Vulnerabilities > Improper Verification of Cryptographic Signature

DATE CVE VULNERABILITY TITLE RISK
2023-08-09 CVE-2023-39969 Improper Verification of Cryptographic Signature vulnerability in Trailofbits Uthenticode
uthenticode is a small cross-platform library for partially verifying Authenticode digital signatures.
network
low complexity
trailofbits CWE-347
critical
9.8
2023-08-02 CVE-2023-38418 Improper Verification of Cryptographic Signature vulnerability in F5 Big-Ip Access Policy Manager
The BIG-IP Edge Client Installer on macOS does not follow best practices for elevating privileges during the installation process.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
local
low complexity
f5 CWE-347
7.8
2023-07-13 CVE-2023-33768 Improper Verification of Cryptographic Signature vulnerability in Belkin Wemo Smart Plug Wsp080 Firmware 1.2
Incorrect signature verification of the firmware during the Device Firmware Update process of Belkin Wemo Smart Plug WSP080 v1.2 allows attackers to cause a Denial of Service (DoS) via a crafted firmware file.
network
low complexity
belkin CWE-347
6.5
2023-06-22 CVE-2023-32449 Improper Verification of Cryptographic Signature vulnerability in Dell Powerstoret OS
Dell PowerStore versions prior to 3.5 contain an improper verification of cryptographic signature vulnerability.
local
low complexity
dell CWE-347
7.8
2023-06-13 CVE-2023-28602 Improper Verification of Cryptographic Signature vulnerability in Zoom
Zoom for Windows clients prior to 5.13.5 contain an improper verification of cryptographic signature vulnerability.
network
low complexity
zoom CWE-347
7.7
2023-06-06 CVE-2023-33959 Improper Verification of Cryptographic Signature vulnerability in Notaryproject Notation-Go
notation is a CLI tool to sign and verify OCI artifacts and container images.
network
low complexity
notaryproject CWE-347
8.8
2023-05-30 CVE-2023-34205 Improper Verification of Cryptographic Signature vulnerability in Moov Signedxml 1.0.0
In Moov signedxml through 1.0.0, parsing the raw XML (as received) can result in different output than parsing the canonicalized XML.
network
low complexity
moov CWE-347
critical
9.1
2023-05-26 CVE-2023-33185 Improper Verification of Cryptographic Signature vulnerability in Django-Ses Project Django-Ses
Django-SES is a drop-in mail backend for Django.
network
low complexity
django-ses-project CWE-347
5.4
2023-05-18 CVE-2022-4418 Improper Verification of Cryptographic Signature vulnerability in Acronis Cyber Protect Home Office
Local privilege escalation due to unrestricted loading of unsigned libraries.
local
low complexity
acronis CWE-347
7.8
2023-05-04 CVE-2023-25934 Improper Verification of Cryptographic Signature vulnerability in Dell Elastic Cloud Storage 3.0
DELL ECS prior to 3.8.0.2 contains an improper verification of cryptographic signature vulnerability.
network
low complexity
dell CWE-347
7.5