CWE-345

An issue was discovered in Xen through 4.14.x allowing x86 guest OS users to cause a denial of service (data corruption)

An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. Attackers can trigger an up

An issue was discovered in Mattermost Server before 5.21.0. Socket read operations are not appropriately restricted, whi

OAuth flow missing verification checks CE/EE 12.3 and later through 13.0.1 allows unverified user to use OAuth authoriza

Grin 3.0.0 before 4.0.0 has insufficient validation of data related to Mimblewimble.

jitsi-meet-electron (aka Jitsi Meet Electron) before 2.3.0 calls the Electron shell.openExternal function without verify

An exploitable code execution vulnerability exists in the Web-Based Management (WBM) functionality of WAGO PFC 200 03.03

A sandbox escape issue was discovered in TitanHQ SpamTitan Gateway 7.07. It limits the admin user to a restricted shell,

When SAML authentication is enabled, Juniper Networks Mist Cloud UI might incorrectly handle child elements in SAML resp

A vulnerability in the inter-service communication of Cisco AnyConnect Secure Mobility Client for Android could allow an

A vulnerability in the hardware crypto driver of Cisco IOS XE Software for Cisco 4300 Series Integrated Services Routers

A function in the Teradici PCoIP Standard Agent for Windows and Graphics Agent for Windows prior to version 20.04.1 does

includes/options.php in the motors-car-dealership-classified-listings (aka Motors - Car Dealer & Classified Ads) plugin

WS5800-10 version 10.0.3.25 has a denial of service vulnerability. Due to improper verification of specific message, an

A flaw was found in the Linux kernels SELinux LSM hook implementation before version 5.7, where it incorrectly assumed t

Reportexpress ProPlus contains a vulnerability that could allow an arbitrary code execution by inserted VBscript into th

An issue existed in the handling of iMessage tapbacks. The issue was resolved with additional verification. This issue i

CNCF Envoy through 1.13.0 TLS inspector bypass. TLS inspector could have been bypassed (not recognized as a TLS client)

An issue was discovered in Joomla! through 3.9.19. Missing validation checks on the usergroups table object can result i

IP address spoofing when proxying using mod_remoteip and mod_rewrite For configurations using proxying with mod_remoteip

A Insufficient Verification of Data Authenticity vulnerability in autoyast2 of SUSE Linux Enterprise Server 12, SUSE Lin

A vulnerability in the anycast gateway feature of Cisco NX-OS Software could allow an unauthenticated, adjacent attacker

A vulnerability in the automatic update process of Cisco Umbrella Roaming Client for Windows could allow an authenticate

User email verification bypass in GitLab CE/EE 12.5 and later through 13.0.1 allows user to bypass email verification

In webpack-subresource-integrity before version 1.5.1, all dynamically loaded chunks receive an invalid integrity hash t

Zoom Client for Meetings through 4.6.8 on macOS has the disable-library-validation entitlement, which allows a local pro

Cisco Webex Business Suite before 39.1.0 contains a vulnerability that could allow an unauthenticated, remote attacker t

Hospira Plum A+ Infusion System version 13.4 and prior, Plum A+3 Infusion System version 13.6 and prior, and Symbiq Infu

JFrog Artifactory Pro 6.5.9 has Incorrect Access Control.

FreeRADIUS before 3.0.19 mishandles the "each participant verifies that the received scalar is within a range, and that

Lack of root file system integrity checking in Fortinet FortiManager VM application images of 6.2.0, 6.0.6 and below may

Matrix Synapse before 1.5.0 mishandles signature checking on some federation APIs. Events sent over /send_join, /send_le

Lack of integrity check allows MODEM to accept any NAS messages which can result into authentication bypass of NAS in Sn

python-keystoneclient version 0.2.3 to 0.2.5 has middleware memcache signing bypass

Hex package manager version 0.14.0 through 0.18.2 contains a Signing oracle vulnerability in Package registry verificati

Hex package manager hex_core version 0.3.0 and earlier contains a Signing oracle vulnerability in Package registry verif

The Sophos UTM VPN endpoint interacts with client software provided by NPC Engineering (www.ncp-e.com). The affected cli

It was found that in icedtea-web up to and including 1.7.2 and 1.8.2 executable code could be injected in a JAR file wit

An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), ak

Boot image not getting verified by AVB in Snapdragon Auto, Snapdragon Mobile, Snapdragon Wearables in MDM9607, MSM8909W,

Barco ClickShare Button R9861500D01 devices before 1.10.0.13 have Missing Support for Integrity Check. The Barco signed

GUP (generic update process) in LightySoft LogMX before 7.4.0 does not properly verify the authenticity of updates, whic

A vulnerability has been identified in SIMATIC Drive Controller family (All versions), SIMATIC ET 200SP Open Controller

RouterOS versions 6.45.6 Stable, 6.44.5 Long-term, and below are vulnerable to a DNS unrelated data attack. The router a

A security bypass vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An unauth

Auth0 Passport-SharePoint before 0.4.0 does not validate the JWT signature of an Access Token before processing. This al

Cloud Foundry BOSH Backup and Restore CLI, all versions prior to 1.5.0, does not check the authenticity of backup script

On Keeper K5 20.1.0.25 and 20.1.0.63 devices, remote code execution can occur by inserting an SD card containing a file

A vulnerability in Cisco Advanced Malware Protection (AMP) for Endpoints for Windows could allow an authenticated, local

Barco ClickShare Button R9861500D01 devices before 1.10.0.13 have Missing Support for Integrity Check. The ClickShare Bu