CWE-347: Improper Verification of Cryptographic Signature, page 12

The product does not verify, or incorrectly verifies, the cryptographic signature for data.

What the weakness is: CWE-347 at MITRE

1. 9.8CVE-2024-32911EPSS 0.2%2024-06-13

   There is a possible escalation of privilege due to improperly used crypto. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

2. 7.5CVE-2024-37568EPSS 0.4%2024-06-09

   lepture Authlib before 1.3.1 has algorithm confusion with asymmetric public keys. Unless an algorithm is specified in a jwt.decode call, HMAC verification is allowed with any asymmetric public key. (This is similar to CVE-2022-29217 and CV…

3. 6.4CVE-2024-2451EPSS 0.1%2024-05-28

   Improper fingerprint validation in the TeamViewer Client (Full & Host) prior Version 15.54 for Windows and macOS allows an attacker with administrative user rights to further elevate privileges via executable sideloading.

4. 5.6CVE-2024-1721EPSS 0.1%2024-05-21

   Improper Verification of Cryptographic Signature vulnerability in HYPR Passwordless on Windows allows Malicious Software Update.This issue affects HYPR Passwordless: before 9.1.

5. 7.8CVE-2024-27244EPSS 0.1%2024-05-15

   Insufficient verification of data authenticity in the installer for Zoom Workplace VDI App for Windows may allow an authenticated user to conduct an escalation of privilege via local access.

6. 5.3CVE-2024-34358EPSS 0.5%2024-05-14

   TYPO3 is an enterprise content management system. Starting in version 9.0.0 and prior to versions 9.5.48 ELTS, 10.4.45 ELTS, 11.5.37 LTS, 12.4.15 LTS, and 13.1.1, the `ShowImageController` (`_eID tx_cms_showpic_`) lacks a cryptographic HMA…

7. 7.8CVE-2023-50228EPSS 0.2%2024-05-03

   Parallels Desktop Updater Improper Verification of Cryptographic Signature Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. An attack…

8. 10.0CVE-2024-32962EPSS 0.8%2024-05-02

   xml-crypto is an xml digital signature and encryption library for Node.js. In affected versions the default configuration does not check authorization of the signer, it only checks the validity of the signature per section 3.2.2 of the w3 …

9. 9.8CVE-2024-23480EPSS 0.3%2024-05-01

   A fallback mechanism in code sign checking on macOS may allow arbitrary code execution. This issue affects Zscaler Client Connector on MacOS prior to 4.2.

10. 6.7CVE-2024-27247EPSS 0.1%2024-04-09

    Improper privilege management in the installer for Zoom Desktop Client for macOS before version 5.17.10 may allow a privileged user to conduct an escalation of privilege via local access.

11. 7.8CVE-2024-24694EPSS 0.2%2024-04-09

    Improper privilege management in the installer for Zoom Desktop Client for Windows before version 5.17.10 may allow an authenticated user to conduct an escalation of privilege via local access.

12. 7.8CVE-2024-26228EPSS 0.4%2024-04-09

    Windows Cryptographic Services Security Feature Bypass Vulnerability

13. 7.4CVE-2024-26194EPSS 0.4%2024-04-09

    Secure Boot Security Feature Bypass Vulnerability

14. 9.1CVE-2023-52538EPSS 0.3%2024-04-08

    Vulnerability of package name verification being bypassed in the HwIms module. Impact: Successful exploitation of this vulnerability will affect availability.

15. 8.1CVE-2023-52043EPSS 0.3%2024-04-03

    An issue in D-Link COVR 1100, 1102, 1103 AC1200 Dual-Band Whole-Home Mesh Wi-Fi System (Hardware Rev B1) truncates Wireless Access Point Passwords (WPA-PSK) allowing an attacker to gain unauthorized network access via weak authentication c…

16. 6.1CVE-2024-2307EPSS 0.2%2024-03-19

    A flaw was found in osbuild-composer. A condition can be triggered that disables GPG verification for package repositories, which can expose the build phase to a Man-in-the-Middle attack, allowing untrusted code to be installed into an ima…

17. 9.8CVE-2018-25099EPSS 0.5%2024-03-18

    In the CryptX module before 0.062 for Perl, gcm_decrypt_verify() and chacha20poly1305_decrypt_verify() do not verify the tag.

18. 6.5CVE-2024-21491EPSS 0.4%2024-02-13

    Versions of the package svix before 1.17.0 are vulnerable to Authentication Bypass due to an issue in the verify function where signatures of different lengths are incorrectly compared. An attacker can bypass signature verification by prov…

19. 5.5CVE-2024-1150EPSS 0.1%2024-02-08

    Improper Verification of Cryptographic Signature vulnerability in Snow Software Inventory Agent on Unix allows File Manipulation through Snow Update Packages.This issue affects Inventory Agent: through 7.3.1.

20. 5.5CVE-2024-1149EPSS 0.1%2024-02-08

    Improper Verification of Cryptographic Signature vulnerability in Snow Software Inventory Agent on MacOS, Snow Software Inventory Agent on Windows, Snow Software Inventory Agent on Linux allows File Manipulation through Snow Update Package…

21. 9.1CVE-2024-21917EPSS 0.9%2024-01-31

    A vulnerability exists in Rockwell Automation FactoryTalk® Service Platform that allows a malicious user to obtain the service token and use it for authentication on another FTSP directory. This is due to the lack of digital signing betwee…

22. 3.3CVE-2024-21383EPSS 0.4%2024-01-26

    Microsoft Edge (Chromium-based) Spoofing Vulnerability

23. 5.3CVE-2024-23680EPSS 0.2%2024-01-19

    AWS Encryption SDK for Java versions 2.0.0 to 2.2.0 and less than 1.9.0 incorrectly validates some invalid ECDSA signatures.

24. 9.8CVE-2023-44077EPSS 0.4%2024-01-17

    Studio Network Solutions ShareBrowser before 7.0 on macOS mishandles signature verification, aka PMP-2636.

25. 7.5CVE-2024-0567EPSS 1.4%2024-01-16

    A vulnerability was found in GnuTLS, where a cockpit (which uses gnuTLS) rejects a certificate chain with distributed trust. This issue occurs when validating a certificate chain with cockpit-certificate-ensure. This flaw allows an unauthe…

26. 5.3CVE-2023-2030EPSS 0.4%2024-01-12

    An issue has been discovered in GitLab CE/EE affecting all versions from 12.2 prior to 16.5.6, 16.6 prior to 16.6.4, and 16.7 prior to 16.7.2 in which an attacker could potentially modify the metadata of signed commits.

27. 9.8CVE-2016-20021EPSS 0.5%2024-01-12

    In Gentoo Portage before 3.0.47, there is missing PGP validation of executed code: the standalone emerge-webrsync downloads a .gpgsig file but does not perform signature verification. Unless emerge-webrsync is used, Portage is not vulnerab…

28. 8.8CVE-2024-21669EPSS 0.6%2024-01-11

    Hyperledger Aries Cloud Agent Python (ACA-Py) is a foundation for building decentralized identity applications and services running in non-mobile environments. When verifying W3C Format Verifiable Credentials using JSON-LD with Linked Data…

29. 9.1CVE-2023-5347EPSS 1.3%2024-01-09

    An Improper Verification of Cryptographic Signature vulnerability in the update process of Korenix JetNet Series allows replacing the whole operating system including Trusted Executables. This issue affects JetNet devices older than firmwa…

30. 4.5CVE-2022-3864EPSS 0.4%2024-01-04

    A vulnerability exists in the Relion update package signature validation. A tampered update package could cause the IED to restart. After restart the device is back to normal operation. An attacker could exploit the vulnerability by first …

31. 7.1CVE-2023-23436EPSS 0.1%2023-12-29

    Some Honor products are affected by signature management vulnerability, successful exploitation could cause the forged system file overwrite the correct system file

32. 7.1CVE-2023-23435EPSS 0.1%2023-12-29

    Some Honor products are affected by signature management vulnerability, successful exploitation could cause the forged system file overwrite the correct system file

33. 7.1CVE-2023-23433EPSS 0.1%2023-12-29

    Some Honor products are affected by signature management vulnerability, successful exploitation could cause the forged system file overwrite the correct system file.

34. 7.1CVE-2023-23432EPSS 0.1%2023-12-29

    Some Honor products are affected by signature management vulnerability, successful exploitation could cause the forged system file overwrite the correct system file.

35. 7.1CVE-2023-23431EPSS 0.1%2023-12-29

    Some Honor products are affected by signature management vulnerability, successful exploitation could cause the forged system file overwrite the correct system file.

36. 8.8CVE-2023-50714EPSS 0.5%2023-12-22

    yii2-authclient is an extension that adds OpenID, OAuth, OAuth2 and OpenId Connect consumers for the Yii framework 2.0. In yii2-authclient prior to version 2.2.15, the Oauth2 PKCE implementation is vulnerable in 2 ways. First, the `authCod…

37. 6.5CVE-2023-49646EPSS 0.4%2023-12-13

    Improper authentication in some Zoom clients before version 5.16.5 may allow an authenticated user to conduct a denial of service via network access.

38. 6.7CVE-2023-41337EPSS 0.2%2023-12-12

    h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. In version 2.3.0-beta2 and prior, when h2o is configured to listen to multiple addresses or ports with each of them using different backend servers managed by multiple ent…

39. 7.5CVE-2023-49079EPSS 0.4%2023-11-29

    Misskey is an open source, decentralized social media platform. Misskey's missing signature validation allows arbitrary users to impersonate any remote user. This issue has been patched in version 2023.11.1-beta.1.

40. 6.7CVE-2023-20568EPSS 0.2%2023-11-14

    Improper signature verification of RadeonTM RX Vega M Graphics driver for Windows may allow an attacker with admin privileges to launch RadeonInstaller.exe without validating the file signature potentially leading to arbitrary code executi…

41. 6.7CVE-2023-20567EPSS 0.2%2023-11-14

    Improper signature verification of RadeonTM RX Vega M Graphics driver for Windows may allow an attacker with admin privileges to launch AMDSoftwareInstaller.exe without validating the file signature potentially leading to arbitrary code ex…

42. 8.8CVE-2023-5747EPSS 0.6%2023-11-13

    Bashis, a Security Researcher at IPVM has found a flaw that allows for a remote code execution during the installation of Wave on the camera device. The Wave server application in camera device was vulnerable to command injection allowing …

43. 5.3CVE-2023-47122EPSS 0.4%2023-11-10

    Gitsign is software for keyless Git signing using Sigstore. In versions of gitsign starting with 0.6.0 and prior to 0.8.0, Rekor public keys were fetched via the Rekor API, instead of through the local TUF client. If the upstream Rekor ser…

44. 7.5CVE-2023-34058EPSS 0.8%2023-10-27

    VMware Tools contains a SAML token signature bypass vulnerability. A malicious actor that has been granted Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-6A952214-0E5E-4CCF-9D2A-90948FF643EC…

45. 7.5CVE-2023-46234EPSS 0.6%2023-10-26

    browserify-sign is a package to duplicate the functionality of node's crypto public key functions, much of this is based on Fedor Indutny's work on indutny/tls.js. An upper bound check issue in `dsaVerify` function allows an attacker to co…

46. 5.3CVE-2023-28804EPSS 0.3%2023-10-23

    An Improper Verification of Cryptographic Signature vulnerability in Zscaler Client Connector on Linux allows replacing binaries.This issue affects Linux Client Connector: before 1.4.0.105

47. 7.8CVE-2023-28796EPSS 0.2%2023-10-23

    Improper Verification of Cryptographic Signature vulnerability in Zscaler Client Connector on Linux allows Code Injection. This issue affects Zscaler Client Connector for Linux: before 1.3.1.6.

48. 7.5CVE-2023-46324EPSS 0.5%2023-10-23

    pkg/suci/suci.go in free5GC udm before 1.2.0, when Go before 1.19 is used, allows an Invalid Curve Attack because it may compute a shared secret via an uncompressed public key that has not been validated. An attacker can send arbitrary SUC…

49. 8.8CVE-2022-25333EPSS 0.1%2023-10-19

    The Texas Instruments OMAP L138 (secure variants) trusted execution environment (TEE) performs an RSA check implemented in mask ROM when loading a module through the SK_LOAD routine. However, only the module header authenticity is validate…

50. 7.8CVE-2023-43611EPSS 0.2%2023-10-10

    The BIG-IP Edge Client Installer on macOS does not follow best practices for elevating privileges during the installation process.  This vulnerability is due to an incomplete fix for CVE-2023-38418.  Note: Software versions which have reac…