#cwe-347

共收录 355 条相关情报。

漏洞预警2026-08-11 发布INFO

Improper verification of cryptographic signature in Windows Schannel allows an unauthorized attacker to bypass a security feature over a network.

CVE-2026-62757

Improper verification of cryptographic signature in Windows Schannel allows an unauthorized attacker to bypass a securit

历史摘要 · 未重新核验 · NVD

#cve #cwe-347

漏洞预警2026-08-11 发布HIGH

A flaw was found in Picketlink's SP signature validation; a SAML response containing zero assertion elements matching the signature check can allow an attacker to forge a SAML r...

CVE-2026-15556

A flaw was found in Picketlink's SP signature validation; a SAML response containing zero assertion elements matching th

来源摘录 · NVD

#cve #cwe-347

漏洞预警2026-08-11 发布CRITICAL

A flaw was found in Picketlink Federation SAML; the unsolcited response handler would accept forged assertions with no verification or validation, permitting an unauthed attacke...

CVE-2026-10579

A flaw was found in Picketlink Federation SAML; the unsolcited response handler would accept forged assertions with no v

来源摘录 · NVD

#cve #cwe-347

漏洞预警2026-08-11 发布INFO

SAP Approuter does not consistently enforce integrity verification on certain session-related request headers under specific conditions. An attacker with low privileges could se...

CVE-2026-66776

SAP Approuter does not consistently enforce integrity verification on certain session-related request headers under spec

历史摘要 · 未重新核验 · NVD

#cve #cwe-347

安全公告2026-08-10 发布INFO

Pega Platform versions 8.5.0 through 25.1.2 are affected by an improper validation of...

CVE-2026-10754

Pega Platform versions 8.5.0 through 25.1.2 are affected by an improper validation of cryptographic signatures that may

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-347 #severity:high

漏洞预警2026-08-10 发布INFO

Pega Platform versions 8.5.0 through 25.1.2 are affected by an improper validation of cryptographic signatures that may allow an attacker to bypass security controls.

CVE-2026-10754

Pega Platform versions 8.5.0 through 25.1.2 are affected by an improper validation of cryptographic signatures that may

历史摘要 · 未重新核验 · NVD

#cve #cwe-347

漏洞预警2026-08-10 发布INFO

Improper verification of cryptographic signature and Improper Check for Unusual or Exceptional Conditions vulnerability in Estonian Information System Authority (RIA) libdigidoc...

CVE-2026-59112

Improper verification of cryptographic signature and Improper Check for Unusual or Exceptional Conditions vulnerability

历史摘要 · 未重新核验 · NVD

#cve #cwe-347 #cwe-754

漏洞预警2026-08-10 发布INFO

systemd-homed contains a local privilege escalation bug via arbitrary system group addition to a local, logged in, homed-managed user

CVE-2026-16742

systemd-homed contains a local privilege escalation bug via arbitrary system group addition to a local, logged in, homed

历史摘要 · 未重新核验 · NVD

#cve #cwe-269 #cwe-347

漏洞预警2026-08-07 发布HIGH

Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.20, header signature verification counts the unused padding bits of the PubKeysBitmap toward t...

CVE-2026-58262

CVE-2026-58262 是 Klever-Go（Klever 区块链协议的 Go 实现）中存在于 1.7.20 之前版本的一个共识安全漏洞。漏洞根因在于区块头签名验证逻辑错误地将 PubKeysBitmap 中未使用的填充位计入了验证

历史摘要 · 未重新核验 · NVD

#cve #cwe-345 #cwe-347

安全公告2026-08-07 发布INFO

Improper verification of cryptographic signature in Microsoft 365 Admin Center allows an...

CVE-2026-62873

Improper verification of cryptographic signature in Microsoft 365 Admin Center allows an unauthorized attacker to elevat

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-347 #severity:critical

安全公告2026-08-07 发布INFO

Improper verification of cryptographic signature in Microsoft Teams allows an unauthorized...

CVE-2026-62918

Improper verification of cryptographic signature in Microsoft Teams allows an unauthorized attacker to perform spoofing

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-347 #severity:high

漏洞预警2026-08-07 发布INFO

Improper verification of cryptographic signature in Microsoft Teams allows an unauthorized attacker to perform spoofing over a network.

CVE-2026-62918

Improper verification of cryptographic signature in Microsoft Teams allows an unauthorized attacker to perform spoofing

历史摘要 · 未重新核验 · NVD

#cve #cwe-347

漏洞预警2026-08-07 发布INFO

Improper verification of cryptographic signature in Microsoft 365 Admin Center allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-62873

Improper verification of cryptographic signature in Microsoft 365 Admin Center allows an unauthorized attacker to elevat

历史摘要 · 未重新核验 · NVD

#cve #cwe-347

漏洞预警2026-08-06 发布INFO

The JWT authentication mechanism accepts tokens signed with algorithms other than those explicitly configured or supported. This allows an attacker to craft a JWT with an unsupp...

CVE-2026-5430

The JWT authentication mechanism accepts tokens signed with algorithms other than those explicitly configured or support

历史摘要 · 未重新核验 · NVD

#cve #cwe-347

漏洞预警2026-08-03 发布INFO

Misskey is an open source, federated social media platform. Versions 12.37.0 and later, but prior to 2026.5.4, contain a vulnerability in the JSON-LD signature validation and co...

CVE-2026-46713

Misskey is an open source, federated social media platform. Versions 12.37.0 and later, but prior to 2026.5.4, contain a

历史摘要 · 未重新核验 · NVD

#cve #cwe-347

漏洞预警2026-08-03 发布INFO

XML::Sig versions from 0.29 before 0.72 for Perl allow signature verification bypass because verify returns true when every signature was skipped before any cryptographic check....

CVE-2026-18568

XML::Sig versions from 0.29 before 0.72 for Perl allow signature verification bypass because verify returns true when ev

历史摘要 · 未重新核验 · NVD

#cve #cwe-347

漏洞预警2026-08-03 发布INFO

XML::Sig versions before 0.71 for Perl allow signature wrapping via duplicate ID. _get_signed_xml() in lib/XML/Sig.pm, called from verify(), resolves the SignedInfo Reference/@...

CVE-2026-9487

XML::Sig versions before 0.71 for Perl allow signature wrapping via duplicate ID. _get_signed_xml() in lib/XML/Sig.pm,

历史摘要 · 未重新核验 · NVD

#cve #cwe-347

漏洞预警2026-08-03 发布INFO

Net::SAML2 versions before 0.86 for Perl allow authentication bypass because _verify_encrypted_assertion accepts an EncryptedAssertion whose decrypted content carries no signatu...

CVE-2026-18108

Net::SAML2 versions before 0.86 for Perl allow authentication bypass because _verify_encrypted_assertion accepts an Encr

历史摘要 · 未重新核验 · NVD

#cve #cwe-347

漏洞预警2026-08-03 发布INFO

Net::SAML2 versions before 0.86 for Perl allow SAML authentication bypass via XML signature wrapping because new_from_xml reads assertion identity with document-wide XPath inste...

CVE-2026-18092

Net::SAML2 versions before 0.86 for Perl allow SAML authentication bypass via XML signature wrapping because new_from_xm

历史摘要 · 未重新核验 · NVD

#cve #cwe-347

漏洞预警2026-08-03 发布INFO

Net::SAML2 versions before 0.86 for Perl allow SAML authentication bypass by verifying responses against the response-embedded certificate in verify_xml when no trust anchor is ...

CVE-2026-18089

Net::SAML2 versions before 0.86 for Perl allow SAML authentication bypass by verifying responses against the response-em

历史摘要 · 未重新核验 · NVD

#cve #cwe-295 #cwe-347