CWE-346

Origin Validation Error

Parent: CWE-345 - Insufficient Verification of Data Authenticity

The product does not properly verify that the source of data or communication is valid.

692 vulnerabilities with CWE-346
CVE-2023-46715 MEDIUM
Fortinet FortiOS <7.4.1, <7.2.6 - Auth Bypass
CVSS 5.0
CVE-2023-27360 HIGH
NETGEAR RAX30 Firmware < 1.0.10.94 - Unauthenticated Remote Code Execution via lighttpd Misconfiguration
CVSS 8.8
CVE-2023-5973 MEDIUM
Broadcom Fabric Operating System < 9.2.0 - Origin Validation Error
CVSS 4.3
CVE-2023-30996 MEDIUM
IBM Cognos Analytics <12.0.0 - Info Disclosure
CVSS 5.3
CVE-2023-40547 HIGH
Shim <15.8 - Remote Code Execution via HTTP Boot Response Parsing
CVSS 8.3
CVE-2023-47200 HIGH
Trend Micro Apex One < 14.0.12737 - Local Privilege Escalation via Plug-in Manager Origin Validation Error
CVSS 7.8
CVE-2023-47199 HIGH
Trend Micro Apex One < 14.0.12737 - Privilege Escalation via Origin Validation Error
CVSS 7.8
CVE-2023-47198 HIGH
Trend Micro Apex One < 14.0.12737 - Privilege Escalation via Origin Validation Error
CVSS 7.8
CVE-2023-47197 HIGH
Trend Micro Apex One < 14.0.12737 - Privilege Escalation via Origin Validation Error
CVSS 7.8
CVE-2023-47196 HIGH
Trend Micro Apex One < 14.0.12737 - Privilege Escalation via Origin Validation Error
CVSS 7.8
CVE-2023-47195 HIGH
Trend Micro Apex One < 14.0.12737 - Privilege Escalation via Origin Validation Error
CVSS 7.8
CVE-2023-47194 HIGH
Trend Micro Apex One < 14.0.12737 - Privilege Escalation via Origin Validation Error
CVSS 7.8
CVE-2023-47193 HIGH
Trend Micro Apex One < 14.0.12737 - Privilege Escalation via Origin Validation Error
CVSS 7.8
CVE-2023-20275 MEDIUM
Cisco ASA/FTD - Privilege Escalation
CVSS 4.1
CVE-2023-49805 MEDIUM
Uptime Kuma < 1.23.9 - Origin Validation Error in WebSocket Connection
CVSS 6.0
CVE-2023-49803 HIGH
@koa/cors < 5.0.0 - Origin Validation Error via Missing Allowed Origin Check
CVSS 8.6
CVE-2023-28794 MEDIUM
Zscaler Client Connector <1.3.1.6 - Privilege Escalation
CVSS 4.3
CVE-2023-5859 MEDIUM
Google Chrome < 119.0.6045.105 - Domain Spoofing via Picture In Picture Security UI
CVSS 4.3
CVE-2023-5858 MEDIUM
Google Chrome < 119.0.6045.105 - Security UI Obfuscation via WebApp Provider
CVSS 4.3
CVE-2023-5853 MEDIUM
Google Chrome < 119.0.6045.105 - Security UI Spoofing via Crafted HTML Page
CVSS 4.3
CVE-2023-5851 MEDIUM
Google Chrome < 119.0.6045.105 - Origin Validation Error in Downloads
CVSS 4.3
CVE-2023-5718 MEDIUM
Vue.js Devtools - Unauthenticated Sensitive Data Exposure via postMessage API
CVSS 4.3
CVE-2023-28795 HIGH
Zscaler Client Connector <1.3.1.6 - Code Injection
CVSS 7.8
CVE-2023-44190 MEDIUM
Juniper Junos OS Evolved - Origin Validation Error in MAC Address Validation
CVSS 6.1
CVE-2023-44189 MEDIUM
Juniper Junos OS Evolved MAC Address Validation Origin Error
CVSS 6.1
Details
Vulnerabilities 692