CWE-345.

OpenStack Neutron can use an incorrect ID during policy enforcement

• CWE-345
• CWE-754

>=23.0.0, <23.2.1 || >=24.0.0, <24.0.2 || >=25.0.0, <25.0.1 · fixed in 23.2.1, 24.0.2, 25.0.1

Unauthenticated Remote Command Injection in eCharge Salia PLCC

• hardy-barth cph2_echarge_firmware
• CWE-345

Visteon Infotainment VIP MCU Code Insufficient Validation of Data Authenticity Local Privilege Escalation Vulnerability

• Visteon Infotainment
• CWE-345

Moodle vulnerable to cache poisoning via injection into storage

• Other injection
• CWE-345

<4.1.12 || >=4.2.0-beta, <4.2.9 || >=4.3.0-beta, <4.3.6 || >=4.4.0-beta, <4.4.2 · fixed in 4.1.12, 4.2.9, 4.3.6, 4.4.2

Laravel Reverb Missing API Signature Verification

• Weak cryptography or TLS
• CWE-345

<1.4.0 · fixed in 1.4.0

RSLogix™ 5 and RSLogix 500® Remote Code Execution Via VBA Embedded Script

• Rockwell Automation RSLogix 500®
• Rockwell Automation RSLogix™ Micro Developer and Starter
• CWE-345

Gradio lacks integrity checking on the downloaded FRP client

• CWE-345
• CWE-494

<5.0.0 · fixed in 5.0.0

Unauthorized usage of remote hardware module because of missing channel verification

• meshtastic firmware
• CWE-345

HTTP client can manipulate custom HTTP headers that are added by Traefik in github.com/traefik/traefik

• CWE-345
• CWE-348

* · no fixed version yet

Sony XAV-AX5500 Insufficient Firmware Update Validation Remote Code Execution Vulnerability

• Sony XAV-AX5500
• CWE-345

An issue was discovered in Technitium through 11.0.3.

• CWE-345

Insufficient verification of data authenticity in Open-Xchange GmbH OX Dovecot Pro

• Open-Xchange GmbH OX Dovecot Pro
• CWE-345

Insufficient verification of data authenticity in Google Chrome

• Google Chrome
• CWE-345

Denial of service from malicious signature in kyverno in github.com/kyverno/kyverno

• CWE-345

>=1.5.0-rc1.0.20230601080528-80d139bb5d1d, <1.5.0-rc1.0.20230918070231-fec2992e3f9f · fixed in 1.5.0-rc1.0.20230918070231-fec2992e3f9f

Windows DNS Spoofing Vulnerability

• Microsoft Windows Server 2019
• Microsoft Windows Server 2019 (Server Core installation)
• CWE-345

Windows Print Spooler Elevation of Privilege Vulnerability

• Microsoft Windows 10 Version 1809
• Microsoft Windows Server 2019
• CWE-345

In regclient, pinned manifest digests may be ignored

• CWE-20
• CWE-345

<0.7.1 · fixed in 0.7.1

Insufficient verification of data authenticity in Google Chrome

• Google Chrome
• CWE-345

DNSJava DNSSEC Bypass

• CWE-345
• CWE-349

<3.6.0 · fixed in 3.6.0

gix-path can use a fake program files location

• CWE-345

>=0.10.8, <0.10.9 · fixed in 0.10.9

Certifi removes GLOBALTRUST root certificate

• CWE-345

>=2021.5.30, <2024.7.4 · fixed in 2024.7.4

In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can modify the plaintext Extra Count field of a confidential GSS krb5 wrap token, causing the unwrapped token to appear truncated to the applic…

• CWE-345

Insufficient verification of data authenticity in OMRON Corporation NJ Series CPU Unit and others

• OMRON Corporation NJ Series CPU Unit
• OMRON Corporation NX Series CPU Unit
• CWE-345

Filter bypass in filter_var (FILTER_VALIDATE_URL)

• PHP
• CWE-345

Invision Community through 4.7.16 allows remote code execution via the applications/core/modules/admin/editor/toolbar.php IPS\core\modules\admin\editor\_toolbar::addPlugin() method.

• CWE-345

ID Charger Connect & Pro - JWT-Null-Algorithm

• Volkswagen Group Charging GmbH - Elli, EVBox ID Charger Connect & Pro
• CWE-345

Booth: specially crafted hash can lead to invalid hmac being accepted by booth server

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
• CWE-345

Authorize.net Payment Gateway For WooCommerce <= 8.0 - Insufficient Verification of Data Authenticity to Unauthenticated Payment Bypass

• ishanverma Authorize.net Payment Gateway For WooCommerce
• CWE-345

Claudio Sanches – Checkout Cielo for WooCommerce <= 1.1.0 - Insufficient Verification of Data Authenticity to Order Payment Status Update

• claudiosanches Claudio Sanches – Checkout Cielo for WooCommerce
• CWE-345

Insufficient verification of data authenticity in AutomationDirect P3-550E

• AutomationDirect P3-550E
• CWE-345

WordPress User Profile Builder plugin <= 3.11.2 - Bypass Vulnerability vulnerability

• Cozmoslabs Profile Builder
• CWE-345

ThroughTek Kalay SDK insufficient verification of message authenticity

• ThroughTek Kalay SDK
• CWE-345

sshpiper's enabling of proxy protocol without proper feature flagging allows faking source address

• CWE-345

>=1.0.50, <1.3.0 · fixed in 1.3.0

Insufficient verification of data authenticity in Fortinet FortiProxy and others

• Fortinet FortiProxy
• Fortinet FortiOS
• CWE-345

Insufficient verification of data authenticity in Siemens SIMATIC RTLS Locating Manager

• Siemens SIMATIC RTLS Locating Manager
• CWE-345

CMSaasStarter: JWT Token Not Verified on Server Session

• CriticalMoments CMSaasStarter
• CWE-345

NETGEAR RAX30 lighttpd Misconfiguration Remote Code Execution Vulnerability

• NETGEAR RAX30
• CWE-345

WildFly Elytron: OIDC app attempting to access the second tenant, the user should be prompted to log

• CWE-345

<2.2.5.Final · fixed in 2.2.5.Final

Insufficient verification of data authenticity in Huawei HarmonyOS and others

• Huawei HarmonyOS
• Huawei EMUI
• CWE-345

Insufficient verification of data authenticity in AYS Pro Plugins Survey Maker

• AYS Pro Plugins Survey Maker
• CWE-345

In Astro-Shield, setting a correct `integrity` attribute to injected code allows to bypass the allow-lists

• CWE-345

>=1.2.0, <1.3.2 · fixed in 1.3.2

WooCommerce POS <= 1.4.11 - Insufficient Verification of Data Authenticity to Authenticated (Customer+) Information Disclosure

• kilbot WCPOS – Point of Sale (POS) plugin for WooCommerce
• CWE-345

Cross-site websocket hijacking in Querybook

• pinterest querybook
• CWE-345

aiosmtpd vulnerable to SMTP smuggling

• CWE-345

<1.4.5 · fixed in 1.4.5

EventPrime – Events Calendar, Bookings and Tickets <= 3.4.2 - Unauthenticated Booking Payment Bypass

• metagauss EventPrime – Events Calendar, Bookings and Tickets
• CWE-345

Insufficient verification of data authenticity in Mozilla Firefox

• Mozilla Firefox
• CWE-345

Insufficient verification of data authenticity in AMD Alveo™ Card (UltraScale™and UltraScale+™ based) and others

• AMD Alveo™ Card (UltraScale™and UltraScale+™ based)
• AMD Kintex™ UltraScale™ FPGA
• CWE-345

IBM Security Access Manager Container improper file validation

• IBM Security Verify Access Appliance
• IBM Security Verify Access Docker
• CWE-345

Classic builder cache poisoning

• CWE-345
• CWE-346

<24.0.9 || >=25.0.0, <25.0.2 · fixed in 24.0.9, 25.0.2

Insufficient verification of data authenticity in Huawei HarmonyOS and others

• Huawei HarmonyOS
• Huawei EMUI
• CWE-345

Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin

• CWE-345
• CWE-354

<0.40.2 · fixed in 0.40.2

AsyncSSH vulnerable to Prefix Truncation Attack (a.k.a. Terrapin Attack) against ChaCha20-Poly1305 and Encrypt-then-MAC

• CWE-345

<2.14.2 · fixed in 2.14.2

ASAR Integrity bypass via filetype confusion in electron

• CWE-345

<22.3.24 || >=23.0.0-alpha.1, <=23.3.13 || >=24.0.0-alpha.1, <24.8.3 || >=25.0.0-alpha.1, <25.8.1 || >=26.0.0-alpha.1, <26.2.1 || >=27.0.0-alpha.1, <27.0.0-alpha.7 · fixed in 22.3.24, 24.8.3, 25.8.1, 26.2.1, 27.0.0-alpha.7

Validation of SignedInfo

• CWE-345

>=5.0.0-alpha.12, <5.0.0-alpha.13 · fixed in 5.0.0-alpha.13

json-web-token library is vulnerable to a JWT algorithm confusion attack

• CWE-20
• CWE-345

<4.0.0 · fixed in 4.0.0

vantage6-server node accepts non-whitelisted algorithms from malicious server

• CWE-345
• CWE-358

<4.1.2 · fixed in 4.1.2

Attacker can cause Kyverno user to unintentionally consume insecure image

• Information disclosure
• CWE-345

<1.10.5 · fixed in 1.10.5

Command injection via wave install file

• Hanwha Vision Co., Ltd. PNV-A6081R
• Weak cryptography or TLS
• CWE-345

Moodle Acceptance of Extraneous Untrusted Data With Trusted Data vulnerability

• CWE-345
• CWE-349

<4.3.0-rc2 · fixed in 4.3.0-rc2

AsyncSSH Rogue Session Attack

• Information disclosure
• Broken access control

<2.14.1 · fixed in 2.14.1