rclone from 1.55.0 before 1.75.2 contains a signature verification bypass in stable selfupdate...
CVE-2026-116189
rclone from 1.55.0 before 1.75.2 contains a signature verification bypass in stable selfupdate that trusts checksums fro
#cwe-347
共收录 355 条相关情报。
← 返回所有主题rclone from 1.55.0 before 1.75.2 contains a signature verification bypass in stable selfupdate that trusts checksums from unsigned bytes preceding the PGP-clearsigned SHA256SUMS...
CVE-2026-116189
rclone from 1.55.0 before 1.75.2 contains a signature verification bypass in stable selfupdate that trusts checksums fro
Authlib is a Python library which builds OAuth and OpenID Connect servers. From 1.3.1 until 1.9.0, OctKey.import_key() checks asymmetric-key markers only at byte zero while Auth...
CVE-2026-114615
Authlib is a Python library which builds OAuth and OpenID Connect servers. From 1.3.1 until 1.9.0, OctKey.import_key() c
Improper Verification of Cryptographic Signature vulnerability in Drupal SAML SSO - Service...
CVE-2026-87947
Improper Verification of Cryptographic Signature vulnerability in Drupal SAML SSO - Service Provider allows Signature S
Improper Verification of Cryptographic Signature vulnerability in Drupal Monobank payment API...
CVE-2026-84918
Improper Verification of Cryptographic Signature vulnerability in Drupal Monobank payment API allows Signature Spoof. Th
Improper Verification of Cryptographic Signature vulnerability in Drupal SAML SSO - Service Provider allows Signature Spoof. This issue affects SAML SSO - Service Provider ver...
CVE-2026-87947
Improper Verification of Cryptographic Signature vulnerability in Drupal SAML SSO - Service Provider allows Signature S
Improper Verification of Cryptographic Signature vulnerability in Drupal Monobank payment API allows Signature Spoof. This issue affects Monobank payment API versions: from 0.0....
CVE-2026-84918
Improper Verification of Cryptographic Signature vulnerability in Drupal Monobank payment API allows Signature Spoof. Th
Monobank payment API - Moderately critical - Access bypass - SA-CONTRIB-2026-130
CVE-2026-84918
Improper Verification of Cryptographic Signature vulnerability in Drupal Monobank payment API allows Signature Spoof. Th
SAML SSO - Service Provider - Moderately critical - Authentication bypass - SA-CONTRIB-2026-145
CVE-2026-87947
Improper Verification of Cryptographic Signature vulnerability in Drupal SAML SSO - Service Provider allows Signature S
Apache Pulsar's MultiRolesTokenAuthorizationProvider authorizes a client with all roles listed in a claim of its JSON Web Token (JWT). The provider is intended for use with toke...
CVE-2026-105869
Apache Pulsar's MultiRolesTokenAuthorizationProvider authorizes a client with all roles listed in a claim of its JSON We
A Unsigned Firmware vulnerability exists in the boa Firmware Update functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted firmware ...
CVE-2026-10141
A Unsigned Firmware vulnerability exists in the boa Firmware Update functionality of X2000R (version(s): TOTOLINK-X2000R
In Eclipse ioFog Controller versions 3.8.0 through 3.9.1, operator WebSocket upgrades on the exec and log routes do not verify the bearer JWT. The payload is decoded and its gro...
CVE-2026-113620
In Eclipse ioFog Controller versions 3.8.0 through 3.9.1, operator WebSocket upgrades on the exec and log routes do not
A russh SSH server accepts a publickey authentication whose signature uses a different algorithm than the one named in the request
CVE-2026-111062
### Details In `russh/src/server/encrypted.rs`, `server_read_auth_request_pk` (0.63.3, around lines 880-990): * The re
CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature...
CVE-2026-95632
CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could resu
CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature...
CVE-2026-95633
CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could resu
CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature...
CVE-2026-103297
CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could resu
CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature...
CVE-2026-103296
CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could resu
CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature...
CVE-2026-102502
CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could resu
Improper verification of cryptographic signature in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-102866
Improper verification of cryptographic signature in Microsoft Office SharePoint allows an unauthorized attacker to eleva
H3C HDM Family-A verifies the RSA signature of a firmware image against a public key it reads from the mutable file `/conf/public.pem`. That file is writable by an authenticated...
CVE-2026-65197
H3C HDM Family-A verifies the RSA signature of a firmware image against a public key it reads from the mutable file `/co