CWE-347

An issue was discovered in Aviatrix Controller through 5.1. An attacker with any signed SAML assertion from the Identity

An issue was discovered in fastecdsa before 2.1.2. When using the NIST P-256 curve in the ECDSA implementation, the poin

An issue was discovered in Foxit PhantomPDF Mac and Foxit Reader for Mac before 4.0. It allows signature validation bypa

An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It allows signature validation bypass via a modifie

An issue was discovered in Foxit PhantomPDF before 8.3.10. It allows signature validation bypass via a modified file or

An issue was discovered in Foxit Reader and PhantomPDF before 9.5. It allows signature validation bypass via a modified

An issue was discovered in the jsrsasign package through 8.0.18 for Node.js. It allows a malleability in ECDSA signature

In Argent RecoveryManager before 0xdc350d09f71c48c5D22fBE2741e4d6A03970E192, the executeRecovery function does not requi

Sylabs Singularity 3.0 through 3.5 has Improper Validation of an Integrity Check Value. Image integrity is not validated

A flaw was found in pritunl-client before version 1.0.1116.6. A lack of signature verification leads to sensitive inform

An issue was discovered in DP3T-Backend-SDK before 1.1.1 for Decentralised Privacy-Preserving Proximity Tracing (DP3T).

In JetBrains ToolBox version 1.17 before 1.17.6856, the set of signature verifications omitted the jetbrains-toolbox.exe

In OASIS Digital Signature Services (DSS) 1.0, an attacker can control the validation outcome (i.e., trigger either a va

CodeMeter (All versions prior to 6.90 when using CmActLicense update files with CmActLicense Firm Code) has an issue in

An issue was discovered in Foxit Reader and PhantomPDF before 4.1 on macOS. Because the Hardened Runtime protection mech

pass through 1.7.3 has a possibility of using a password for an unintended resource. For exploitation to occur, the user

Hyperledger Indy Node is the server portion of a distributed ledger purpose-built for decentralized identity. In Hyperle

Jenkins Mac Plugin 1.1.0 and earlier does not validate SSH host keys when connecting agents created by the plugin, enabl

omniauth-auth0 (rubygems) versions >= 2.3.0 and < 2.4.1 improperly validate the JWT token signature when using the `jwt_

Lack of cryptographic signature verification in the Sqreen PHP agent daemon before 1.16.0 makes it easier for remote att

Inspur NF5266M5 through 3.21.2 and other server M5 devices allow remote code execution via administrator privileges. The

A flaw was found in the Ansible Engine, in ansible-engine 2.8.x before 2.8.15 and ansible-engine 2.9.x before 2.9.13, wh

A vulnerability in software image verification in Cisco IOS XE Software could allow an unauthenticated, physical attacke

A vulnerability exists that could allow the execution of unauthorized code or operating system commands on systems runni

Python oic is a Python OpenID Connect implementation. In Python oic before version 1.2.1, there are several related cryp

A vulnerability in the upgrade component of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenti

NVIDIA DGX servers, all DGX-1 with BMC firmware versions prior to 3.38.30 and all DGX-2 with BMC firmware versions prior

A vulnerability in the firmware of the Cisco UCS C-Series Rack Servers could allow an authenticated, physical attacker t

Opto 22 SoftPAC Project Version 9.6 and prior. Paths specified within the zip files used to update the SoftPAC firmware

BIP-143 in the Bitcoin protocol specification mishandles the signing of a Segwit transaction, which allows attackers to

TenderMint from version 0.33.0 and before version 0.33.6 allows block proposers to include signatures for the wrong bloc

This issue was addressed by verifying host keys when connecting to a previously-known SSH server. This issue is fixed in

Tesla Model X vehicles before 2020-11-23 have key fobs that accept firmware updates without signature verification. This

GRUB2 fails to validate kernel signature when booted directly without shim, allowing secure boot to be bypassed. This on

A PGP signature bypass flaw was found in fwupd (all versions), which could lead to the installation of unsigned firmware

Opto 22 SoftPAC Project Version 9.6 and prior. SoftPAC’s firmware files’ signatures are not verified upon firmware updat

HUAWEI P30 with versions earlier than 10.1.0.135(C00E135R2P11) have an improper signature verification vulnerability. Th

An issue was discovered in OpenStack Keystone before 15.0.1, and 16.0.0. The EC2 API doesn't have a signature TTL check

In goxmldsig (XML Digital Signatures implemented in pure Go) before version 1.1.0, with a carefully crafted XML file, an

<p>A spoofing vulnerability exists when Windows incorrectly validates file signatures. An attacker who successfully expl

ServiceStack before 5.9.2 mishandles JWT signature verification unless an application has a custom ValidateToken functio

A wrong generation of the passphrase for the encrypted block in Nextcloud Server 19.0.1 allowed an attacker to overwrite

A vulnerability was reported in LenovoAppScenarioPluginSystem for Lenovo System Interface Foundation prior to version 1.

A vulnerability in the Image Signature Verification feature of Cisco Firepower Threat Defense (FTD) Software could allow

Python-apt doesn't check if hashes are signed in `Version.fetch_binary()` and `Version.fetch_source()` of apt/package.py

Acrobat Reader DC for macOS versions 2020.012.20048 (and earlier), 2020.001.30005 (and earlier) and 2017.011.30175 (and

In HP LaserJet Enterprise, HP PageWide Enterprise, HP LaserJet Managed, and HP OfficeJet Enterprise Printers, solution a

HP LaserJet Enterprise printers, HP PageWide Enterprise printers, HP LaserJet Managed printers, HP Officejet Enterprise

verification.py in django-rest-registration (aka Django REST Registration library) before 0.5.0 relies on a static strin

Perl Crypt::JWT prior to 0.023 is affected by: Incorrect Access Control. The impact is: allow attackers to bypass authen