CWE-354: Improper Validation of Integrity Check Value
The product does not validate or incorrectly validates the integrity check values or "checksums" of a message.
A kind of CWE-345 Insufficient Verification of Data Authenticity.
From the CWE List. © The MITRE Corporation.
Newest
- chainguard-dev apko, melange +1 moremelange: Incomplete package integrity verification allows data section substitution8.3 High
- wolfsslHMAC-BLAKE2 final discards message when key length exceeds block size5.9 Medium
- pnpmpnpm: Integrity Check Bypass via Missing Lockfile Integrity Field6.8 Medium
- mastodonMastodon: Spoofing of attribution domains5.3 Medium
- mastodonMastodon: Removal of integrity-protected JSON entries from signed activities6.5 Medium
- apache apisixApache APISIX: Authentication bypass in jwe-decrypt6.3 Medium
- rockwell automation compactlogix 5370Rockwell Automation CompactLogix 5370 Controllers – Multiple Vulnerabilities8.7 High
- opensslCMS AuthEnvelopedData Processing May Accept Forged Messages9.1 Critical
- opensslPKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys7.4 High
- aws amazon sagemaker python sdkMissing integrity verification in Triton inference handler in Amazon SageMaker Python SDK6.4 Medium
- zcashfoundation zebraZebra 4.4.0 Consensus Divergence via V5 SIGHASH_SINGLE Without Output8.3 High
- legion of the bouncy castle inc. bc-fja, bc-lts +1 moreGCM chunking can lead to bad tag exception on decryption5.1 Medium
- zcashfoundation zebraZebra before 4.4.0 Consensus Split via SIGHASH_SINGLE Missing-Output Handling8.3 High
- linux, linux kernel +1 morecrypto: krb5enc - fix async decrypt skipping hash verification7.5 High
- hexLockfile checksums not verified in Hex allows dependency integrity bypass8.9 High
- neutrinolabs xrdpxrdp: RDP MAC signature (dataSignature) never verified on receive — integrity bypass in non-TLS mode9.3 Critical
- succinct sp1SP1 V6 Recursion Circuit Row-Count Binding Gap8.9 High
- wolfsslwolfSSL EVP ChaCha20-Poly1305 AEAD authentication tag7.6 High
- wolfsslPKCS7 CBC Padding Oracle — Plaintext Recovery6.3 Medium
- krajowa izba rozliczeniowa szafirhostLack of Dynamic Library Validation in SzafirHost8.7 High
- 0xjacky nginx-ui, nginxui nginx ui +1 morenginx-ui Backup Restore Allows Tampering with Encrypted Backups9.4 Critical
- linuxcontainers incusIncus does not verify combined fingerprint when downloading images from simplestreams servers5.7 Medium
- cryptomator android, cryptomator +1 moreCryptomator for Android: Tampered vault configuration allows MITM attack on Hub API7.6 High
- cisco ios, cryptomator +1 moreCryptomator for IOS: Tampered vault configuration allows MITM attack on Hub API7.6 High
- cryptomatorCryptomator: Tampered vault configuration allows MITM attack on Hub API7.6 High
- authlib, red hat lightspeed core, ansible automation platform 2 +7 more +9 moreAuthlib: Fail-Open Cryptographic Verification in OIDC Hash Binding8.2 High
- simplesamlphp xml-securityxml-security is Missing AES-GCM Authentication Tag Validation on Encrypted Nodes Allows for Unauthorized Decryption8.2 High
- robrichards xmlseclibsxmlseclibs is Missing AES-GCM Authentication Tag Validation on Encrypted Nodes Allows for Unauthorized Decryption8.2 High
- striaeStriae has a hash validation utility vulnerability8.2 High
- nimiq core-rs-albatross, proof-of-stake +1 morenimiq/core-rs-albatross's nimiq-blockchain missing proposal body root verification7.1 High
- junkurihara httpsig-hyper, httpsig-rs +1 morehttpsig-hyper has Improper Digest Verification that May Allow Message Integrity Bypass7.5 High
pgpcrates.iorPGP's integrity protection of encrypted data was not always checked6.3 Medium- cryptography.io cryptography, red hat openshift lightspeed, advanced cluster management for kubernetes 2 +23 more +25 morecryptography Subgroup Attack Due to Missing Subgroup Validation for SECT Curves8.2 High
- go-gitgo-git improperly verifies data integrity values for .idx and .pack files4.3 Medium
- sharp np-cr5450h firmware, np-cr5450hl firmware, np-cr5450w firmware +24 more +26 moreImproper Validation of Integrity Check Value vulnerability in Sharp Display Solutions projectors...9.5 Critical
- nvidia dgx spark, dgx os +1 moreNVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause...5.7 Medium
- palo alto networks prisma browserPrisma Browser: Insufficient Validation of Untrusted Input Vulnerability in Prisma Browser1.1 Low
io.github.ascopes:protobuf-maven-pluginMavenProtobuf Maven Plugin protocDigest is ignored when using protoc from PATH1.0 Low- mantisbtMantisBT: Authentication bypass for some passwords due to PHP type juggling5.4 Medium
- netskope clientNetskope Client Configuration Tampering with Local MITM7.0 High
- jwt ruby-jwejwe: Missing AES-GCM authentication tag validation in encrypted JWEs9.1 Critical
- comodo internet security premium, internet security +1 moreComodo Internet Security Premium Manifest File cis_update_x64.xml integrity check9.2 Critical
- electronElectron ASAR Integrity bypass by just modifying the content7.8 High
- hitachi energy microscada x sys600A vulnerability exists in the IEC 61850 of the MicroSCADA X SYS600 product. An IEC 61850-8...7.1 High
- aveva pi connector for cygnetAVEVA PI Connector for CygNet Improper Validation of Integrity Check Value6.7 Medium
- wpmudev forminator forms – contact form, payment form & custom form builder, forminator forms +1 moreForminator <= 1.42.0 - Order Replay Vulnerability5.3 Medium
- rocklobster contact form 7Contact Form 7 <= 6.0.5 - Order Replay Vulnerability5.3 Medium
- apple macosThis issue was addressed with improved handling of executable types. This issue is fixed in macOS...5.5 Medium
- fortinet fortindrAn improper validation of integrity check value vulnerability [CWE-354] in FortiNDR version 7.4.2...6.0 Medium
- txone networks safe lock, stellarenforce, stellarprotect (legacy mode) +2 moreTXOne Networks StellarProtect (Legacy Mode), StellarEnforce, and Safe Lock Improper Validation of Integrity Check Value Vulnerability5.4 Medium
- Show moreLoading…