Skip to content
Noroxi

CWE-345 · 716 records

Insufficient Verification of Data Authenticity

CVEs in this class

719 records

  • CVE-2023-38831
    91Now

    RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a ZIP archive.

    HighCVSS 7.8KEVWeaponizedEPSS 100%

    rarlab · winrarAug 23, 2023

  • CVE-2022-26871
    75This week

    An arbitrary file upload vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to upload an arbitrary fil

    CriticalCVSS 9.8KEVWeaponizedEPSS 19%

    trendmicro · apex centralMar 29, 2022

  • CVE-2016-4553
    58Plan

    client_side.cc in Squid before 3.5.18 and 4.x before 4.0.10 does not properly ignore the Host header when absolute-URI is provided, which al

    HighCVSS 8.6No exploitEPSS 80%

    canonical · ubuntu linuxMay 10, 2016

  • CVE-2016-4554
    46Plan

    mime_header.cc in Squid before 3.5.18 allows remote attackers to bypass intended same-origin restrictions and possibly conduct cache-poisoni

    HighCVSS 8.6No exploitEPSS 39%

    oracle · linuxMay 10, 2016

  • CVE-2014-4936
    42Plan

    The upgrade functionality in Malwarebytes Anti-Malware (MBAM) consumer before 2.0.3 and Malwarebytes Anti-Exploit (MBAE) consumer 1.04.1.101

    CriticalCVSS 9.3WeaponizedEPSS 17%

    malwarebytes · malwarebytes anti-exploitDec 16, 2014

  • CVE-2014-8165
    41Plan

    scripts/amsvis/powerpcAMS/amsnet.py in powerpc-utils-python uses the pickle Python module unsafely, which allows remote attackers to execute

    CriticalCVSS 10.0No exploitEPSS 3%

    powerpc-utils project · powerpc-utilsFeb 19, 2015

  • CVE-2019-11235
    40Plan

    FreeRADIUS before 3.0.19 mishandles the "each participant verifies that the received scalar is within a range, and that the received group e

    CriticalCVSS 9.8No exploitEPSS 4%

    freeradius · freeradiusApr 22, 2019

  • CVE-2020-28900
    40Plan

    Insufficient Verification of Data Authenticity in Nagios Fusion 4.1.8 and earlier and Nagios XI 5.7.5 and earlier allows for Escalation of P

    CriticalCVSS 9.8No exploitEPSS 3%

    nagios · fusionMay 24, 2021

  • CVE-2018-19971
    40Plan

    JFrog Artifactory Pro 6.5.9 has Incorrect Access Control.

    CriticalCVSS 9.8No exploitEPSS 3%

    jfrog · artifactoryApr 16, 2019

  • CVE-2021-43616
    40Plan

    The npm ci command in npm 7.x and 8.x through 8.1.3 proceeds with an installation even if dependency information in package-lock.json differ

    CriticalCVSS 9.8Proof of conceptEPSS 3%

    npmjs · npmNov 13, 2021

  • CVE-2021-37421
    40Plan

    Zoho ManageEngine ADSelfService Plus 6103 and prior is vulnerable to admin portal access-restriction bypass.

    CriticalCVSS 9.8No exploitEPSS 2%

    zohocorp · manageengine adselfservice plusAug 30, 2021

  • CVE-2013-2167
    40Plan

    python-keystoneclient version 0.2.3 to 0.2.5 has middleware memcache signing bypass

    CriticalCVSS 9.8No exploitEPSS 2%

    openstack · python-keystoneclientDec 10, 2019

  • CVE-2022-22994
    40Plan

    Insufficient Verification of Data Authenticity Remote Code Execution Vulnerability on Western Digital My Cloud devices.

    CriticalCVSS 9.8No exploitEPSS 2%

    westerndigital · my cloud osJan 28, 2022

  • CVE-2026-47691
    40Plan

    Netty has Insufficient Bailiwick Validation for NS Records

    CriticalCVSS 10.0No exploitEPSS 0%

    netty · nettyJun 12, 2026

  • CVE-2022-3703
    40Plan

    ETIC Telecom Remote Access Server Insufficient Verification of Data Authenticity

    CriticalCVSS 10.0No exploitEPSS 0%

    etictelecom · remote access server firmwareNov 10, 2022

  • CVE-2026-45674
    40Plan

    Netty Vulnerable to DNS Cache Poisoning via Missing Bailiwick Checks in CNAME Records

    CriticalCVSS 10.0Proof of conceptEPSS 0%

    netty · nettyJun 12, 2026

  • CVE-2017-3198
    39Monitor

    GIGABYTE BRIX UEFI firmware is not cryptographically signed

    CriticalCVSS 9.8No exploitEPSS 2%

    gigabyte · gb-bsi7h-6500 firmwareJul 9, 2018

  • CVE-2022-31800
    39Monitor

    Insufficient Verification of Data Vulnerability in PHOENIX CONTACT classic line industrial controllers

    CriticalCVSS 9.8No exploitEPSS 2%

    phoenixcontact · axc 1050 firmwareJun 21, 2022

  • CVE-2022-25262
    39Monitor

    In JetBrains Hub before 2022.1.14434, SAML request takeover was possible.

    CriticalCVSS 9.8Proof of conceptEPSS 1%

    jetbrains · hubFeb 25, 2022

  • CVE-2020-14115
    39Monitor

    A command injection vulnerability exists in the Xiaomi Router AX3600.

    CriticalCVSS 9.8No exploitEPSS 1%

    mi · ax3600 firmwareMar 10, 2022

  • CVE-2022-31801
    39Monitor

    Insufficient Verification of Data Vulnerability in ProConOS/ProConOS eCLR SDK and MULTIPROG Engineering tool

    CriticalCVSS 9.8No exploitEPSS 1%

    phoenixcontact · multiprogJun 21, 2022

  • CVE-2022-30315
    39Monitor

    Honeywell Experion PKS Safety Manager (SM and FSC) through 2022-05-06 has Insufficient Verification of Data Authenticity.

    CriticalCVSS 9.8No exploitEPSS 1%

    honeywell · safety manager firmwareJul 28, 2022

  • CVE-2015-3956
    39Monitor

    Hospira Plum A+ Infusion System version 13.4 and prior, Plum A+3 Infusion System version 13.6 and prior, and Symbiq Infusion System, version

    CriticalCVSS 9.8No exploitEPSS 1%

    pifzer · plum a\+ infusion system firmwareMar 25, 2019

  • CVE-2019-18835
    39Monitor

    Matrix Synapse before 1.5.0 mishandles signature checking on some federation APIs.

    CriticalCVSS 9.8No exploitEPSS 1%

    matrix · synapseNov 7, 2019

  • CVE-2019-6695
    39Monitor

    Lack of root file system integrity checking in Fortinet FortiManager VM application images of 6.2.0, 6.0.6 and below may allow an attacker t

    CriticalCVSS 9.8No exploitEPSS 1%

    fortinet · fortimanagerAug 23, 2019

All vulnerability classes