CWE-354: Improper Validation of Integrity Check Value
The product does not validate or incorrectly validates the integrity check values or "checksums" of a message.
A kind of CWE-345 Insufficient Verification of Data Authenticity.
From the CWE List. © The MITRE Corporation.
Newest
- lightning network daemon project network daemonPrior to 0.10.0-beta, LND (Lightning Network Daemon) would have accepted a counterparty high-S signature and broadcast tx-relay invalid local commitment/HTLC transactions. This can be exploited by any…5.3 Medium
- wireshark, debian linux, fedoraproject fedora +2 more +4 moreIn Wireshark 3.2.0 to 3.2.6, 3.0.0 to 3.0.13, and 2.6.0 to 2.6.20, the TCP dissector could crash....7.5 High
- lg ipsfullhd, ultrawide, lgpcsuite setup +2 more +4 moreDLL Hijacking Vulnerabilities During Installation of LG Electronics Software5.6 Medium
- woocommerce nab transactAn issue was discovered in the NAB Transact extension 2.1.0 for the WooCommerce plugin for...7.5 High
- handysoft hslogin2.dllHandySoft ActiveX File Download and Execution Vulnerability8.8 High
- sylabs singularityExecution Control List (ECL) Is Insecure in Singularity7.5 High
- sylabs singularitySecurity update for singularity7.5 High
- nvidia gpu display driver, geforce experience, geforce firmware +3 more +5 moreNVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the service host...7.8 High
- huawei p30 firmware, p30 pro firmware +1 moreHUAWEI P30 and HUAWEI P30 Pro with versions earlier than 10.1.0.135(C00E135R2P11) and versions...4.6 Medium
- sap business clientSAP Business Client, versions 6.5, 7.0, does not perform necessary integrity checks which could...5.3 Medium
- huawei osca-550 firmware, osca-550a firmware, osca-550ax firmware +1 more +3 moreThere is an insufficient integrity validation vulnerability in several products. The device does...4.6 Medium
- google androidAn issue was discovered on Samsung mobile devices with N(7.x), O(8.0) devices (MSM8998 or SDM845...8.4 High
- google androidAn issue was discovered on Samsung mobile devices with N(7.x) software. An attacker can boot a...7.2 High
- google androidAn issue was discovered on Samsung mobile devices with M(6.0) and N(7.0) (Exynos5433, Exynos7420,...7.5 High
- zohocorp manageengine assetexplorerAn issue was discovered in Zoho ManageEngine AssetExplorer 6.5. During an upgrade of the Windows...6.4 Medium
- huawei hege-560 firmware, hege-570 firmware, osca-550 firmware +3 more +5 moreThere is an improper integrity checking vulnerability on some huawei products. The software of...3.9 Low
- huawei usg9500, usg9500 firmware +1 moreUSG9500 with versions of V500R001C30;V500R001C60 have a missing integrity checking vulnerability....4.9 Medium
- shapeshift keepkey firmwareInsufficient checks in the finite state machine of the ShapeShift KeepKey hardware wallet before...7.5 High
- moodle, fedoraproject fedora +1 moreMoodle before 2.2.2 has an external enrolment plugin context check issue where capability checks...7.5 High
- oneidentity cloud access managerOne Identity Cloud Access Manager before 8.1.4 Hotfix 1 allows OTP bypass via vectors involving a...8.1 High
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +11 more +13 moreA tampering vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able...5.9 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: EX2300, EX3400 Series: Veriexec signature checking not enforced in specific versions of Junos OS7.8 High
- mozilla firefox, firefox esr +1 moreThe Firefox installer allows Firefox to be installed to a custom user writable location, leaving...7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1703 +14 more +16 moreWindows File Signature Security Feature Bypass Vulnerability5.5 Medium
- libreswan, fedoraproject fedora, redhat enterprise linux +2 more +4 moreThe Libreswan Project has found a vulnerability in the processing of IKEv1 informational exchange...3.1 Low
- progress fiddlerTelerik Fiddler v5.0.20182.28034 doesn't verify the hash of EnableLoopback.exe before running it,...7.8 High
- facebook osqueryAn issue was discovered in osquery. A maliciously crafted Universal/fat binary can evade third...7.8 High
- open shortest path first (ospf) protocol, quagga, suse opensuse +2 more +4 moreOpen Shortest Path First (OSPF) protocol implementations may improperly determine LSA recency in affected Quagga and downstream implementations (SUSE, openSUSE, and Red Hat packages)8.2 High
- tlslite-ng project tlslite-ngtlslite-ng off-by-one error on mac checking5.9 Medium
- legion of the bouncy castle bouncy castle, bouncycastle bc-java, redhat satellite +1 more +3 moreBouncy Castle BKS-V1 keystore files vulnerable to trivial hash collisions4.4 Medium
- phoenixcontact mguard centerport firmware, mguard core tx vpn firmware, mguard delta tx\/tx firmware +20 more +22 moreAn Improper Validation of Integrity Check Value issue was discovered in PHOENIX CONTACT mGuard...7.8 High
- samba rsyncrsync 3.1.3-development before 2017-10-24 mishandles archaic checksums, which makes it easier for...9.8 Critical
- lenovo service framework, lenovo group ltd. service framework application +1 moreThe Lenovo Service Framework Android application uses a set of nonsecure credentials when...8.1 High
- connect2id nimbus jose\+jwtNimbus JOSE+JWT vulnerable to padding oracle attack3.1 Low
- comcast xfinity xr11-20 firmware, motorola mx011anm firmware +1 moreThe Comcast firmware on Motorola MX011ANM (firmware version MX011AN_2.9p6s1_PROD_sey) and Xfinity...5.5 Medium
- infotecs vipnet client, vipnet coordinator +1 moreInfotecs ViPNet Client and Coordinator before 4.3.2-42442 allow local users to gain privileges by...7.3 High
- cloud foundry boshAn issue was discovered in Cloud Foundry Foundation BOSH Release 261.x versions prior to 261.3...8.8 High