Vulnerabilities > Improper Verification of Cryptographic Signature

DATE CVE VULNERABILITY TITLE RISK
2020-06-03 CVE-2020-3209 Improper Verification of Cryptographic Signature vulnerability in Cisco IOS XE
A vulnerability in software image verification in Cisco IOS XE Software could allow an unauthenticated, physical attacker to install and boot a malicious software image or execute unsigned binaries on an affected device.
low complexity
cisco CWE-347
6.8
2020-06-02 CVE-2020-12607 Improper Verification of Cryptographic Signature vulnerability in Fastecdsa Project Fastecdsa
An issue was discovered in fastecdsa before 2.1.2.
network
low complexity
fastecdsa-project CWE-347
7.5
2020-05-22 CVE-2020-13415 Improper Verification of Cryptographic Signature vulnerability in Aviatrix Controller
An issue was discovered in Aviatrix Controller through 5.1.
network
low complexity
aviatrix CWE-347
7.5
2020-05-20 CVE-2020-9753 Improper Verification of Cryptographic Signature vulnerability in Naver Whale Browser Installer
Whale Browser Installer before 1.2.0.5 versions don't support signature verification for Flash installer.
network
low complexity
naver CWE-347
critical
9.1
2020-05-19 CVE-2020-12244 Improper Verification of Cryptographic Signature vulnerability in multiple products
An issue has been found in PowerDNS Recursor 4.1.0 through 4.3.0 where records in the answer section of a NXDOMAIN response lacking an SOA were not properly validated in SyncRes::processAnswer, allowing an attacker to bypass DNSSEC validation.
network
low complexity
powerdns fedoraproject debian opensuse CWE-347
7.5
2020-05-14 CVE-2020-12046 Improper Verification of Cryptographic Signature vulnerability in Opto22 Softpac Project 9.6
Opto 22 SoftPAC Project Version 9.6 and prior.
network
low complexity
opto22 CWE-347
5.7
2020-05-14 CVE-2020-12042 Improper Verification of Cryptographic Signature vulnerability in Opto22 Softpac Project 9.6
Opto 22 SoftPAC Project Version 9.6 and prior.
network
low complexity
opto22 CWE-347
6.5
2020-05-13 CVE-2020-5407 Improper Verification of Cryptographic Signature vulnerability in Pivotal Software Spring Security
Spring Security versions 5.2.x prior to 5.2.4 and 5.3.x prior to 5.3.2 contain a signature wrapping vulnerability during SAML response validation.
network
low complexity
pivotal-software CWE-347
8.8
2020-05-06 CVE-2020-3308 Improper Verification of Cryptographic Signature vulnerability in Cisco products
A vulnerability in the Image Signature Verification feature of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote attacker with administrator-level credentials to install a malicious software patch on an affected device.
network
low complexity
cisco CWE-347
4.9
2020-04-16 CVE-2019-10575 Improper Verification of Cryptographic Signature vulnerability in Qualcomm Sda845 Firmware, Sdm845 Firmware and Sdm850 Firmware
Wlan binary which is not signed with OEMs RoT is working on secure device without authentication failure in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in SDA845, SDM845, SDM850
local
low complexity
qualcomm CWE-347
7.8