Vulnerabilities > Improper Verification of Cryptographic Signature

DATE CVE VULNERABILITY TITLE RISK
2018-01-04 CVE-2018-0114 Improper Verification of Cryptographic Signature vulnerability in Cisco Node-Jose
A vulnerability in the Cisco node-jose open source library before 0.11.0 could allow an unauthenticated, remote attacker to re-sign tokens using a key that is embedded within the token.
network
low complexity
cisco CWE-347
7.5
2017-12-27 CVE-2017-17848 Improper Verification of Cryptographic Signature vulnerability in multiple products
An issue was discovered in Enigmail before 1.9.9.
network
low complexity
enigmail debian CWE-347
7.5
2017-12-27 CVE-2017-17847 Improper Verification of Cryptographic Signature vulnerability in multiple products
An issue was discovered in Enigmail before 1.9.9.
network
low complexity
enigmail debian CWE-347
7.5
2017-11-30 CVE-2017-12333 Improper Verification of Cryptographic Signature vulnerability in Cisco Nx-Os and Unified Computing System
A vulnerability in Cisco NX-OS System Software could allow an authenticated, local attacker to bypass signature verification when loading a software image.
local
low complexity
cisco CWE-347
6.7
2017-11-30 CVE-2017-12331 Improper Verification of Cryptographic Signature vulnerability in Cisco Nx-Os and Unified Computing System
A vulnerability in Cisco NX-OS System Software could allow an authenticated, local attacker to bypass signature verification when loading a software patch.
local
low complexity
cisco CWE-347
6.7
2017-11-22 CVE-2017-8190 Improper Verification of Cryptographic Signature vulnerability in Huawei Fusionsphere Openstack V100R006C00Spc102(Nfv)
FusionSphere OpenStack V100R006C00SPC102(NFV)has an improper verification of cryptographic signature vulnerability.
local
low complexity
huawei CWE-347
6.7
2017-11-22 CVE-2017-8177 Improper Verification of Cryptographic Signature vulnerability in Huawei Hiwallet
Huawei APP HiWallet earlier than 5.0.3.100 versions do not support signature verification for APK file.
network
low complexity
huawei CWE-347
5.3
2017-11-20 CVE-2017-11400 Improper Verification of Cryptographic Signature vulnerability in Belden Tofino Xenon Security Appliance Firmware 3.1.0
An issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before 03.2.00.
low complexity
belden CWE-347
6.8
2017-11-16 CVE-2017-16853 Improper Verification of Cryptographic Signature vulnerability in multiple products
The DynamicMetadataProvider class in saml/saml2/metadata/impl/DynamicMetadataProvider.cpp in OpenSAML-C in OpenSAML before 2.6.1 fails to properly configure itself with the MetadataFilter plugins and does not perform critical security checks such as signature verification, enforcement of validity periods, and other checks specific to deployments, aka CPPOST-105.
network
high complexity
shibboleth debian CWE-347
8.1
2017-11-16 CVE-2017-16852 Improper Verification of Cryptographic Signature vulnerability in multiple products
shibsp/metadata/DynamicMetadataProvider.cpp in the Dynamic MetadataProvider plugin in Shibboleth Service Provider before 2.6.1 fails to properly configure itself with the MetadataFilter plugins and does not perform critical security checks such as signature verification, enforcement of validity periods, and other checks specific to deployments, aka SSPCPP-763.
network
high complexity
shibboleth debian CWE-347
8.1