Vulnerabilities > Improper Verification of Cryptographic Signature

DATE CVE VULNERABILITY TITLE RISK
2023-09-12 CVE-2023-40727 Improper Verification of Cryptographic Signature vulnerability in Siemens QMS Automotive 12.30
A vulnerability has been identified in QMS Automotive (All versions < V12.39).
local
low complexity
siemens CWE-347
7.8
2023-08-31 CVE-2023-41744 Improper Verification of Cryptographic Signature vulnerability in Acronis Agent and Cyber Protect
Local privilege escalation due to unrestricted loading of unsigned libraries.
local
low complexity
acronis CWE-347
7.8
2023-08-31 CVE-2023-28801 Improper Verification of Cryptographic Signature vulnerability in Zscaler Internet Access Admin Portal
An Improper Verification of Cryptographic Signature in the SAML authentication of the Zscaler Admin UI allows a Privilege Escalation.This issue affects Admin UI: from 6.2 before 6.2r.
network
low complexity
zscaler CWE-347
critical
9.8
2023-08-30 CVE-2023-36811 Improper Verification of Cryptographic Signature vulnerability in Borgbackup Borg
borgbackup is an opensource, deduplicating archiver with compression and authenticated encryption.
local
high complexity
borgbackup CWE-347
4.7
2023-08-29 CVE-2023-41037 Improper Verification of Cryptographic Signature vulnerability in Openpgpjs
OpenPGP.js is a JavaScript implementation of the OpenPGP protocol.
network
low complexity
openpgpjs CWE-347
4.3
2023-08-29 CVE-2023-23772 Improper Verification of Cryptographic Signature vulnerability in Motorola Mbts Site Controller Firmware R05.32.58
Motorola MBTS Site Controller fails to check firmware update authenticity.
network
low complexity
motorola CWE-347
8.8
2023-08-29 CVE-2023-23773 Improper Verification of Cryptographic Signature vulnerability in Motorola Ebts Base Radio Firmware and Mbts Base Radio Firmware
Motorola EBTS/MBTS Base Radio fails to check firmware authenticity.
network
low complexity
motorola CWE-347
8.8
2023-08-22 CVE-2021-43171 Improper Verification of Cryptographic Signature vulnerability in E.Foundation APP Lounge
Improper verification of applications' cryptographic signatures in the /e/OS app store client App Lounge before 0.19q allows attackers in control of the application server to install malicious applications on user's systems by altering the server's API response.
network
low complexity
e-foundation CWE-347
6.5
2023-08-13 CVE-2023-39392 Improper Verification of Cryptographic Signature vulnerability in Huawei Emui and Harmonyos
Vulnerability of insecure signatures in the OsuLogin module.
network
low complexity
huawei CWE-347
7.5
2023-08-13 CVE-2023-39393 Improper Verification of Cryptographic Signature vulnerability in Huawei Emui and Harmonyos
Vulnerability of insecure signatures in the ServiceWifiResources module.
network
low complexity
huawei CWE-347
7.5