CWE-347

686 vulnerabilities with CWE-347

CVE-2020-3138 MEDIUM

Cisco Enterprise NFV Infrastructure Software < 3.11.1 Authenticated Code Execution

CVSS 6.7

CVE-2020-6174 CRITICAL

The Update Framework < 0.12.1 - Improper Verification of Cryptographic Signature

CVSS 9.8

CVE-2020-7906 HIGH

JetBrains Rider <2019.3.7 - Info Disclosure

CVSS 7.5

CVE-2020-5390 HIGH

PySAML2 < 5.0.0 - Improper Verification of Cryptographic Signature via XML Signature Wrapping

CVSS 7.5

CVE-2019-8901 MEDIUM

iPadOS < 13.1 - SSH Traffic Interception via Improper Host Key Verification

CVSS 6.5

CVE-2019-1736 MEDIUM

Cisco UCS C-Series Rack Servers - Authenticated UEFI Secure Boot Bypass via Firmware Image Validation Flaw

CVSS 6.6

CVE-2019-10562 HIGH

Qualcomm Snapdragon Firmware - Improper Authentication and Signature Verification in Secure Boot Loader

CVSS 7.8

CVE-2019-20837 HIGH

Foxit Reader and PhantomPDF < 9.5 - Signature Validation Bypass via Modified File

CVSS 7.5

CVE-2019-20834 HIGH

Foxit PhantomPDF < 8.3.10 - Signature Validation Bypass via Modified File

CVSS 7.5

CVE-2019-10575 HIGH

Qualcomm SDA845 SDM845 SDM850 Firmware - Improper Verification of Cryptographic Signature

CVSS 7.8

CVE-2019-17561 HIGH

Apache NetBeans <= 11.2 - Improper Verification of Cryptographic Signature

CVSS 7.5

CVE-2019-15796 MEDIUM

python-apt <= 1.9.3ubuntu2 - Improper Authentication in Version Hash Validation

CVSS 4.7

CVE-2019-20597 CRITICAL

Samsung Android N(7.1) O(8.x) P(9.0) - Unauthenticated Arbitrary Application Access to SPENgesture User-Input Logs

CVSS 9.1

CVE-2019-14859 CRITICAL

python-ecdsa < 0.13.3 - Improper Verification of Cryptographic Signature

CVSS 9.1

CVE-2019-19962 HIGH

wolfssl < 4.3.0 - Fault Injection in RSA Cryptography via wc_SignatureGenerateHash

CVSS 7.5

CVE-2019-16732 HIGH

Petalk AI and PF-103 Firmware - Unencrypted Firmware Upgrade Transmission

CVSS 8.1

CVE-2019-16753 HIGH

DAPS/PIVX <2019-08-26 - Info Disclosure

CVSS 7.5

CVE-2019-3465 HIGH

xmlseclibs < 1.4.2 and 3.0.0-3.0.3 - Authenticated Cryptographic Signature Verification Bypass

CVSS 8.8

CVE-2019-0071 HIGH

Junos OS 18.1R3-S4/18.3R1-S3 on EX2300/EX3400 - Authenticated Privilege Escalation via Veriexec

CVSS 7.8

CVE-2019-16992 HIGH

Keybase 2.13.2 - Improper Verification of Cryptographic Signature

CVSS 7.5

CVE-2019-11755 HIGH

Thunderbird <68.1.1 - Info Disclosure

CVSS 7.5

CVE-2019-12662 MEDIUM

Cisco IOS XE and NX-OS - Authenticated Code Execution via Improper OVA Signature Verification

CVSS 6.7

CVE-2019-12649 MEDIUM

Cisco IOS XE - Authenticated Digital Signature Verification Bypass via Boot Process

CVSS 6.7

CVE-2019-3738 MEDIUM

RSA BSAFE Crypto-J < 6.2.5 - Missing Required Cryptographic Step

CVSS 6.5

CVE-2019-15545 HIGH

libp2p < 0.8.1 - Cryptographic Signature Spoofing

CVSS 7.5