#cwe-347

共收录 355 条相关情报。

安全公告2026-07-14 发布INFO

sigstore-js: `certificateOIDs` verification constraints are silently dropped and never enforced

CVE-2026-48815

sigstore-js provides JavaScript libraries for interacting with Sigstore services. Prior to 4.1.1, the documented certifi

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-347

漏洞预警2026-07-14 发布INFO

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 7.4.13 and 8.0.13, MailomatRequestParser::validateSignature() parsed X...

CVE-2026-48747

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 7.4.13 and 8.

历史摘要 · 未重新核验 · NVD

#cve #cwe-347 #cwe-757

漏洞预警2026-07-14 发布INFO

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 6.4.40, 7.4.12, and 8.0.12, TwilioRequestParser::doParse() received th...

CVE-2026-47212

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 6.4.40, 7.4.1

历史摘要 · 未重新核验 · NVD

#cve #cwe-306 #cwe-347

漏洞预警2026-07-14 发布CRITICAL

Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.

CVE-2026-47304

Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature ov

来源摘录 · NVD

#cve #cwe-345 #cwe-347

漏洞预警2026-07-14 发布INFO

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 7.4.12 and 8.0.12, MailtrapRequestParser::doParse() received the confi...

CVE-2026-45755

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 7.4.12 and 8.

历史摘要 · 未重新核验 · NVD

#cve #cwe-306 #cwe-347

安全公告2026-07-14 发布INFO

Symfony: Mailomat Mailer Webhook Parser Reads the HMAC Algorithm from the Request: Signature Algorithm Downgrade

CVE-2026-48747

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 7.4.13 and 8.

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-347 #cwe-757

漏洞预警2026-07-13 发布INFO

The firmware update mechanism does not include cryptographic signature validation. This allows anyone with access to the firmware update capability to upload arbitrary files whi...

CVE-2026-22097

The firmware update mechanism does not include cryptographic signature validation. This allows anyone with access to the

历史摘要 · 未重新核验 · NVD

#cve #cwe-347

漏洞预警2026-07-10 发布INFO

Phalcon is a high-performance, full-stack PHP framework. Prior to 5.14.1, Phalcon\Encryption\Crypt::decrypt compares the attacker-supplied HMAC tag against the freshly computed ...

CVE-2026-54736

Phalcon is a high-performance, full-stack PHP framework. Prior to 5.14.1, Phalcon\Encryption\Crypt::decrypt compares the

历史摘要 · 未重新核验 · NVD

#cve #cwe-208 #cwe-347

安全公告2026-07-09 发布INFO

YesWiki Vulnerable to Unauthenticated ActivityPub Signature-Verification Bypass via `!openssl_verify(...)` accepting `int(-1)`

CVE-2026-52767

## Summary `HttpSignatureService::verifySignature()` checks the result of PHP's `openssl_verify()` with a **loose boolea

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #composer #cwe-347 #severity:high

漏洞预警2026-07-09 发布INFO

The CorvusPay WooCommerce Payment Gateway plugin for WordPress is vulnerable to Payment Bypass via Improper Verification of Cryptographic Signature in all versions up to, and in...

CVE-2026-9027

The CorvusPay WooCommerce Payment Gateway plugin for WordPress is vulnerable to Payment Bypass via Improper Verification

历史摘要 · 未重新核验 · NVD

#cve #cwe-347

漏洞预警2026-07-08 发布INFO