Skip to content
BackEsc
Sign in

CWE-354 · weakness in Cryptography

Improper Validation of Integrity Check Value

197 CVEs

Out of date: the sync last ran 3 hours ago. Newer CVEs and scores may be missing from the map.

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

check available
1
likely to be exploited
1

Every one of the 197 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. OpenSSH Terrapin Attack - DetectionCVE-2023-48795Putty · CVSS 5.9 · 94% likely
  2. A tampering vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to successfully bypass the NTLM MIC (Message Integrity Check) protection, aka 'Wind…CVE-2019-1166Microsoft · 68% likely

    Microsoft

  3. An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The Wi-Fi implementation does not verify the Message Integrity Check (authenticity) of fragmented T…CVE-2020-261413.1% likely
  4. FRRouting FRR 7.5.1 through 9.0 and Pica8 PICOS 4.3.3.2 allow a remote attacker to cause a denial of service via a crafted BGP update with a corrupted attribute 23 (Tunnel Encapsu…CVE-2023-38802Frrouting · 2.4% likely

    FRRouting

  5. In Wireshark 3.2.0 to 3.2.6, 3.0.0 to 3.0.13, and 2.6.0 to 2.6.20, the TCP dissector could crash. This was addressed in epan/dissectors/packet-tcp.c by changing the handling of th…CVE-2020-258622.4% likely
  6. An issue was discovered in Zoho ManageEngine AssetExplorer 6.5. During an upgrade of the Windows agent, it does not validate the source and binary downloaded. This allows an attac…CVE-2020-88381.6% likely
  7. Windows File Signature Security Feature Bypass VulnerabilityCVE-2019-1163Microsoft · CVSS 5.5 · 1.5% likely

    Microsoft

  8. Containers/image: digest type does not guarantee valid typeCVE-2024-3727Red Hat · CVSS 8.3 · 1.3% likely

    Red Hat

  9. An issue was discovered on D-Link DSR-250 3.17 devices. Insufficient validation of configuration file checksums could allow a remote, authenticated attacker to inject arbitrary cr…CVE-2020-257581.3% likely
  10. A flaw was found in the Linux SCTP stack. A blind attacker may be able to kill an existing SCTP association through invalid chunks if the attacker knows the IP-addresses and port…CVE-2021-3772kernel · 1.2% likely
  11. An issue was discovered in the NAB Transact extension 2.1.0 for the WooCommerce plugin for WordPress. An online payment system bypass allows orders to be marked as fully paid by a…CVE-2020-114971.2% likely
  12. Open Shortest Path First (OSPF) protocol implementations may improperly determine LSA recency in affected Quagga and downstream implementations (SUSE, openSUSE, and Red Hat packag…CVE-2017-3224Open Shortest Path First (OSPF) · 1.1% likely
  13. CMS AuthEnvelopedData Processing May Accept Forged MessagesCVE-2026-34182OpenSSL · CVSS 9.1 · 1.1% likely

    OpenSSL

  14. rsync 3.1.3-development before 2017-10-24 mishandles archaic checksums, which makes it easier for remote attackers to bypass intended access restrictions. NOTE: the rsync developm…CVE-2017-159941.0% likely
  15. Moodle before 2.2.2 has an external enrolment plugin context check issue where capability checks are not thoroughCVE-2012-1170Moodle · 0.9% likely

    Moodle

  16. One Identity Cloud Access Manager before 8.1.4 Hotfix 1 allows OTP bypass via vectors involving a man in the middle, the One Identity Defender product, and replacing a failed SAML…CVE-2019-134960.9% likely
  17. Insufficient checks in the finite state machine of the ShapeShift KeepKey hardware wallet before firmware 6.2.2 allow a partial reset of cryptographic secrets to known values via…CVE-2019-186720.8% likely
  18. The Lenovo Service Framework Android application uses a set of nonsecure credentials when performing integrity verification of downloaded applications and/or data. This exposes th…CVE-2017-3760Lenovo Group Ltd. · 0.8% likely

    Lenovo

  19. tlslite-ng version 0.7.3 and earlier, since commit d7b288316bca7bcdd082e6ccff5491e241305233 contains a CWE-354: Improper Validation of Integrity Check Value vulnerability in TLS i…CVE-2018-10001590.8% likely
  20. Prior to 0.11.0-beta, LND (Lightning Network Daemon) had a vulnerability in its invoice database. While claiming on-chain a received HTLC output, it didn't verify that the corresp…CVE-2020-268960.7% likely
  21. It was found in Moodle before version 3.10.1, 3.9.4 and 3.8.7 that a insufficient capability checks in some grade related web services meant students were able to view other stude…CVE-2021-20184moodle · 0.7% likely
  22. Prior to 0.10.0-beta, LND (Lightning Network Daemon) would have accepted a counterparty high-S signature and broadcast tx-relay invalid local commitment/HTLC transactions. This ca…CVE-2020-268950.7% likely
  23. In JetBrains TeamCity before 2020.2.3, insufficient checks of the redirect_uri were made during GitHub SSO token exchange.CVE-2021-319130.7% likely
  24. Improper validation of integrity check value vulnerability in NEC Aterm WF1200CR firmware Ver1.3.2 and earlier, Aterm WG1200CR firmware Ver1.3.3 and earlier, and Aterm WG2600HS fi…CVE-2021-20709NEC Corporation · 0.7% likely

    NEC Corporation

  25. Remote Code Execution in all versions of various RAD-ISM-900-EN-* devices by PHOENIX CONTACTCVE-2022-29898PHOENIX CONTACT · CVSS 9.1 · 0.7% likely

    Phoenix Contact

  26. A vulnerability has been identified in SCALANCE XM408-4C (All versions < V6.5), SCALANCE XM408-4C (L3 int.) (All versions < V6.5), SCALANCE XM408-8C (All versions < V6.5), SCALANC…CVE-2021-37182Siemens · 0.6% likely

    Siemens

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

CyberSIXTSignal over noise
Updated AboutDevelopersSign in