CWE-354

Medium likelihood

Improper Validation of Integrity Check Value

Parent: CWE-345 - Insufficient Verification of Data Authenticity

The product does not validate or incorrectly validates the integrity check values or "checksums" of a message. This may prevent it from detecting if the data has been modified or corrupted in transmission.

157 vulnerabilities with CWE-354

CVE-2017-3760 HIGH

Lenovo Service Framework - RCE

CVSS 8.1

CVE-2017-12973 LOW

Nimbus JOSE+JWT <4.39 - Info Disclosure

CVSS 3.1

CVE-2017-9498 MEDIUM

Motorola MX011ANM/XR11-20 - Local Privilege Escalation

CVSS 5.5

CVE-2017-9606 HIGH

Infotecs ViPNet Client and Coordinator <4.3.2-42442 - Privilege Escalation via Trojan Update

CVSS 7.3

CVE-2017-4961 HIGH

Cloud Foundry Foundation BOSH Release <261.3 - Privilege Escalation

CVSS 8.8

CVE-2016-15028 MEDIUM

ICEPAY REST-API-NET <1.0 - Improper Validation

CVSS 4.8

CVE-2012-1170 HIGH

Moodle <2.2.2 - Privilege Escalation

CVSS 7.5

Details

Vulnerabilities 157

Exploit Likelihood Medium

Links