CWE-347

743 vulnerabilities with CWE-347

CVE-2024-27247 MEDIUM

Zoom Desktop Client for macOS <5.17.10 - Privilege Escalation

CVSS 5.5

CVE-2024-24694 MEDIUM

Zoom Desktop Client for Windows <5.17.10 - Privilege Escalation

CVSS 5.9

CVE-2024-26228 HIGH

Windows Cryptographic Services - Security Feature Bypass

CVSS 7.8

CVE-2024-26194 HIGH

Windows 10/11, Server 2008-2022 Secure Boot Bypass via Cryptographic Verification Flaw

CVSS 7.4

CVE-2024-2307 MEDIUM

Red Hat Enterprise Linux 8 and 9 - Improper Verification of Cryptographic Signature

CVSS 6.1

CVE-2024-21491 MEDIUM

svix-webhooks < 1.17.0 - Authentication Bypass via Signature Length Mismatch

CVSS 5.9

CVE-2024-1150 HIGH

Snow Software Inventory Agent <7.3.1 - Info Disclosure

CVSS 7.8

CVE-2024-1149 HIGH

Snow Inventory Agent <= 6.7.2, <= 6.12.0, <= 6.14.5 - File Manipulation via Snow Update Packages

CVSS 7.8

CVE-2024-21917 CRITICAL

Rockwell Automation FactoryTalk Services Platform < 6.31.00 - Improper Verification of Cryptographic Signature

CVSS 9.8

CVE-2024-21383 LOW

Microsoft Edge Chromium < 121.0.2277.83 - Spoofing via Cryptographic Signature Verification Bypass

CVSS 3.3

CVE-2024-23680 MEDIUM

AWS Encryption SDK for Java 2.0.0-2.2.0 and <1.9.0 - Improper Verification of Cryptographic Signature

CVSS 5.3

CVE-2024-0567 HIGH

GnuTLS >=3.7.0 <3.8.3 - Denial of Service via Certificate Chain Validation

CVSS 7.5

CVE-2024-21669 CRITICAL

Hyperledger Aries Cloud Agent Python 0.7.0-0.10.4 - Cryptographic Signature Verification Bypass

CVSS 9.9

CVE-2023-53951 CRITICAL

Ever Gauzy 0.281.9 - JWT Authentication Bypass via Weak HMAC Secret

CVSS 9.8

CVE-2023-25574 CRITICAL

jupyterhub-ltiauthenticator 1.3.0-1.4.0 - Improper Verification of Cryptographic Signature in LTI13Authenticator

CVSS 10.0

CVE-2023-28806 MEDIUM

Zscaler Client Connector <4.2.0.190 - Info Disclosure

CVSS 5.7

CVE-2023-34435 HIGH

Realtek rtl819x Jungle SDK v3.4.11 - Arbitrary Firmware Update via Boa formUpload

CVSS 7.2

CVE-2023-50228 HIGH

Parallels Desktop < 19.1.0 (54729) - Local Privilege Escalation via Updater Service Cryptographic Signature Bypass

CVSS 7.8

CVE-2023-52538 CRITICAL

Huawei EMUI and HarmonyOS - Incorrect Authorization in HwIms Module

CVSS 9.1

CVE-2023-52043 HIGH

D-Link COVR 1100, 1102, 1103 - Unauthenticated Network Access via WPA-PSK Password Truncation

CVSS 8.1

CVE-2023-44077 CRITICAL

Studio Network Solutions ShareBrowser <7.0 - Info Disclosure

CVSS 9.8

CVE-2023-2030 LOW

GitLab 12.2-16.5.5, 16.6-16.6.3, 16.7-16.7.1 - Improper Verification of Cryptographic Signature

CVSS 3.5

CVE-2023-5347 CRITICAL

Korenix JetNet Series - Improper Verification of Cryptographic Signature

CVSS 9.8

CVE-2023-23436 HIGH

Honor MagicOS < 7.1.0.100 - Improper Verification of Cryptographic Signature

CVSS 7.3

CVE-2023-23435 MEDIUM

Honor MagicOS < 7.1.0.137 - Improper Verification of Cryptographic Signature

CVSS 4.0