CWE-354 · Cryptography
Improper Validation of Integrity Check Value
197CVEs
0exploited
1with a public check
1likely (EPSS 10%+)
SortMost likely exploited
197 CVEs with CWE-354 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2023-48795CheckOpenSSH Terrapin Attack - DetectionPutty · Putty · CVSS 5.9 · 2023-12-18 | 5.9 | 94% | 2023-12-18 |
| CVE-2019-1166A tampering vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to successfully bypass the NTLM MIC (Message Integrity Check) protection, aka 'Wind…Microsoft · Windows · 2019-10-10 | – | 68% | 2019-10-10 |
| CVE-2020-26141An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The Wi-Fi implementation does not verify the Message Integrity Check (authenticity) of fragmented T…Alfa · Awus036h Firmware · 2021-05-11 | – | 3.1% | 2021-05-11 |
| CVE-2023-38802FRRouting FRR 7.5.1 through 9.0 and Pica8 PICOS 4.3.3.2 allow a remote attacker to cause a denial of service via a crafted BGP update with a corrupted attribute 23 (Tunnel Encapsu…Frrouting · Frrouting · 2023-08-29 | – | 2.4% | 2023-08-29 |
| CVE-2020-25862In Wireshark 3.2.0 to 3.2.6, 3.0.0 to 3.0.13, and 2.6.0 to 2.6.20, the TCP dissector could crash. This was addressed in epan/dissectors/packet-tcp.c by changing the handling of th…Wireshark · Wireshark · 2020-10-06 | – | 2.4% | 2020-10-06 |
| CVE-2020-8838An issue was discovered in Zoho ManageEngine AssetExplorer 6.5. During an upgrade of the Windows agent, it does not validate the source and binary downloaded. This allows an attac…Zohocorp · Manageengine Assetexplorer · 2020-03-23 | – | 1.6% | 2020-03-23 |
| CVE-2019-1163Windows File Signature Security Feature Bypass VulnerabilityMicrosoft · Windows 10 Version 1703 · CVSS 5.5 · 2019-08-14 | 5.5 | 1.5% | 2019-08-14 |
| CVE-2024-3727Containers/image: digest type does not guarantee valid typeRedhat · image · CVSS 8.3 · 2024-05-09 | 8.3 | 1.3% | 2024-05-09 |
| CVE-2020-25758An issue was discovered on D-Link DSR-250 3.17 devices. Insufficient validation of configuration file checksums could allow a remote, authenticated attacker to inject arbitrary cr…Dlink · Dsr-150 Firmware · 2020-12-15 | – | 1.3% | 2020-12-15 |
| CVE-2021-3772A flaw was found in the Linux SCTP stack. A blind attacker may be able to kill an existing SCTP association through invalid chunks if the attacker knows the IP-addresses and port…Linux · kernel · 2022-03-02 | – | 1.2% | 2022-03-02 |
| CVE-2020-11497An issue was discovered in the NAB Transact extension 2.1.0 for the WooCommerce plugin for WordPress. An online payment system bypass allows orders to be marked as fully paid by a…Woocommerce · Nab Transact · 2020-08-26 | – | 1.2% | 2020-08-26 |
| CVE-2017-3224Open Shortest Path First (OSPF) protocol implementations may improperly determine LSA recency in affected Quagga and downstream implementations (SUSE, openSUSE, and Red Hat packag…Open Shortest Path First (OSPF) · Protocol · 2018-07-24 | – | 1.1% | 2018-07-24 |
| CVE-2026-34182CMS AuthEnvelopedData Processing May Accept Forged MessagesOpenSSL · OpenSSL · CVSS 9.1 · 2026-06-09 | 9.1 | 1.1% | 2026-06-09 |
| CVE-2017-15994rsync 3.1.3-development before 2017-10-24 mishandles archaic checksums, which makes it easier for remote attackers to bypass intended access restrictions. NOTE: the rsync developm…Samba · Rsync · 2017-10-29 | – | 1.0% | 2017-10-29 |
| CVE-2012-1170Moodle before 2.2.2 has an external enrolment plugin context check issue where capability checks are not thoroughMoodle · Moodle · 2019-11-14 | – | 0.9% | 2019-11-14 |
| CVE-2019-13496One Identity Cloud Access Manager before 8.1.4 Hotfix 1 allows OTP bypass via vectors involving a man in the middle, the One Identity Defender product, and replacing a failed SAML…Oneidentity · Cloud Access Manager · 2019-11-04 | – | 0.9% | 2019-11-04 |
| CVE-2019-18672Insufficient checks in the finite state machine of the ShapeShift KeepKey hardware wallet before firmware 6.2.2 allow a partial reset of cryptographic secrets to known values via…Shapeshift · Keepkey Firmware · 2019-12-06 | – | 0.8% | 2019-12-06 |
| CVE-2017-3760The Lenovo Service Framework Android application uses a set of nonsecure credentials when performing integrity verification of downloaded applications and/or data. This exposes th…Lenovo Group Ltd. · Service Framework application · 2017-10-17 | – | 0.8% | 2017-10-17 |
| CVE-2018-1000159tlslite-ng version 0.7.3 and earlier, since commit d7b288316bca7bcdd082e6ccff5491e241305233 contains a CWE-354: Improper Validation of Integrity Check Value vulnerability in TLS i…Tlslite-Ng Project · Tlslite-Ng · 2018-04-18 | – | 0.8% | 2018-04-18 |
| CVE-2020-26896Prior to 0.11.0-beta, LND (Lightning Network Daemon) had a vulnerability in its invoice database. While claiming on-chain a received HTLC output, it didn't verify that the corresp…Lightning Network Daemon Project · Lightning Network Daemon · 2020-10-21 | – | 0.7% | 2020-10-21 |
| CVE-2021-20184It was found in Moodle before version 3.10.1, 3.9.4 and 3.8.7 that a insufficient capability checks in some grade related web services meant students were able to view other stude…Moodle · moodle · 2021-01-28 | – | 0.7% | 2021-01-28 |
| CVE-2020-26895Prior to 0.10.0-beta, LND (Lightning Network Daemon) would have accepted a counterparty high-S signature and broadcast tx-relay invalid local commitment/HTLC transactions. This ca…Lightning Network Daemon Project · Lightning Network Daemon · 2020-10-21 | – | 0.7% | 2020-10-21 |
| CVE-2021-31913In JetBrains TeamCity before 2020.2.3, insufficient checks of the redirect_uri were made during GitHub SSO token exchange.Jetbrains · Teamcity · 2021-05-11 | – | 0.7% | 2021-05-11 |
| CVE-2021-20709Improper validation of integrity check value vulnerability in NEC Aterm WF1200CR firmware Ver1.3.2 and earlier, Aterm WG1200CR firmware Ver1.3.3 and earlier, and Aterm WG2600HS fi…NEC Corporation · NEC Aterm devices · 2021-04-26 | – | 0.7% | 2021-04-26 |
| CVE-2022-29898Remote Code Execution in all versions of various RAD-ISM-900-EN-* devices by PHOENIX CONTACTPHOENIX CONTACT · RAD-ISM-900-EN-BD/B · CVSS 9.1 · 2022-05-11 | 9.1 | 0.7% | 2022-05-11 |
| CVE-2021-37182A vulnerability has been identified in SCALANCE XM408-4C (All versions < V6.5), SCALANCE XM408-4C (L3 int.) (All versions < V6.5), SCALANCE XM408-8C (All versions < V6.5), SCALANC…Siemens · SCALANCE XM408-4C · 2022-06-14 | – | 0.6% | 2022-06-14 |
| CVE-2017-12973Nimbus JOSE+JWT before 4.39 proceeds improperly after detection of an invalid HMAC in authenticated AES-CBC decryption, which allows attackers to conduct a padding oracle attack.Connect2id · Nimbus Jose+jwt · 2017-08-20 | – | 0.6% | 2017-08-20 |
| CVE-2020-13847Sylabs Singularity 3.0 through 3.5 lacks support for an Integrity Check. Singularity's sign and verify commands do not sign metadata found in the global header or data object desc…Sylabs · Singularity · 2020-07-14 | – | 0.6% | 2020-07-14 |
| CVE-2023-2975AES-SIV implementation ignores empty associated data entriesOpenSSL · OpenSSL · CVSS 5.3 · 2023-07-14 | 5.3 | 0.6% | 2023-07-14 |
| CVE-2024-41909Apache MINA SSHD: integrity check bypassApache Software Foundation · Apache MINA SSHD · CVSS 5.9 · 2024-08-12 | 5.9 | 0.6% | 2024-08-12 |
| CVE-2019-12097Telerik Fiddler v5.0.20182.28034 doesn't verify the hash of EnableLoopback.exe before running it, which could lead to code execution or local privilege escalation by replacing the…Progress · Fiddler · 2019-06-03 | – | 0.6% | 2019-06-03 |
| CVE-2021-41067An issue was discovered in Listary through 6. Improper implementation of the update process leads to the download of software updates with a /check-update HTTP-based connection. T…Listary · Listary · 2021-12-14 | – | 0.6% | 2021-12-14 |
| CVE-2022-29173No protection against rollback attacks in go-tuftheupdateframework · go-tuf · CVSS 8 · 2022-05-05 | 8.0 | 0.6% | 2022-05-05 |
| CVE-2022-21757In WIFI Firmware, there is a possible system crash due to a missing count check. This could lead to remote denial of service with no additional execution privileges needed. User i…MediaTek, Inc. · MT6833, MT6853, MT6877, MT6885, MT6889, MT6983, MT6985, MT8167S, MT8168, MT8175… · 2022-06-06 | – | 0.6% | 2022-06-06 |
| CVE-2024-49875nfsd: map the EBADMSG to nfserr_io to avoid warningLinux · Linux · CVSS 7.5 · 2024-10-21 | 7.5 | 0.5% | 2024-10-21 |
| CVE-2022-36174FreshService Windows Agent < 2.11.0 and FreshService macOS Agent < 4.2.0 and FreshService Linux Agent < 3.3.0. are vulnerable to Broken integrity checking via the FreshAgent clien…Freshworks · Freshservice Agent · 2022-09-12 | – | 0.5% | 2022-09-12 |
| CVE-2023-33668DigiExam up to v14.0.2 lacks integrity checks for native modules, allowing attackers to access PII and takeover accounts on shared computers.Digiexam · Digiexam · 2023-07-12 | – | 0.5% | 2023-07-12 |
| CVE-2026-8597Missing integrity verification in Triton inference handler in Amazon SageMaker Python SDKAWS · Amazon SageMaker Python SDK · CVSS 7.2 · 2026-05-14 | 7.2 | 0.5% | 2026-05-14 |
| CVE-2019-10155The Libreswan Project has found a vulnerability in the processing of IKEv1 informational exchange packets which are encrypted and integrity protected using the established IKE SA…the libreswan Project · libreswan · CVSS 3.1 · 2019-06-12 | 3.1 | 0.5% | 2019-06-12 |
| CVE-2022-46402The Microchip RN4870 module firmware 1.43 (and the Microchip PIC LightBlue Explorer Demo 4.2 DT100112) accepts PairCon_rmSend with incorrect values.Microchip · Bm78 Firmware · CVSS 6.5 · 2022-12-19 | 6.5 | 0.5% | 2022-12-19 |
| CVE-2022-45142The fix for CVE-2022-3437 included changing memcmp to be constant time and a workaround for a compiler bug by adding "!= 0" comparisons to the result of memcmp. When these patches…Heimdal Project · Samba · CVSS 7.5 · 2023-03-06 | 7.5 | 0.5% | 2023-03-06 |
| CVE-2025-7096Comodo Internet Security Premium Manifest File cis_update_x64.xml integrity checkComodo · Internet Security Premium · CVSS 8.1 · 2025-07-06 | 8.1 | 0.5% | 2025-07-06 |
| CVE-2017-4961An issue was discovered in Cloud Foundry Foundation BOSH Release 261.x versions prior to 261.3 and all 260.x versions. In certain cases an authenticated Director user can provide…Cloud Foundry · Cloud Foundry Foundation BOSH Release · 2017-06-13 | – | 0.5% | 2017-06-13 |
| CVE-2024-52550Jenkins Pipeline: Groovy Plugin 3990.vd281dd77a_388 and earlier, except 3975.3977.v478dd9e956c3 does not check whether the main (Jenkinsfile) script for a rebuilt build is approve…Jenkins Project · Jenkins Pipeline: Groovy Plugin · CVSS 8 · 2024-11-13 | 8.0 | 0.5% | 2024-11-13 |
| CVE-2022-35961ECDSA signature malleability in OpenZeppelin ContractsOpenZeppelin · openzeppelin-contracts · CVSS 7.9 · 2022-08-14 | 7.9 | 0.5% | 2022-08-14 |
| CVE-2022-22781Update package downgrade in Zoom Client for Meetings for MacOSZoom Video Communications Inc · Zoom Client for Meetings for MacOS (Standard and for IT Admin) · CVSS 7.5 · 2022-04-28 | 7.5 | 0.4% | 2022-04-28 |
| CVE-2023-28386Snap One OvrC Pro devices versions 7.2 and prior do not validate firmware updates correctly. The device only calculates the MD5 hash of the firmware and does not check using a pri…Snap One · OvrC Cloud · CVSS 8.6 · 2023-05-22 | 8.6 | 0.4% | 2023-05-22 |
| CVE-2020-14120Some Xiaomi models have a vulnerability in a certain application. The vulnerability is caused by the lack of checksum when using a three-party application to pass in parameters, a…Mi · MIUI · 2022-04-21 | – | 0.4% | 2022-04-21 |
| CVE-2022-25946On all versions of 16.1.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x, and 11.6.x of F5 BIG-IP Advanced WAF, ASM, and ASM, and F5 BIG-IP Guided Configuration (GC) all versions prior to 9.0, w…F5 · BIG-IP (Advanced WAF, APM, ASM) · CVSS 8.7 · 2022-05-05 | 8.7 | 0.4% | 2022-05-05 |
| CVE-2024-48930secp256k1-node vulnerable to private key extraction over ECDHcryptocoinjs · secp256k1-node · CVSS 8.7 · 2024-10-21 | 8.7 | 0.4% | 2024-10-21 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.