#cwe-347

共收录 355 条相关情报。

漏洞预警2026-10-04 发布INFO

A flaw has been found in invariant-systems-ai aiir up to 1.7.0. The affected element is an unknown function of the component Policy Gate Handler. Executing a manipulation can le...

CVE-2026-105161

A flaw has been found in invariant-systems-ai aiir up to 1.7.0. The affected element is an unknown function of the compo

历史摘要 · 未重新核验 · NVD

#cve #cwe-345 #cwe-347

安全公告2026-10-03 发布INFO

OpenAM before 16.1.3 contains an open redirect vulnerability that allows unauthenticated...

CVE-2026-105118

OpenAM before 16.1.3 contains an open redirect vulnerability that allows unauthenticated attackers to redirect users by

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-347 #severity:low

漏洞预警2026-10-03 发布INFO

OpenAM before 16.1.3 contains an open redirect vulnerability that allows unauthenticated attackers to redirect users by supplying an unverified id_token_hint to the /oauth2/conn...

CVE-2026-105118

OpenAM before 16.1.3 contains an open redirect vulnerability that allows unauthenticated attackers to redirect users by

历史摘要 · 未重新核验 · NVD

#cve #cwe-347

安全公告2026-10-03 发布INFO

OpenAM before 16.1.3 Open Redirect via Unverified id_token_hint in endSession

CVE-2026-105118

OpenAM before 16.1.3 contains an open redirect vulnerability that allows unauthenticated attackers to redirect users by

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-347

安全公告2026-10-03 发布INFO

In Bouncy Castle for Java before 1.86, BLS12_381BasicScheme.keyValidate, and so...

CVE-2026-71891

In Bouncy Castle for Java before 1.86, BLS12_381BasicScheme.keyValidate, and so BLSPublicKeyParameters and every BasicSc

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-347 #severity:high

漏洞预警2026-10-03 发布INFO

In Bouncy Castle for Java before 1.86, BLS12_381BasicScheme.keyValidate, and so BLSPublicKeyParameters and every BasicScheme, MessageAugmentation and ProofOfPossession verify an...

CVE-2026-71891

In Bouncy Castle for Java before 1.86, BLS12_381BasicScheme.keyValidate, and so BLSPublicKeyParameters and every BasicSc

历史摘要 · 未重新核验 · NVD

#cve #cwe-347

漏洞预警2026-10-03 发布INFO

In Bouncy Castle for Java before 1.86, the high-level OpenPGP API accepted a data signature made by a signing subkey whose Subkey Binding signature carried no embedded Primary K...

CVE-2026-71887

In Bouncy Castle for Java before 1.86, the high-level OpenPGP API accepted a data signature made by a signing subkey who

历史摘要 · 未重新核验 · NVD

#cve #cwe-345 #cwe-347

安全公告2026-10-03 发布INFO

BLS12-381 key validation accepts a public key built on a foreign curve

CVE-2026-71891

In Bouncy Castle for Java before 1.86, BLS12_381BasicScheme.keyValidate, and so BLSPublicKeyParameters and every BasicSc

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-347

安全公告2026-10-03 发布INFO

OpenPGP data signature accepted from a signing subkey without cross-certification

CVE-2026-71887

In Bouncy Castle for Java before 1.86, the high-level OpenPGP API accepted a data signature made by a signing subkey who

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-345 #cwe-347

漏洞预警2026-10-02 发布INFO

Zebra before 4.4.0 contains a consensus divergence vulnerability in V5 transparent signature verification, computing a ZIP-244 digest for SIGHASH_SINGLE inputs lacking correspon...

CVE-2026-104437

Zebra before 4.4.0 contains a consensus divergence vulnerability in V5 transparent signature verification, computing a Z

历史摘要 · 未重新核验 · NVD

#cve #cwe-347

漏洞预警2026-10-02 发布INFO

Zebra zebrad 4.4.0 and zebra-script 6.0.0 fail to enforce a ZIP-244 consensus rule, accepting V5 transparent inputs signed with SIGHASH_SINGLE that lack a corresponding output. ...

CVE-2026-104435

Zebra zebrad 4.4.0 and zebra-script 6.0.0 fail to enforce a ZIP-244 consensus rule, accepting V5 transparent inputs sign

历史摘要 · 未重新核验 · NVD

#cve #cwe-347

安全公告2026-10-02 发布INFO

Zebra before 4.4.0 Consensus Split via SIGHASH_SINGLE Missing-Output Handling

CVE-2026-104437

Zebra before 4.4.0 contains a consensus divergence vulnerability in V5 transparent signature verification, computing a Z

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-347

安全公告2026-10-02 发布INFO

Zebra 4.4.0 Consensus Divergence via V5 SIGHASH_SINGLE Without Output

CVE-2026-104435

Zebra zebrad 4.4.0 and zebra-script 6.0.0 fail to enforce a ZIP-244 consensus rule, accepting V5 transparent inputs sign

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-347

漏洞预警2026-10-02 发布INFO

An improper verification of cryptographic signature vulnerability exists in protocol gateways because the device does not properly verify the cryptographic authenticity of firmw...

CVE-2026-86326

An improper verification of cryptographic signature vulnerability exists in protocol gateways because the device does no

历史摘要 · 未重新核验 · NVD

#cve #cwe-347

漏洞预警2026-10-02 发布INFO

Improper verification of cryptographic signature in the attribute certificate path validator (PkixAttrCertPathValidator, also used by PkixAttrCertPathBuilder) in Legion of the B...

CVE-2026-63571

Improper verification of cryptographic signature in the attribute certificate path validator (PkixAttrCertPathValidator,

历史摘要 · 未重新核验 · NVD

#cve #cwe-347

安全公告2026-10-02 发布INFO

Attribute certificate path validation does not verify the attribute certificate's signature

CVE-2026-63571

Improper verification of cryptographic signature in the attribute certificate path validator (PkixAttrCertPathValidator,

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-347

漏洞预警2026-10-01 发布INFO

This vulnerability enables unauthenticated remote code execution (RCE) on a victim's machine by exploiting a combination of cryptographic weaknesses and memory management issues...

CVE-2026-18397

This vulnerability enables unauthenticated remote code execution (RCE) on a victim's machine by exploiting a combination

历史摘要 · 未重新核验 · NVD

#cve #cwe-130 #cwe-252 #cwe-347 #cwe-457

漏洞预警2026-10-01 发布INFO

Improper verification of cryptographic signature vulnerability in Apache APISIX. Any unauthenticated attacker could impersonate any user on every route protected by the saml-...

CVE-2026-94212

Improper verification of cryptographic signature vulnerability in Apache APISIX. Any unauthenticated attacker could i

历史摘要 · 未重新核验 · NVD

#cve #cwe-347

漏洞预警2026-10-01 发布INFO

n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 fail to verify the x-webflow-signature HMAC in the Webflow Trigger node webhook handler. Un...

CVE-2026-103245

n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 fail to verify the x-webflow-signa

历史摘要 · 未重新核验 · NVD

#cve #cwe-347

安全公告2026-10-01 发布INFO

n8n before 1.123.80, 2.39.6, and 2.40.1 Missing Webhook Signature Verification

CVE-2026-103245

n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 fail to verify the x-webflow-signa

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-347