Skip to content
Noroxi

CWE-354 · 192 records

Improper Validation of Integrity Check Value

CVEs in this class

192 records

  • CVE-2023-48795
    51Plan

    The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypas

    MediumCVSS 5.9Proof of conceptEPSS 93%

    ssh · sshDec 18, 2023

  • CVE-2019-1166
    43Plan

    A tampering vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to successfully bypass the NTLM MIC (Message

    MediumCVSS 5.9No exploitEPSS 68%

    microsoft · windows 10Oct 10, 2019

  • CVE-2024-3596
    40Plan

    RADIUS Protocol under RFC2865 is vulnerable to forgery attacks.

    CriticalCVSS 9.0Proof of conceptEPSS 14%

    freeradius · freeradiusJul 9, 2024

  • CVE-2017-15994
    39Monitor

    rsync 3.1.3-development before 2017-10-24 mishandles archaic checksums, which makes it easier for remote attackers to bypass intended access

    CriticalCVSS 9.8No exploitEPSS 1%

    samba · rsyncOct 29, 2017

  • CVE-2023-33668
    39Monitor

    DigiExam up to v14.0.2 lacks integrity checks for native modules, allowing attackers to access PII and takeover accounts on shared computers

    CriticalCVSS 9.8Proof of conceptEPSS 0%

    digiexam · digiexamJul 12, 2023

  • CVE-2023-28386
    39Monitor

    Snap One OvrC Pro devices versions 7.2 and prior do not validate firmware updates correctly.

    CriticalCVSS 9.8No exploitEPSS 0%

    snapone · orvcMay 22, 2023

  • CVE-2024-25678
    39Monitor

    In LiteSpeed QUIC (LSQUIC) Library before 4.0.4, DCID validation is mishandled.

    CriticalCVSS 9.8No exploitEPSS 0%

    litespeedtech · lsquicFeb 9, 2024

  • CVE-2025-11543
    38Monitor

    Improper Validation of Integrity Check Value vulnerability in Sharp Display Solutions projectors allows a attacker may create and run unauth

    CriticalCVSS 9.5No exploitEPSS 0%

    sharp · np-p502h firmwareDec 22, 2025

  • CVE-2026-32105
    37Monitor

    xrdp: RDP MAC signature (dataSignature) never verified on receive — integrity bypass in non-TLS mode

    CriticalCVSS 9.3No exploitEPSS 0%

    neutrinolabs · xrdpApr 17, 2026

  • CVE-2026-34182
    36Monitor

    CMS AuthEnvelopedData Processing May Accept Forged Messages

    CriticalCVSS 9.1No exploitEPSS 1%

    openssl · opensslJun 9, 2026

  • CVE-2022-29898
    36Monitor

    Remote Code Execution in all versions of various RAD-ISM-900-EN-* devices by PHOENIX CONTACT

    CriticalCVSS 9.1No exploitEPSS 0%

    phoenixcontact · rad-ism-900-en-bd firmwareMay 11, 2022

  • CVE-2025-54887
    36Monitor

    jwe: Missing AES-GCM authentication tag validation in encrypted JWEs

    CriticalCVSS 9.1Proof of conceptEPSS 0%

    jwt · ruby-jweAug 7, 2025

  • CVE-2026-75803
    36Monitor

    AEAD Forgeries with Empty Ciphertext When Using EVP_Cipher()

    CriticalCVSS 9.1No exploitEPSS 0%

    openssl · opensslAug 25, 2026

  • CVE-2026-75625
    36Monitor

    Kraken Agents Peer-to-Peer Download Cache Poisoning via Digest Verification Bypass

    CriticalCVSS 9.1No exploitEPSS 0%

    uber · krakenAug 18, 2026

  • CVE-2020-25758
    35Monitor

    An issue was discovered on D-Link DSR-250 3.17 devices.

    HighCVSS 8.8No exploitEPSS 1%

    dlink · dsr-150 firmwareDec 15, 2020

  • CVE-2022-29173
    35Monitor

    No protection against rollback attacks in go-tuf

    HighCVSS 8.8No exploitEPSS 0%

    theupdateframework · go-tufMay 5, 2022

  • CVE-2017-4961
    35Monitor

    An issue was discovered in Cloud Foundry Foundation BOSH Release 261.x versions prior to 261.3 and all 260.x versions.

    HighCVSS 8.8No exploitEPSS 0%

    cloud foundry · boshJun 13, 2017

  • CVE-2020-14120
    35Monitor

    Some Xiaomi models have a vulnerability in a certain application.

    HighCVSS 8.8No exploitEPSS 0%

    mi · miuiApr 21, 2022

  • CVE-2023-4929
    35Monitor

    NPort 5000 Series Firmware Improper Validation of Integrity Check Vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    moxa · nport 5150ai-m12-ct-t firmwareOct 3, 2023

  • CVE-2026-32148
    35Monitor

    Lockfile checksums not verified in Hex allows dependency integrity bypass

    HighCVSS 8.9No exploitEPSS 0%

    hex · hexApr 30, 2026

  • CVE-2026-89320
    35Monitor

    HmacShaCryptor.Hash never hashes its input — returns constant HMAC_K("") for all inputs, voiding CBC-HMAC JWE integrity

    HighCVSS 8.8No exploitEPSS 0%

    eclipse foundation · eclipse keypont - goseOct 23, 2026

  • CVE-2024-48930
    34Monitor

    secp256k1-node vulnerable to private key extraction over ECDH

    HighCVSS 8.7No exploitEPSS 0%

    cryptocoinjs · secp256k1-nodeOct 21, 2024

  • CVE-2026-59642
    34Monitor

    CMS AuthenticatedData content not bound to MAC when authAttrs present

    HighCVSS 8.7No exploitEPSS 0%

    bouncycastle · bc-javaAug 2, 2026

  • CVE-2026-58061
    34Monitor

    CCM-family modes write plaintext to caller buffer before tag check

    HighCVSS 8.7No exploitEPSS 0%

    bouncycastle · bc-javaAug 2, 2026

  • CVE-2026-76852
    34Monitor

    Netcore NR268 1.7.121109 Forgeable Firmware Authenticity Check in mtd_write

    HighCVSS 8.7No exploitEPSS 0%

    netcore · nr268Sep 15, 2026

All vulnerability classes