CWE-345.

An issue in the component MSI.TerminalServer.exe of MSI Center v1.0.41.0 allows attackers to escalate privileges via a crafted TCP packet.

• CWE-345

OndiskPlayer Remote Code Execution Vulnerability

• ETMS Co.,Ltd OndiskPlayerAgent
• CWE-345

Insufficient Verification of Proofs generated by the immudb server in client SDK.

• CWE-345

<1.4.1 · fixed in 1.4.1

ETIC Telecom Remote Access Server Insufficient Verification of Data Authenticity

• ETIC Telecom Remote Access Server (RAS)
• CWE-345

Cortex XSOAR: Local Privilege Escalation (PE) Vulnerability in Cortex XSOAR Engine

• Palo Alto Networks Cortex XSOAR
• CWE-345

Remote desktop takeover via phishing

• Citrix Gateway, Citrix ADC
• CWE-345

Insufficient verification of data authenticity in Hewlett Packard Enterprise (HPE) HPE Nimble Storage Hybrid Flash Arrays…

• Hewlett Packard Enterprise (HPE) HPE Nimble Storage Hybrid Flash Arrays; Nimble Storage Secondary Flash Arrays
• CWE-345

Insufficient verification of data authenticity in Robustel R1510

• Robustel R1510
• CWE-345

Insufficient verification of data authenticity in Siemens LOGO! 8 BM (incl. SIPLUS variants)

• Siemens LOGO! 8 BM (incl. SIPLUS variants)
• CWE-345

Patlite NH-FB v1.46 and below was discovered to contain insufficient firmware validation during the upgrade firmware file upload process.

• CWE-345

Incorrect header handling in mod-wsgi

• CWE-345
• CWE-348

<4.9.3 · fixed in 4.9.3

Insufficient verification of data authenticity in cryptsetup

• cryptsetup
• CWE-345

Insufficient verification of data authenticity in Emerson Electric Proficy Machine Edition

• Emerson Electric Proficy Machine Edition
• CWE-345

Local Privilege Escalation in Auto Updater for Zoom Client for Meetings for macOS

• Zoom Video Communications Inc Zoom Client for Meetings for MacOS
• CWE-345

Insufficient verification of data authenticity in Moodle

• Moodle
• CWE-345

Insufficient verification of data authenticity in Huawei HarmonyOS and others

• Huawei HarmonyOS
• Huawei EMUI
• CWE-345

Insufficient verification of data authenticity in Schneider Electric OPC UA Modicon Communication Module and others

• Schneider Electric OPC UA Modicon Communication Module
• Schneider Electric X80 advanced RTU Communication Module
• CWE-345

Insufficient verification of data authenticity in SAP SE SAP Business Objects

• SAP SE SAP Business Objects
• CWE-345

Insufficient verification of data authenticity in Icedtea-web

• Icedtea-web
• CWE-345

Cisco Adaptive Security Device Manager and Adaptive Security Appliance Software Client-side Arbitrary Code Execution Vulnerability

• Cisco Adaptive Security Appliance (ASA) Software
• CWE-345

Insufficient Verification of Data Vulnerability in ProConOS/ProConOS eCLR SDK and MULTIPROG Engineering tool

• PHOENIX CONTACT MULTIPROG
• PHOENIX CONTACT ProConOS
• CWE-345

Insufficient Verification of Data Vulnerability in PHOENIX CONTACT classic line industrial controllers

• PHOENIX CONTACT ILC 1x0
• PHOENIX CONTACT ILC 1x1
• CWE-345

Insufficient verification of data authenticity in Siemens SINEMA Remote Connect Server

• Siemens SINEMA Remote Connect Server
• CWE-345

Grin insufficient data validation

• CWE-345

>=3.0.0, <4.0.0 · fixed in 4.0.0

Magento 2 Community Edition Insufficient Logging

• CWE-345

>=2.1.0, <2.1.19 || >=2.2.0, <2.2.10 || >=2.3.0, <2.3.3 · fixed in 2.1.19, 2.2.10, 2.3.3

Magento 2 Community Edition Security Bypass

• CWE-345

>=2.2.0, <2.2.10 || >=2.3.0, <2.3.2-p1 · fixed in 2.2.10, 2.3.2-p1

Auth0 Passport-SharePoint does not validate JWT signature

• CWE-345

<0.4.0 · fixed in 0.4.0

OpenID4Java does not verify that Attribute Exchange (AX) information is signed

• CWE-20
• CWE-345

<0.9.6 · fixed in 0.9.6

Drupal Incorrect cache context on password reset page

• CWE-345

>=8.0, <8.2.3 · fixed in 8.2.3

Insufficient Data Verification in io.really:jwt-scala

• CWE-345

<=1.2.2 · no fixed version yet

OpenStack Compute (Nova) has Insufficient Verification of Data Authenticity

• CWE-345

<2014.1.4 || >=2014.2.0, <2014.2.3 · fixed in 2014.1.4, 2014.2.3

Insufficient Verification of Data Authenticity in Apache Tomcat

• CWE-345

>=9.0.0.M1, <9.0.0.M22 || >=8.5.0, <8.5.16 || >=8.0.0.RC1, <8.0.45 || >=7.0.41, <7.0.79 · fixed in 9.0.0.M22, 8.5.16, 8.0.45, 7.0.79

Electron vulnerable to URL spoofing via PDFium

• Authentication bypass
• CWE-345

>=1.7.0, <1.7.6 · fixed in 1.7.6

hammer_cli_foreman Improper Certificate Validation vulnerability

• Weak cryptography or TLS
• CWE-345

<0.10.0 · fixed in 0.10.0

Keycloak Authentication Error

• Weak cryptography or TLS
• CWE-345

<4.4.0.Final · fixed in 4.4.0.Final

Nimbus JOSE+JWT missing overflow check

• CWE-345

<4.39 · fixed in 4.39

Jenkins does not Verify Checksums for Plugin Files

• CWE-345

<1.625.2 || >=1.626, <1.640 · fixed in 1.625.2, 1.640

Insufficient Verification of Data Authenticity in Async Http Client

• CWE-345

<1.9.0 · fixed in 1.9.0

Insufficient Verification of Data Authenticity in Async Http Client

• CWE-345

<1.9.0 · fixed in 1.9.0

Hex authenticity of signed packages not validated

• CWE-345

<0.4.0 · fixed in 0.4.0

Insufficient Verification of Data Authenticity in Nextcloud Server

• nextcloud security-advisories
• CWE-345

Cisco Adaptive Security Appliance and Cisco Firepower Threat Defense Software AnyConnect SSL VPN Denial of Service Vulnerability

• Cisco Adaptive Security Appliance (ASA) Software
• CWE-345

ICSA-22-104-03 Red Lion DA50N

• Red Lion DA50N
• CWE-345

tobesoft Nexacro arbitrary file download vulnerability

• tobesoft Co.,Ltd Nexacro 17
• CWE-345

Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware Cross-Site Request Forgery Vulnerability

• Cisco IP Phone 7800 Series with Multiplatform Firmware
• CWE-345

Insufficient verification of data authenticity in Trend Micro Apex Central

• Trend Micro Apex Central
• CWE-345

Syltek Insufficient Verification of Data Authenticity

• Syltek
• CWE-345

Custom Content Shortcode < 4.0.2 - Authenticated Arbitrary File Access / LFI

• Custom Content Shortcode
• CWE-345

Insufficient verification of data authenticity in Dell CPG BIOS

• Dell CPG BIOS
• CWE-345

Insufficient Verification of Data Authenticity Remote Code Execution Vulnerability on Western Digital My Cloud devices.

• Western Digital My Cloud
• CWE-345

dnslib has DNS reply verification issue

• CWE-345

<0.9.17 · fixed in 0.9.17

Insufficient verification of data authenticity in Silicon Labs UZB-7

• Silicon Labs UZB-7
• CWE-345

An issue was discovered in bluetoothd in BlueZ through 5.48.

• CWE-345

Insufficient verification of data authenticity in 3rd Gen AMD EPYC™

• 3rd Gen AMD EPYC™
• CWE-345

Missing validation during checkpoint loading

• Memory corruption
• CWE-345

<2.4.4 || >=2.5.0, <2.5.2 || >=2.6.0, <2.6.1 · fixed in 2.4.4, 2.5.2, 2.6.1

File reference keys leads to incorrect hashes on HMAC algorithms

• CWE-345

>=3.4.0, <3.4.6 || >=4.0.0, <4.0.4 || >=4.1.0, <4.1.5 · fixed in 3.4.6, 4.0.4, 4.1.5

Improperly Implemented path matching for in-toto-golang

• Path traversal
• CWE-345

<0.3.0 · fixed in 0.3.0

Insufficient Verification of Data Authenticity in Enbra EWM (replay attack)

• Enbra EWM 1.7.29
• CWE-345

ABB Base Software for SoftControl Remote Code Execution vulnerability

• ABB Base Software for SoftControl
• Broken access control
• CWE-345

Cisco Nexus 9000 Series Fabric Switches ACI Mode Multi-Pod and Multi-Site TCP Denial of Service Vulnerability

• Cisco NX-OS System Software in ACI Mode
• CWE-345