Skip to content
OpenAdvisories

Weakness (CWE)

CWE-347: Improper Verification of Cryptographic Signature

Base Draft

The product does not verify, or incorrectly verifies, the cryptographic signature for data.

Source: MITRE CWE-347

All Critical High Medium Low Exploited only Public exploit

44 results · Clear filters · Feed

  • Low 3.3
    CVE-2024-21383

    Microsoft Edge (Chromium-based) Spoofing Vulnerability

    Microsoft Edge (Chromium-based) Spoofing Vulnerability

    Microsoft Microsoft Edge (Chromium-based) Browsers
  • Low 3.5
    CVE-2023-2030

    Improper Verification of Cryptographic Signature in GitLab

    An issue has been discovered in GitLab CE/EE affecting all versions from 12.2 prior to 16.5.6, 16.6 prior to 16.6.4, and 16.7 prior to 16.7.2 in which an attacker could potentially modify the metadata of signed commits.

    GitLab GitLab gitlab Web / CMS Ubuntu
  • Low 2.8
    CVE-2023-28602

    Zoom for Windows clients prior to 5.13.5 contain an improper verification of cryptographic signature vulnerability. A m…

    Zoom Video Communications Zoom for Windows Client Windows
  • Low 2.8
    CVE-2020-24439

    Acrobat Reader DC for macOS Signature Validation Bypass

    Acrobat Reader DC for macOS versions 2020.012.20048 (and earlier), 2020.001.30005 (and earlier) and 2017.011.30175 (and earlier) are affected by a security feature bypass. While the practical security impact is minimal, a defense-in-depth fix has been impleme…

    Adobe Acrobat Reader