#cwe-347

共收录 355 条相关情报。

← 返回所有主题
漏洞预警2026-05-11 发布INFO

Zen is a firefox-based browser. Prior to 1.19.9b, Zen Browser ships a Mozilla Application Resource (MAR) updater (org.mozilla.updater) that has had all MAR signature verificatio...

CVE-2026-41431

Zen is a firefox-based browser. Prior to 1.19.9b, Zen Browser ships a Mozilla Application Resource (MAR) updater (org.mo

历史摘要 · 未重新核验 · NVD

安全公告2026-05-08 发布INFO

gitsign verify accepts signatures over go-git-normalized bytes, enabling trust confusion on malformed commits

CVE-2026-44309

## Summary `gitsign verify` and `gitsign verify-tag` re-encode commit/tag objects through go-git's `EncodeWithoutSignat

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-08 发布INFO

Plunk is an open-source email platform built on top of AWS SES. Prior to version 0.9.0, the /webhooks/sns endpoint accepts Amazon SNS notification payloads from unauthenticated ...

CVE-2026-42193

Plunk is an open-source email platform built on top of AWS SES. Prior to version 0.9.0, the /webhooks/sns endpoint accep

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-08 发布INFO

ZEBRA is a Zcash node written entirely in Rust. Prior to zebrad version 4.4.0 and prior to zebra-script version 6.0.0, the fix for CVE-2026-41583 introduced a separate issue due...

CVE-2026-44497

ZEBRA is a Zcash node written entirely in Rust. Prior to zebrad version 4.4.0 and prior to zebra-script version 6.0.0, t

历史摘要 · 未重新核验 · NVD

安全公告2026-05-07 发布INFO

Zebra has Consensus Divergence in Transparent Sighash Hash-Type Handling due to Stale Buffer

CVE-2026-44497

# CVE-2026-44497: Consensus Divergence in Transparent Sighash Hash-Type Handling due to Stale Buffer ## Summary The fi

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-07 发布INFO

A malicious module proxy can exploit a flaw in the go command's validation of module checksums to bypass checksum database validation. This vulnerability affects any user using ...

CVE-2026-42501

A malicious module proxy can exploit a flaw in the go command's validation of module checksums to bypass checksum databa

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-07 发布INFO

Admidio is an open-source user management solution. Prior to version 5.0.9, the Admidio SAML Identity Provider implementation discards the return value of its validateSignature(...

CVE-2026-41669

Admidio is an open-source user management solution. Prior to version 5.0.9, the Admidio SAML Identity Provider implement

历史摘要 · 未重新核验 · NVD

安全公告2026-05-06 发布INFO

axonflow-sdk-java: Webhook signing-key (HMAC-SHA256) not exposed by SDK type, preventing signature verification

## Summary The AxonFlow SDK's `WebhookSubscription` (or equivalent) type did not expose the HMAC-SHA256 signing key ret

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-06 发布INFO

axonflow-sdk-typescript: Webhook signing-key (HMAC-SHA256) not exposed by SDK type, preventing signature verification

## Summary The AxonFlow SDK's `WebhookSubscription` (or equivalent) type did not expose the HMAC-SHA256 signing key ret

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-06 发布INFO

axonflow-sdk-go: Webhook signing-key (HMAC-SHA256) not exposed by SDK type, preventing signature verification

## Summary The AxonFlow SDK's `WebhookSubscription` (or equivalent) type did not expose the HMAC-SHA256 signing key ret

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-06 发布INFO

axonflow-sdk-python: Webhook signing-key (HMAC-SHA256) not exposed by SDK type, preventing signature verification

## Summary The AxonFlow SDK's `WebhookSubscription` (or equivalent) type did not expose the HMAC-SHA256 signing key ret

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-03 发布INFO

A security flaw has been discovered in Dolibarr ERP CRM up to 23.0.2. This vulnerability affects the function dol_verifyHash in the library htdocs/core/lib/security.lib.php of t...

CVE-2026-7689

A security flaw has been discovered in Dolibarr ERP CRM up to 23.0.2. This vulnerability affects the function dol_verify

历史摘要 · 未重新核验 · NVD

安全公告2026-04-29 发布INFO

Admidio Ignores SAML Signature Validation Result, Processes Forged AuthnRequests and LogoutRequests

CVE-2026-41669

## Summary The Admidio SAML Identity Provider implementation discards the return value of its `validateSignature()` met

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-29 发布INFO

Improper Verification of Cryptographic Signature (CWE-347) in Elastic Package Registry could...

CVE-2026-33467

Improper Verification of Cryptographic Signature (CWE-347) in Elastic Package Registry could allow an attacker positione

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2006-09-05 发布CRITICAL

A flaw was found in OpenSSL. When configured to use an RSA key with exponent 3, OpenSSL improperly removes PKCS-1 padding before generating a hash. This allows remote attackers ...

CVE-2006-4339

A flaw was found in OpenSSL. When configured to use an RSA key with exponent 3, OpenSSL improperly removes PKCS-1 paddin

来源摘录 · NVD