CWE-347

742 vulnerabilities with CWE-347

CVE-2025-65295 HIGH

Aqara Hub <4.1.9_0027-4.3.6_0025 - RCE

CVSS 8.1

CVE-2025-64787 LOW

Adobe Acrobat and Reader < 20.005.30838 and < 25.001.20997 - Security Feature Bypass

CVSS 3.3

CVE-2025-64786 LOW

Adobe Acrobat and Reader < 20.005.30803 - Security Feature Bypass via Cryptographic Signature Verification

CVSS 3.3

CVE-2025-59719 CRITICAL

FortiWeb 7.4.0-7.4.9, 7.6.0-7.6.4, 8.0.0 - Unauthenticated SAML Authentication Bypass via Crafted SAML Response

CVSS 9.8

CVE-2025-59718 CRITICAL KEV

Fortinet FortiOS/FortiProxy/FortiSwitchManager SAML Signature Verification Bypass

CVSS 9.8

CVE-2025-66568 CRITICAL

ruby-saml < 1.18.0 - Authentication Bypass via Signature Wrapping Attack

CVSS 9.1

CVE-2025-66567 CRITICAL

ruby-saml < 1.18.0 - Authentication Bypass via Signature Wrapping Attack

CVSS 9.1

CVE-2025-13662 HIGH

Ivanti Endpoint Manager < 2024 SU4 SR1 - Remote Code Execution via Signature Bypass

CVSS 7.8

CVE-2025-65945 HIGH

auth0/node-jws <4.0.0 - Improper Signature Verification

CVSS 7.5

CVE-2025-40934 CRITICAL

XML-Sig 0.27-0.67 - Improper Verification of Cryptographic Signature via Omitted Signature

CVSS 9.3

CVE-2025-34324 HIGH

GoSign Desktop < 2.4.1 - Arbitrary Code Execution via Unsigned Update Manifest

CVSS 7.8

CVE-2025-64740 HIGH

Zoom Workplace VDI Client < 6.3.14 Privilege Escalation via Signature Bypass

CVSS 7.5

CVE-2025-64186 HIGH

evervault-go < 1.3.2 - Improper Verification of Cryptographic Signature in Attestation Logic

CVSS 8.7

CVE-2025-64456 HIGH

JetBrains ReSharper < 2025.2.4 - Local Privilege Escalation via Missing DPA Collector Signature Verification

CVSS 8.4

CVE-2025-55278 HIGH

HCL DevOps Loop >=1.0.2 <1.0.2 - Improper Verification of Cryptographic Signature in API Authentication Middleware

CVSS 8.1

CVE-2025-43468 MEDIUM

macOS < 14.8.2, < 15.7.2, < 26.1 - Unprotected User Data Exposure via Cryptographic Signature Verification Downgrade

CVSS 5.5

CVE-2025-43390 MEDIUM

macOS <15.7.2-26.1 - Info Disclosure

CVSS 5.5

CVE-2025-54549 MEDIUM

Cryptographic validation bypass - Info Disclosure

CVSS 5.9

CVE-2025-58356 HIGH

Constellation - Cryptographic Vulnerability

CVE-2025-12295 MEDIUM

D-Link DAP-2695 2.00RC13 - Insufficient Verification of Data Authenticity in Firmware Update Handler

CVSS 6.6

CVE-2025-34503 HIGH

Deck Mate 1 - Unauthenticated Arbitrary Code Execution via EEPROM Firmware Replacement

CVE-2025-34500 HIGH

Deck Mate 2 < all known versions prior to 2025-10-23 - Arbitrary Code Execution via Insecure Firmware Update Chain

CVE-2025-55039 MEDIUM

Apache Spark <4.0.0-3.5.2-3.4.4 - Info Disclosure

CVSS 6.5

CVE-2025-59288 MEDIUM

Playwright < 1.55.1 - Improper Verification of Cryptographic Signature

CVSS 5.3

CVE-2025-46774 HIGH

FortiClient MacOS <7.4.2, <7.2.9, All - Privilege Escalation

CVSS 7.5