CWE-347 · weakness in Cryptography
Improper Verification of Cryptographic Signature
912 CVEs · 7 exploited
Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.
- exploited in the wild
- 7
- check available
- 4
- likely to be exploited
- 12
Every one of the 912 is a mark on the map. Named now: 1 to 26, most at risk first.
- SimpleHelp <=5.5.15 - OIDC JWT Authentication Bypass
- A improper verification of cryptographic signature vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0…
- WinVerifyTrust Signature Validation Vulnerability
- Windows Spoofing Vulnerability
- Authentication Bypass via JWT Algorithm Mismatch in Multiple WSO2 Products Allows Account Takeover
- In IGEL OS before 11, Secure Boot can be bypassed because the igel-flash-driver module improperly verifies a cryptographic signature. Ultimately, a crafted root filesystem can be…
- PAN-OS: Authentication Bypass in SAML Authentication
- exacqVision Web Service - Remote Code Execution
- MinIO - Incomplete Signature Validation for Unsigned-Trailer Uploads
- Keycloak - SAML Core Package Signature Validation Flaw
- DataEase v2.10.2 - JWT Signature Verification Bypass
- Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlie…
- Ruby SAML vulnerable to SAML authentication bypass due to namespace handling (parser differential)
- Authentication with JWT allows use of “none”-algorithm
- A vulnerability in the Cisco node-jose open source library before 0.11.0 could allow an unauthenticated, remote attacker to re-sign tokens using a key that is embedded within the…
- An improper verification of cryptographic signature vulnerability in Fortinet FortiWeb 8.0.0, FortiWeb 7.6.0 through 7.6.4, FortiWeb 7.4.0 through 7.4.9 may allow an unauthenticat…
- An Improper Verification of Cryptographic Signature vulnerability was identified in GitHub Enterprise Server that allowed SAML SSO authentication to be bypassed when the encrypted…
- golang.org/x/crypto before v0.0.0-20200220183623-bac4c82f6975 for Go allows a panic during signature verification in the golang.org/x/crypto/ssh package. A client can attack an SS…
- ruby-saml vulnerable to SAML authentication bypass due to DOCTYPE handling (parser differential)
- whatsapp-api-js fails to validate message's signature
- The Ruby SAML library vulnerable to a SAML authentication bypass via Incorrect XPath selector
- ASP.NET Core Elevation of Privilege Vulnerability
- xml-crypto Vulnerable to XML Signature Verification Bypass via DigestValue Comment
- Formbricks missing JWT signature verification
- xml-crypto Vulnerable to XML Signature Verification Bypass via Multiple SignedInfo References
- SSH user impersonation possible in Mikrotik RouterOS
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.