#cwe-347

共收录 355 条相关情报。

← 返回所有主题
漏洞预警2026-09-23 发布MEDIUM

A signature validation vulnerability exists in Foxit PDF Editor/Reader’s handling of incrementally updated PDF documents. Changes to visible document content may not invalidate ...

CVE-2026-91814

A signature validation vulnerability exists in Foxit PDF Editor/Reader’s handling of incrementally updated PDF documents

来源摘录 · NVD

安全公告2026-09-23 发布INFO

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to...

CVE-2026-18152

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to forge validly-signed messa

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-22 发布INFO

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to forge validly-signed messages due to improper verification of cryptographic signatu...

CVE-2026-18152

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to forge validly-signed messa

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-22 发布INFO

Notepad++ is a free and open-source source code editor. From 8.9.7 until 8.9.8, the Notepad++ updater and signature verification path can accept a modified GUP.exe file whose em...

CVE-2026-85995

Notepad++ is a free and open-source source code editor. From 8.9.7 until 8.9.8, the Notepad++ updater and signature veri

历史摘要 · 未重新核验 · NVD

安全公告2026-09-22 发布INFO

Notepad++: Authenticode verification bypass allows modified updater execution

CVE-2026-85995

Notepad++ is a free and open-source source code editor. From 8.9.7 until 8.9.8, the Notepad++ updater and signature veri

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-22 发布INFO

A flaw was found in the Kerberos federation provider of Keycloak, an open-source identity and access management solution. When Kerberos password authentication is used without S...

CVE-2026-95503

A flaw was found in the Kerberos federation provider of Keycloak, an open-source identity and access management solution

历史摘要 · 未重新核验 · NVD

安全公告2026-09-19 发布INFO

The Payment Gateway of Stripe for WooCommerce plugin for WordPress is vulnerable to Improper...

CVE-2026-9832

The Payment Gateway of Stripe for WooCommerce plugin for WordPress is vulnerable to Improper Verification of Cryptograph

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-19 发布INFO

The Payment Gateway of Stripe for WooCommerce plugin for WordPress is vulnerable to Improper Verification of Cryptographic Signature in all versions up to, and including, 5.0.8....

CVE-2026-9832

The Payment Gateway of Stripe for WooCommerce plugin for WordPress is vulnerable to Improper Verification of Cryptograph

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-18 发布INFO

Mnemosyne is a memory layer for artificial intelligence agents. Prior to v3.10.1, the auth check in mnemosyne/core/sync_server.py parsed the JWT's header and payload using base6...

CVE-2026-59163

Mnemosyne is a memory layer for artificial intelligence agents. Prior to v3.10.1, the auth check in mnemosyne/core/sync_

历史摘要 · 未重新核验 · NVD

安全公告2026-09-18 发布INFO

Mnemosyne has JWT signature verification bypass sync server that allows authentication bypass

CVE-2026-59163

Mnemosyne is a memory layer for artificial intelligence agents. Prior to v3.10.1, the auth check in mnemosyne/core/sync_

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-18 发布INFO

Mnemosyne has JWT signature verification bypass sync server that allows authentication bypass

CVE-2026-59163

### Summary The Mnemosyne sync server's authentication check decoded JWT bearer tokens but never verified their HMAC-SH

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-18 发布INFO

hickory-resolver versions before 0.26.2 fail to propagate bogus DNSSEC proof states through the Resolver::lookup() and Resolver::lookup_ip() APIs, allowing invalid records to be...

CVE-2026-93657

hickory-resolver versions before 0.26.2 fail to propagate bogus DNSSEC proof states through the Resolver::lookup() and R

历史摘要 · 未重新核验 · NVD

安全公告2026-09-18 发布INFO

hickory-resolver before 0.26.2 DNSSEC Validation Bypass

CVE-2026-93657

hickory-resolver versions before 0.26.2 fail to propagate bogus DNSSEC proof states through the Resolver::lookup() and R

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-18 发布INFO

An authenticated user with access to the NetBackup Flex OS management shell could read arbitrary files from the underlying operating system by supplying a specially crafted pa...

CVE-2026-28199

An authenticated user with access to the NetBackup Flex OS management shell could read arbitrary files from the underly

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-18 发布INFO

An authenticated, low-privileged user with access to the NetBackup Flex OS management shell could bypass the cryptographic signature verification step of a privileged support ...

CVE-2026-28198

An authenticated, low-privileged user with access to the NetBackup Flex OS management shell could bypass the cryptograp

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-17 发布INFO

mport is the MidnightBSD Package Manager. Prior to 2.7.8, the mport_fetch_bootstrap_index() function in libmport/fetch.c could return success when bootstrap index hash verificat...

CVE-2026-54581

mport is the MidnightBSD Package Manager. Prior to 2.7.8, the mport_fetch_bootstrap_index() function in libmport/fetch.c

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-17 发布INFO

libp2p is a JavaScript implementation of the libp2p networking stack. From 15.0.0 until 16.0.5, @libp2p/gossipsub uses the default StrictSign policy in packages/gossipsub/src/ut...

CVE-2026-86038

libp2p is a JavaScript implementation of the libp2p networking stack. From 15.0.0 until 16.0.5, @libp2p/gossipsub uses t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-17 发布INFO

Improper Verification of Cryptographic Signature vulnerability in team-alembic AshAuthentication allows a caller of the token revocation action to neutralise a revocation or wri...

CVE-2026-78223

Improper Verification of Cryptographic Signature vulnerability in team-alembic AshAuthentication allows a caller of the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-16 发布INFO

The lack of signature verification of firmware update packages in VEO and VEO-XS Wi-Fi monitors, in versions prior to 01.48.001, allows an attacker who controls the delivery of ...

CVE-2026-86585

The lack of signature verification of firmware update packages in VEO and VEO-XS Wi-Fi monitors, in versions prior to 01

历史摘要 · 未重新核验 · NVD

安全公告2026-09-16 发布INFO

The VeloCloud Edge software update workflow may accept update bundles without properly validating...

CVE-2026-86109

The VeloCloud Edge software update workflow may accept update bundles without properly validating their signatures becau

历史摘要 · 未重新核验 · GitHub Advisory