CWE-354: Improper Validation of Integrity Check Value
The product does not validate or incorrectly validates the integrity check values or "checksums" of a message.
A kind of CWE-345 Insufficient Verification of Data Authenticity.
From the CWE List. © The MITRE Corporation.
Newest
- vllmvLLM using built-in hash() from Python 3.12 leads to predictable hash collisions in vLLM prefix cache2.6 Low
- lexmark printer firmwareA firmware downgrade prevention vulnerability has been identified in newer Lexmark devices.4.3 Medium
@lodestar/reqrespnpmLodestar snappy checksum issueNo score- huawei myna, myna firmware +1 moreThere is an insufficient integrity vulnerability in Huawei products. A module does not perform...6.8 Medium
- nicmx fort validatorA validation integrity issue was discovered in Fort through 1.6.4 before 2.0.0. RPKI Relying...5.3 Medium
- totolink a6000ub firmware, wifi usb driver +1 moreAn issue in TOTOLINK Bluetooth Wireless Adapter A600UB allows a local attacker to execute...7.8 High
- jenkins groovy, jenkins project pipeline: groovy plugin, jenkins pipeline\ +2 moreRebuilding a run with revoked script approval allowed by Jenkins Pipeline: Groovy Plugin8.0 High
- samsung blockchain keystoreImproper validation of integrity check value in Blockchain Keystore prior to version 1.3.16...6.7 Medium
- 2n access commanderIn 2N Access Commander versions 3.1.1.2 and prior, a local attacker can escalate their privileges...4.7 Medium
- linux, linux kernel +1 morenfsd: map the EBADMSG to nfserr_io to avoid warning7.5 High
- cryptocoinjs secp256k1-nodesecp256k1-node vulnerable to private key extraction over ECDH8.7 High
ironicDebian,openstack-ironicRed Hat,openstack-ironic-apiRed Hat +2 more +4 moreOpenStack Ironic fails to verify checksums of supplied image_source URLs5.3 Medium- apex softcell ld geo, apexsoftcell ld dp back office +1 moreUnauthorized Transaction Manipulation Vulnerability8.7 High
- reedos aim-star, reedos software solutions mutual fund distribution product (aim-star) +1 moreParameter Tampering Vulnerability6.9 Medium
- apache mina sshdApache MINA SSHD: integrity check bypass5.9 Medium
- dieboldnixdorf vynamic security suiteDiebold Nixdorf Vynamic Security Suite (VSS) before 3.3.0 SR16, 4.0.0 SR06, 4.1.0 SR04, 4.2.0...6.8 Medium
- dieboldnixdorf vynamic security suiteDiebold Nixdorf Vynamic Security Suite (VSS) before 3.3.0 SR10 fails to validate /etc/mtab during...6.8 Medium
- ietf rfc, broadcom brocade sannav, fabric operating system +478 more +480 moreRADIUS Protocol under RFC2865 is vulnerable to forgery attacks.9.0 Critical
- samsung exynos 1480 firmware, exynos 2200 firmware, exynos 2400 firmware +2 moreAn issue was discovered in Samsung Mobile Processor EExynos 2200, Exynos 1480, Exynos 2400. It...6.8 Medium
- hoppscotch extension, hoppscotch-extension +1 moreHoppscotch Extension responds to calls made by origins not in the domain list7.6 High
- red hat multicluster engine for kubernetes, oadp-1.3-rhel-9, openshift developer tools and services +28 more +30 moreContainers/image: digest type does not guarantee valid type8.3 High
- zscaler client connectorZCC Mac validinstaller file integrity check missing3.3 Low
- zscaler client connectorZCC macOS Upgrade ZIP Bomb DoS4.2 Medium
- zscaler client connectorRepair App local code execution with arbitrary privileges6.0 Medium
- mcu-tools mcubootMCUboot Injection attack of unprotected TLV values7.7 High
mdanter/eccPackagistPHPECC vulnerable to multiple cryptographic side-channel attacks9.1 Critical- litespeedtech lsquicIn LiteSpeed QUIC (LSQUIC) Library before 4.0.4, DCID validation is mishandled.9.8 Critical
- otrsMissing file type check in avatar picture upload3.5 Low
- shelly trv firmwareMissing Integrity Check in Shelly TRV 20220811-152343/v2.1.8@5afc928c allows malicious users to...5.4 Medium
- 9bis kitty, apache sshd, sshj +68 more +70 morePrefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin5.9 Medium
- prolion cryptospikeA missing integrity check in the update system in ProLion CryptoSpike 3.0.15P2 allows attackers...7.2 High
- zscaler client connectorDisable Zscaler using machine tunnel restart4.9 Medium
- fortinet fortios, fortiproxy +1 moreAn improper validation of integrity check value vulnerability [CWE-354] in FortiOS 7.2.0 through...5.8 Medium
- asyncssh project asyncsshAsyncSSH Rogue Session Attack6.8 Medium
- asyncssh project asyncsshAsyncSSH Rogue Extension Negotiation5.9 Medium
- etsi tetra standard, midnightblue tetra\ +1 moreCiphertext Malleability in TETRA5.9 Medium
- nextcloud calendar, kiteworks security-advisories +1 moreInviting excessive long email addresses to a calendar event makes the Nextcloud server unresponsive4.3 Medium
- moxa nport 5000ai-m12 series, nport 5100 series, nport 5100a series +130 more +132 moreNPort 5000 Series Firmware Improper Validation of Integrity Check Vulnerability6.5 Medium
- cisco ios xr software, ios xr +1 moreA vulnerability in the Connectivity Fault Management (CFM) feature of Cisco IOS XR Software could...4.3 Medium
- frrouting, pica8 picos, debian linux +1 more +3 moreFRRouting FRR 7.5.1 through 9.0 and Pica8 PICOS 4.3.3.2 allow a remote attacker to cause a denial...7.5 High
- openssl, netapp management services for element software and netapp hci, ontap select deploy administration utility +2 moreAES-SIV implementation ignores empty associated data entries5.3 Medium
- digiexamDigiExam up to v14.0.2 lacks integrity checks for native modules, allowing attackers to access...9.8 Critical
- zoom rooms, zoom video communications inc rooms for windows +1 moreImproper privilege management in Zoom Rooms before version 5.14.5 may allow an authenticated...7.3 High
- samsung smart switch pcImproper validation of integrity check vulnerability in Smart Switch PC prior to version 4.3...5.5 Medium
- openzeppelin contracts, contracts upgradeable, openzeppelin-contracts +2 moreOpenZeppelin Contracts's MerkleProof multiproofs may allow proving arbitrary leaves for specific trees5.3 Medium
- systemd project systemdAn issue was discovered in systemd 253. An attacker can modify the contents of past events in a...5.3 Medium
- systemd project systemdAn issue was discovered in systemd 253. An attacker can truncate a sealed log file and then...5.3 Medium
- systemd project systemdAn issue was discovered in systemd 253. An attacker can modify a sealed log file such that, in...5.3 Medium
- briarproject briarBriar before 1.4.22 allows attackers to spoof other users' messages in a blog, forum, or private...6.5 Medium
- snap one ovrc cloud, snapone orvc +1 moreSnap One OvrC Pro devices versions 7.2 and prior do not validate firmware...8.6 High
- Show moreLoading…