CWE-354: Improper Validation of Integrity Check Value
The product does not validate or incorrectly validates the integrity check values or "checksums" of a message.
A kind of CWE-345 Insufficient Verification of Data Authenticity.
From the CWE List. © The MITRE Corporation.
Newest
- jetbrains ktor In JetBrains Ktor before 3.6.1 session forgery was possible via tampered encrypted session cookies 8.1 High
- undici undici vulnerable to Subresource Integrity bypass via whitespace in integrity metadata 5.9 Medium
- bitcoinjs bitcoinjs-lib bitcoinjs-lib: Undetected merkle node duplication in block root computation validates a forged transaction list 9.3 Critical
- digitalbazaar forge Forge: Incomplete PKCS#7 padding validation in AES/DES CBC and ECB decryption 3.7 Low
- dell powerprotect data domain Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release... 6.7 Medium
- damo academy videollama2 DAMO Academy VideoLLaMA2 Model Loading __init__.py load_pretrained_model integrity check 5.3 Medium
- appsup-dart jose Attacker-controlled AES-GCM authentication tag length allows tag forgery in jose 5.9 Medium
- zip-rs zip2 zip: AES Entry HMAC Authentication Bypass on Premature EOF 6.5 Medium
- eclipse foundation keypont - gose HmacShaCryptor.Hash never hashes its input — returns constant HMAC_K("") for all inputs, voiding CBC-HMAC JWE integrity 8.8 High
- nlnet labs unbound Bypass of a configured island trust anchor underneath an insecure parent from an atacker-controlled NSEC record. 3.7 Low
- pypa virtualenv virtualenv: Downloaded wheel selection and caching precede verification 2.3 Low
- apple macos The issue was addressed with additional app bundle integrity checks. This issue is fixed in macOS... 7.5 High
- apache camel Apache Camel: Camel-Crypto-PGP Integrity Verification Downgrade via Attacker-Controlled Message Structure 5.9 Medium
- distribution Distribution: Client `manifests.Get()` does not verify returned content against requested digest 6.8 Medium
- zcashfoundation zebra Zebra before 6.4.0 Gossiped Block Drop via Forged Coinbase scriptSig Height 6.3 Medium
- hexpm hex Hex writes unverified package tarballs to standard output in mix hex.package fetch 6.9 Medium
- go toolchain cmd/go Checksum database bypass for golang.org/toolchain in cmd/go 7.8 High
- go toolchain cmd/go Checksum bypass for golang.org/fips140 in cmd/go 7.8 High
- mongodb libmongocrypt Unrecognized payload acceptance in explicit decryption in MongoDB libmongocrypt 5.3 Medium
- hp inc thinpro 8.1, thinpro 9 +1 more HP ThinPro 8.1 SP10 and ThinPro 9 SP3 Security Updates 6.8 Medium
- moby buildkit Cache poisoning via unvalidated image layer DiffIDs 7.5 High
- moby buildkit Container blob cache can accept unverified content 5.9 Medium
- legion of the bouncy castle inc. bc-fja, bc-java, bc-lts-java +2 more CMS AuthenticatedData exposes attacker-inserted authAttrs when digestAlgorithm is absent 8.7 High
- legion of the bouncy castle inc. bc-fja, bc-java, bc-lts-java +2 more OpenPGP message truncation not reported, bypassing the SEIPDv1 integrity check 8.2 High
- bouncycastle bc-csharp CcmBlockCipher and KCcmBlockCipher leave unverified plaintext in the output buffer after a failed tag check 8.2 High
- bouncycastle bc-csharp IesEngine stream-mode MAC forgery via length-dependent KDF split 8.2 High
- bouncycastle bc-csharp AES-CCM decryption accepts zero or out-of-range tag length, bypassing authentication 8.2 High
- eclipse foundation netx duo NetX Secure TLS accepts an empty application-data record without verifying its message... 6.3 Medium
- tauri tauri-plugin-updater Tauri framework v2 missing updater signature version number validation can be exploited into forced downgrade 5.9 Medium
- ultravioletrs cocos Cocos AI: Intra-handshake attested TLS implementation is vulnerable to session-misbinding attacks for Intel TDX verifier path 9.1 Critical
- midnightbsd mport mport verify can compare stale checksum data after hashing failures 2.0 Low
- midnightbsd mport mport index decompression can leave partial or corrupt index data after zstd failures 8.3 High
- arista networks eos Security Advisory 0160 7.0 High
- netcore nr268 Netcore NR268 1.7.121109 Forgeable Firmware Authenticity Check in mtd_write 8.7 High
- microsoft windows 11 version 23h2, windows 11 version 24h2, windows 11 version 25h2 +7 more +9 more Windows Installer Elevation of Privilege Vulnerability 7.8 High
- cisco secure email Cisco Secure Email S/MIME Ciphertext Decryption Vulnerabilty 5.9 Medium
- linux foundation magma Linux Foundation Magma SecurityModeComplete integrity check 6.9 Medium
- No product listed An issue in Vanderbilt Industries, Acre Security SPC5300.000 Main Board v.3.14.1 allows a... 7.5 High
- openssl AEAD Forgeries with Empty Ciphertext When Using EVP_Cipher() 9.1 Critical
- uber kraken Kraken Agents Peer-to-Peer Download Cache Poisoning via Digest Verification Bypass 9.1 Critical
- bouncycastle bcpg-fips, bouncy castle for java lts, legion of the bouncy castle inc. bc-fja +2 more +4 more OpenPGP AEAD decryption skips final tag on chunk-aligned data 8.7 High
- bouncycastle bouncy castle for java lts, bc-java, legion of the bouncy castle inc. bc-lts-java +2 more IESEngine stream-mode MAC forgery via length-dependent KDF split 8.7 High
- bouncycastle bouncy castle for java lts, bc-java, legion of the bouncy castle inc. bc-lts-java +2 more KCCMBlockCipher MAC does not bind nonce when AAD is absent (cross-nonce AEAD forgery) 8.7 High
- bouncycastle bcpkix-fips, bouncy castle for java lts, legion of the bouncy castle inc. bc-fja +2 more +4 more CMS AuthEnvelopedData fails to enforce tag-length on decryption 8.7 High
- bouncycastle bouncy castle for java lts, legion of the bouncy castle inc. bc-fja, bouncycastle bc-java +2 more +4 more CCM-family modes write plaintext to caller buffer before tag check 8.7 High
- bouncycastle bcpkix-fips, bouncy castle for java lts, legion of the bouncy castle inc. bc-fja +2 more +4 more CMS AuthenticatedData content not bound to MAC when authAttrs present 8.7 High
- nlnet labs unbound Possible heap buffer overflow when validator canonicalizes RDATA that contains domain name 4.8 Medium
- aws s2n-tls Silent Drop of TLS 1.3 Encrypted Records in s2n-tls 8.3 High
- asus router An Improper Validation of Integrity Check Value and Improper Certificate Validation in certain... 9.5 Critical
- rockwell automation 1756-en2, 1756-en3, 1756-enbt +1 more 1756-EN2, 1756-EN3, and 1756-ENBT - Denial of Service via CIP Connection ID 8.7 High
- Show olderLoading…