Falhas do tipo CWE-354

93 resultados
CVE-2023-34459MEDIUMOpenZeppelin Contracts's MerkleProof multiproofs may allow proving arbitrary leaves for specific treesEPSS 0.4%CVE-2024-25678MEDIUMIn LiteSpeed QUIC (LSQUIC) Library before 4.0.4, DCID validation is mishandled.EPSS 0.4%CVE-2016-15028MEDIUMICEPAY REST-API-NET Checksum Validation RestClient.cs RestClient integrity checkEPSS 0.3%CVE-2023-31437MEDIUMAn issue was discovered in systemd 253. An attacker can modify a sealed log file such that, in some views, not all existing and sealed log mEPSS 0.3%CVE-2022-35961HIGHECDSA signature malleability in OpenZeppelin ContractsEPSS 0.3%CVE-2023-33981MEDIUMBriar before 1.4.22 allows attackers to spoof other users' messages in a blog, forum, or private group, but each spoofed message would need EPSS 0.3%CVE-2026-33026CRITICALnginx-ui Backup Restore Allows Tampering with Encrypted BackupsEPSS 0.3%CVE-2024-34714HIGHHoppscotch Extension responds to calls made by origins not in the domain listEPSS 0.3%CVE-2021-4148A vulnerability was found in the Linux kernel's block_invalidatepage in fs/buffer.c in the filesystem. A missing sanity check may allow a loEPSS 0.3%CVE-2022-38955HIGHAn exploitable firmware modification vulnerability was discovered on the Netgear WPN824EXT WiFi Range Extender. An attacker can conduct a MIEPSS 0.3%CVE-2018-5441An Improper Validation of Integrity Check Value issue was discovered in PHOENIX CONTACT mGuard firmware versions 7.2 to 8.6.0. mGuard deviceEPSS 0.3%CVE-2023-23120MEDIUMThe use of the cyclic redundancy check (CRC) algorithm for integrity check during firmware update makes TRENDnet TV-IP651WI Network Camera fEPSS 0.3%CVE-2023-23119MEDIUMThe use of the cyclic redundancy check (CRC) algorithm for integrity check during firmware update makes Ubiquiti airFiber AF2X Radio firmwarEPSS 0.3%CVE-2023-50738MEDIUMA firmware downgrade prevention vulnerability has been identified in newer Lexmark devices.EPSS 0.3%CVE-2023-30356HIGHMissing Support for an Integrity Check in Shenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 allows attackers to update the device EPSS 0.3%CVE-2023-24063MEDIUMDiebold Nixdorf Vynamic Security Suite (VSS) before 3.3.0 SR10 fails to validate /etc/mtab during the Pre-Boot Authorization (PBA) process. EPSS 0.3%CVE-2023-4929MEDIUMNPort 5000 Series Firmware Improper Validation of Integrity Check VulnerabilityEPSS 0.3%CVE-2022-38956MEDIUMAn exploitable firmware downgrade vulnerability was discovered on the Netgear WPN824EXT WiFi Range Extender. An attacker can conduct a MITM EPSS 0.2%CVE-2025-54887CRITICALjwe: Missing AES-GCM authentication tag validation in encrypted JWEsEPSS 0.2%CVE-2026-49230MEDIUMApache APISIX: Authentication bypass in jwe-decryptEPSS 0.2%