CWE-347

Octobercms is a self-hosted CMS platform based on the Laravel PHP Framework. Affected versions of OctoberCMS did not val

There is a flaw in RPM's signature functionality. OpenPGP subkeys are associated with a primary key via a "binding signa

An Insufficient Verification of Data Authenticity vulnerability in B. Braun SpaceCom2 prior to 012U000062 allows a remot

Bash injection vulnerability and bypass of signature verification in Rostelecom CS-C2SHW 5.0.082.1. The camera reads fir

A flaw was found in keylime 5.8.1 and older. The issue in the Keylime agent and registrar code invalidates the cryptogra

If Apache Pulsar is configured to authenticate clients using tokens based on JSON Web Tokens (JWT), the signature of the

tEnvoy contains the PGP, NaCl, and PBKDF2 in node.js and the browser (hashing, random, encryption, decryption, signature

A firmware validation issue was discovered in HMI3 Control Panel in Swisslog Healthcare Nexus Panel operated by released

An issue was discovered in the libsecp256k1 crate before 0.5.0 for Rust. It can verify an invalid signature because it a

Zoho ManageEngine ADManager Plus version 7110 and prior allows account takeover via SSO.

The verify function in the Stark Bank Elixir ECDSA library (ecdsa-elixir) 1.0.0 fails to check that the signature is non

The verify function in the Stark Bank .NET ECDSA library (ecdsa-dotnet) 1.3.1 fails to check that the signature is non-z

The verify function in the Stark Bank Java ECDSA library (ecdsa-java) 1.0.0 fails to check that the signature is non-zer

The verify function in the Stark Bank Node.js ECDSA library (ecdsa-node) 1.1.2 fails to check that the signature is non-

The verify function in the Stark Bank Python ECDSA library (aka starkbank-escada or ecdsa-python) before 2.0.1 fails to

An improper verification of cryptographic signature vulnerability exists in the Palo Alto Networks Prisma Cloud Compute

In the jsrsasign package through 10.1.13 for Node.js, some invalid RSA PKCS#1 v1.5 signatures are mistakenly recognized

Portofino is an open source web development framework. Portofino before version 5.2.1 did not properly verify the signat

IBM Power9 Self Boot Engine(SBE) could allow a privileged user to inject malicious code and compromise the integrity of

An issue was discovered in Hitachi ID Bravura Security Fabric 11.0.0 through 11.1.3, 12.0.0 through 12.0.2, and 12.1.0.

There is an privilege escalation vulnerability in organization-specific logins in Esri Portal for ArcGIS versions 10.9 a

A DLL sideloading vulnerability in McAfee Agent for Windows prior to 5.7.4 could allow a local user to perform a DLL sid

Improper access control vulnerability in the repair process for McAfee Agent for Windows prior to 5.7.4 could allow a lo

An improper verification of cryptographic signature vulnerability exists in Cortex XSOAR SAML authentication that enable

A vulnerability in the interprocess communication (IPC) channel of Cisco AnyConnect Secure Mobility Client for Windows c

Dr.Web Security Space versions 11 and 12 allow elevation of privilege for local users without administrative privileges

kernel/module.c in the Linux kernel before 5.12.14 mishandles Signature Verification, aka CID-0c18f29aae7c. Without CONF

Dell Command | Update, Dell Update, and Alienware Update versions before 4.3 contains an Improper Verification of Crypto

The App::cpanminus package 1.7044 for Perl allows Signature Verification Bypass.

CPAN 2.28 allows Signature Verification Bypass.

phpseclib before 2.0.31 and 3.x before 3.0.7 mishandles RSA PKCS#1 v1.5 signature verification.

Union Pay up to 1.2.0, for web based versions contains a CWE-347: Improper Verification of Cryptographic Signature vulne

Union Pay up to 3.4.93.4.9, for android, contains a CWE-347: Improper Verification of Cryptographic Signature vulnerabil

Union Pay up to 3.3.12, for iOS mobile apps, contains a CWE-347: Improper Verification of Cryptographic Signature vulner

Grassroot Platform is an application to make it faster, cheaper and easier to persistently organize and mobilize people

A flaw was found in libdnf's signature verification functionality in versions before 0.60.1. This flaw allows an attacke

Lasso all versions prior to 2.7.0 has improper verification of a cryptographic signature.

SOGo 2.x before 2.4.1 and 3.x through 5.x before 5.1.1 does not validate the signatures of any SAML assertions it receiv

bubble fireworks is an open source java package relating to Spring Framework. In bubble fireworks before version 2021.BU

A missing cryptographic step in the implementation of the hash digest algorithm in FortiMail 6.4.0 through 6.4.4, and 6.

In Eclipse Californium version 2.0.0 to 2.6.4 and 3.0.0-M1 to 3.0.0-M3, the certificate based (x509 and RPK) DTLS handsh

An issue in code signature validation was addressed with improved checks. This issue is fixed in macOS Big Sur 11.3, iOS

It is possible for an attacker to manipulate signed documents and macros to appear to come from a trusted source. All ve

It is possible for an attacker to manipulate documents to appear to be signed by a trusted source. All versions of Apach

A DLL preloading vulnerability was reported in Lenovo Driver Management prior to version 2.9.0719.1104 that could allow

Improper Verification of Cryptographic Signature vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 an

Improper Verification of Cryptographic Signature vulnerability exists inhomeLYnk (Wiser For KNX) and spaceLYnk V2.60 and

A CWE-347: Improper Verification of Cryptographic Signature vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 al

There is a signature management vulnerability in some huawei products. An attacker can forge signature and bypass the si

A vulnerability in the software image verification functionality of Cisco IOS XE Software for the Cisco Catalyst 9000 Fa