Vulnerabilities > Improper Verification of Cryptographic Signature

DATE CVE VULNERABILITY TITLE RISK
2025-04-16 CVE-2025-20178 A vulnerability in the web-based management interface of Cisco Secure Network Analytics could allow an authenticated, remote attacker with valid administrative credentials to execute arbitrary commands as root on the underlying operating system. This vulnerability is due to insufficient integrity checks within device backup files.
local
low complexity
CWE-347
6.0
6.0
2025-03-12 CVE-2025-20143 A vulnerability in the boot process of Cisco IOS XR Software could allow an authenticated, local attacker with high privileges to bypass the Secure Boot functionality and load unverified software on an affected device.
local
low complexity
CWE-347
6.7
6.7
2025-03-11 CVE-2025-24043 Improper verification of cryptographic signature in .NET allows an authorized attacker to execute code over a network.
network
high complexity
CWE-347
7.5
7.5
2025-03-05 CVE-2025-20206 A vulnerability in the interprocess communication (IPC) channel of Cisco Secure Client for Windows could allow an authenticated, local attacker to perform a DLL hijacking attack on an affected device if the Secure Firewall Posture Engine, formerly HostScan, is installed on Cisco Secure Client. This vulnerability is due to insufficient validation of resources that are loaded by the application at run time.
local
low complexity
CWE-347
7.1
7.1
2025-01-14 CVE-2024-7344 Improper Verification of Cryptographic Signature vulnerability in multiple products
Howyar UEFI Application "Reloader" (32-bit and 64-bit) is vulnerable to execution of unsigned software in a hardcoded path. 		8.2
8.2
2024-12-18 CVE-2024-39804 A library injection vulnerability exists in Microsoft PowerPoint 16.83 for macOS.
local
low complexity
CWE-347
7.1
7.1
2024-12-18 CVE-2024-41138 A library injection vulnerability exists in the com.microsoft.teams2.modulehost.app helper app of Microsoft Teams (work or school) 24046.2813.2770.1094 for macOS.
local
low complexity
CWE-347
7.1
7.1
2024-12-18 CVE-2024-41145 A library injection vulnerability exists in the WebView.app helper app of Microsoft Teams (work or school) 24046.2813.2770.1094 for macOS.
local
low complexity
CWE-347
7.1
7.1
2024-12-18 CVE-2024-41159 A library injection vulnerability exists in Microsoft OneNote 16.83 for macOS.
local
low complexity
CWE-347
7.1
7.1
2024-12-18 CVE-2024-41165 A library injection vulnerability exists in Microsoft Word 16.83 for macOS.
local
low complexity
CWE-347
7.1
7.1