CWE-353: CWE-353

This vulnerability in handysoft Co., Ltd groupware ActiveX module allows attackers to download and execute arbitrary files on affected systems. It aff...

This vulnerability allows attackers to tamper with certified PDF documents without invalidating their certification. Attackers can manipulate data in ...

Dell BIOS contains a missing integrity check vulnerability that allows attackers with physical access to bypass security mechanisms and execute arbitr...

The Download Manager WordPress plugin has an authentication bypass vulnerability that allows unauthenticated attackers to reset passwords for non-admi...

CVE-2021-26610 is a remote code execution vulnerability in godomall5's file upload function that lacks proper file extension and authority validation....

CVE-2025-10010 is a configuration file integrity bypass vulnerability in CryptoPro Secure Disk (CPSD) that allows attackers with physical access to mo...

The goTenna Pro App uses AES-CTR encryption without integrity checking, allowing attackers who can access encrypted messages to modify their content w...

CVE-2024-43108 is a cryptographic vulnerability in the goTenna Pro ATAK Plugin where encrypted messages lack integrity checking, allowing attackers to...