpc200-ccpa, autokit +1 moreCarlinKit CPC200-CCPA Improper Verification of Cryptographic Signature Code Execution Vulnerability6.8 Medium
- freedesktop popplerNSSCryptoSignBackend.cc in Poppler before 25.04.0 does not verify the adbe.pkcs7.sha1 signatures...4.3 Medium
- cisco secure network analyticsCisco Secure Network Analytics Privilege Escalation Vulnerability6.0 Medium
- oisf suricataSuricata af-packet: defrag option can lead to truncated packets affecting visibility7.5 High
- msi centerMSI Center before 2.0.52.0 has Missing PE Signature Validation.8.1 High
- minioMinIO performs incomplete signature validation for unsigned-trailer uploads8.7 High
- shibboleth opensaml c++ libraryThe OpenSAML C++ library before 3.3.1 allows forging of signed SAML messages via parameter...4.0 Medium
- node-saml xml-cryptoxml-crypto Vulnerable to XML Signature Verification Bypass via DigestValue Comment9.3 Critical
- node-saml xml-cryptoxml-crypto Vulnerable to XML Signature Verification Bypass via Multiple SignedInfo References9.3 Critical
- str4d ed25519-javaEd25519 Signature Malleability in ed25519-java Due to Missing Scalar Range Check4.3 Medium
- omniauth saml, onelogin ruby-saml, netapp storagegrid +2 moreRuby SAML vulnerable to SAML authentication bypass due to namespace handling (parser differential)9.3 Critical
- omniauth saml, onelogin ruby-saml, netapp storagegrid +2 moreruby-saml vulnerable to SAML authentication bypass due to DOCTYPE handling (parser differential)9.3 Critical
omniauth-samlRubyGemsomniauth-saml has dependency on ruby-saml version with Signature Wrapping Attack issueNo score- cisco ios xr software, ios xr +1 moreCisco IOS XR Software Secure Boot Bypass Vulnerability6.7 Medium
- samsung smartthingsSamsung SmartThings Improper Verification of Cryptographic Signature Authentication Bypass Vulnerability8.8 High
- simplesamlphp saml2SimpleSAMLphp SAML2 library has incorrect signature verification for HTTP-Redirect binding8.6 High
- microsoft windbgWinDbg Remote Code Execution Vulnerability7.5 High
- cisco secure clientCisco Secure Client for Windows with VPN Posture (HostScan) Module DLL Hijacking Vulnerability7.1 High
- printerlogic vasion print, virtual appliance +1 moreVasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923...9.8 Critical
- kingsoft wps office, wps office +1 moreArbitrary Code Execution in WPS Office9.3 Critical
- rustcrypto aeadsAEADs/ascon-aead: Plaintext exposed in decrypt_in_place_detached even on tag verification failure5.6 Medium
- jupyterhub ltiauthenticator, jupyter lti jupyterhub authenticator +1 moreJupyterHub's LTI13Authenticator: JWT signature not validated10.0 Critical
- home-assistant coreSSL validation for outgoing requests in Home Assistant Core and used libs not correct7.0 High
- smci mbd-x12dpg-oa6SMC BMC Firmware Image Authentication Design Issue7.2 High
- amd epyc™ 7001 series, epyc™ 7002 series, epyc™ 7003 series +1 more +3 moreamd64-microcode - security update7.2 High
- polytope-labs hyperbridgeCritical vulnerability in `ismp-grandpa` <v15.0.19.3 Critical
- github enterprise serverImproper Verification of Cryptographic Signature in GitHub Enterprise Server Allows Signature Spoofing by Improper Validation7.6 High
- amazon aws cloud development kit, aws aws-cdk +1 moreIAM OIDC custom resource allows connection to unauthorized OIDC provider in aws-cdk1.8 Low
- ivanti endpoint managerImproper signature verification in Ivanti EPM before the 2024 January-2025 Security Update and...7.8 High
- ces taiwan neoimpact, cs-grp neo impact, greenware greenguard +7 more +9 moreHowyar UEFI Application "Reloader" (32-bit and 64-bit) is vulnerable to execution of unsigned software in a hardcoded path.8.2 High
- xmidt-org cjwtAlgorithm Confusion Vulnerability in cjwt8.7 High
- microsoft excelA library injection vulnerability exists in Microsoft Excel 16.83 for macOS. A specially crafted...7.1 High
- microsoft outlookA library injection vulnerability exists in Microsoft Outlook 16.83.3 for macOS. A specially...7.1 High
- microsoft teams, teams (work or school) +1 moreA library injection vulnerability exists in Microsoft Teams (work or school) 24046.2813.2770.1094...7.1 High
- microsoft wordA library injection vulnerability exists in Microsoft Word 16.83 for macOS. A specially crafted...7.1 High
- microsoft onenoteA library injection vulnerability exists in Microsoft OneNote 16.83 for macOS. A specially...7.1 High
- microsoft teams, teams (work or school) +1 moreA library injection vulnerability exists in the WebView.app helper app of Microsoft Teams (work...7.1 High
- microsoft teams, teams (work or school) +1 moreA library injection vulnerability exists in the com.microsoft.teams2.modulehost.app helper app of...7.1 High
- microsoft powerpointA library injection vulnerability exists in Microsoft PowerPoint 16.83 for macOS. A specially...7.1 High
- dell recoverpoint for virtual machinesDell RecoverPoint for Virtual Machines 6.0.x contains an OS Command injection vulnerability. A...8.8 High
- tp-link archer c50 wireless router, archer c50 firmware +1 moreInsufficient Integrity Verification Vulnerability in TP-Link Archer C508.5 High
- dell networker management consoleDell NetWorker Management Console, version(s) 19.11, contain(s) an Improper Verification of...7.8 High
- samsung android, samsung mobile devices +1 moreImproper Verification of Cryptographic Signature in SmartSwitch prior to SMR Dec-2024 Release 1...7.1 High
- galaxy software services corporation iota c.ai conversational platform, gss iota c.ai +1 moreiota C.ai Conversational Platform - Improper Verification of Cryptographic Signature9.3 Critical
- Show moreLoading…