CWE-345

658 vulnerabilities with CWE-345

CVE-2025-23415 LOW

F5 BIG-IP APM 15.1.0-15.1.10.6.0.11.6 - Insufficient Verification of Data Authenticity in VPN Endpoint Inspection

CVSS 3.1

CVE-2025-0510 MEDIUM

Thunderbird <128.7 - Info Disclosure

CVSS 6.5

CVE-2025-24882 MEDIUM

regclient < 0.7.1 - Digest Spoofing via Manifest Pin Bypass

CVSS 5.2

CVE-2025-21606 HIGH

exelban/stats < 2.11.21 - Local Privilege Escalation via Insecure XPC Service

CVE-2024-58267 HIGH

Rancher 2.9.0-2.12.0 - SAML Authentication Token Theft via Phishing Attack

CVSS 8.0

CVE-2024-48916 HIGH

Ceph <= 19.2.3 - Insufficient Verification of Data Authenticity in RadosGW OIDC Provider

CVSS 8.1

CVE-2024-39805 HIGH

Intel(R) DSA <23.4.39 - Privilege Escalation

CVSS 7.8

CVE-2024-10237 HIGH

Supermicro MBD-X12DPG-OA6 - Auth Bypass

CVSS 7.2

CVE-2024-55929 MEDIUM

Xerox Workplace Suite < 5.6.701.9 - Mail Spoofing via Forged Email Headers

CVSS 5.3

CVE-2024-54111 MEDIUM

HarmonyOS - Read/Write Vulnerability in Image Decoding Module

CVSS 5.7

CVE-2024-12369 MEDIUM

wildfly-elytron 1.17.0.Final-2.2.9.Final - Authorization Code Injection via OIDC-Client

CVSS 4.2

CVE-2024-52548 MEDIUM

Firmware <2.800.0000000.8.R.20241111 - Privilege Escalation

CVSS 6.7

CVE-2024-53259 MEDIUM

quic-go < 0.48.2 - Denial of Service via ICMP Packet Too Large Injection

CVSS 6.5

CVE-2024-11666 CRITICAL

cph2_echarge_firmware <2.0.4 - Command Injection

CVSS 9.0

CVE-2024-8356 HIGH

Visteon Infotainment VIP MCU - Privilege Escalation

CVSS 7.8

CVE-2024-10977 LOW

Postgresql < 12.21 - Data Authenticity Bypass

CVSS 3.1

CVE-2024-43428 HIGH

Moodle < 4.1.12 - Cache Poisoning via Insufficient Local Storage Validation

CVSS 7.7

CVE-2024-7847 HIGH

Rockwell Automation RSLogix 5 - Remote Code Execution via Malicious RSP/RSS Project File

CVSS 7.7

CVE-2024-47867 HIGH

Gradio < 5.0.0 - Insufficient Integrity Check on FRP Client Download

CVSS 7.5

CVE-2024-47079 MEDIUM

meshtastic_firmware < 2.5.1 - Insufficient Verification of Data Authenticity in Remote Hardware Module

CVSS 6.4

CVE-2024-47123 MEDIUM

goTenna Pro < 1.6.1 and < 2.0.3 - Missing Integrity Check for AES CTR Encrypted Messages

CVSS 5.3

CVE-2024-43108 MEDIUM

goTenna Pro ATAK Plugin - Info Disclosure

CVSS 5.3

CVE-2024-23922 MEDIUM

Sony XAV-AX5500 Firmware - Unauthenticated Remote Code Execution via Firmware Update Validation Bypass

CVSS 6.8

CVE-2024-45410 CRITICAL

Traefik X-Forwarded Headers - Hop-by-Hop Header Manipulation

CVSS 9.8

CVE-2024-42483 MEDIUM

espressif/esp-now < 2.5.2 - Replay Attack via Shared Cache

CVSS 6.5