CVE-2020-12607: Improper Verification of Cryptographic Signature

An issue was discovered in fastecdsa before 2.1.2. When using the NIST P-256 curve in the ECDSA implementation, the point at infinity is mishandled. This means that for an extreme value in k and s^-1, the signature verification fails even if the signature is correct. This behavior is not solely a...

PT-2020-13166 · Fastecdsa · Fastecdsa

Name of the Vulnerable Software and Affected Versions: fastecdsa versions prior to 2.1.2 Description: An issue was discovered in the ECDSA implementation when using the NIST P-256 curve. The point at infinity is mishandled, which means that for extreme values in k and s^-1, the signature...

CVE-2020-12749

An issue was discovered on Samsung mobile devices with P9.0 Exynos chipsets software. The S.LSI Wi-Fi drivers have a buffer overflow. The Samsung ID is SVE-2020-16906 May 2020...

CVE-2020-12749

CVE-2020-12749 refers to a buffer overflow in Samsung mobile devices’ S.LSI Wi‑Fi drivers on Exynos-based devices running P9.0. The root cause is an overflow in the Wi‑Fi driver stack (S.LSI). Impact, per CVSS data in the provided documents: local access required with potentially high impact on c...

CVE-2020-12749: Buffer Copy without Checking Size of Input

An issue was discovered on Samsung mobile devices with P9.0 Exynos chipsets software. The S.LSI Wi-Fi drivers have a buffer overflow. The Samsung ID is SVE-2020-16906 May 2020...

Dell EMC RSA Archer Operating System Command Injection Vulnerability

Dell EMC RSA Archer is an enterprise IT governance and compliance governance product from Dell USA. The product enables the development of eGRC programs for managing enterprise risk, automating business processes, and more. An operating system command injection vulnerability exists in versions...

p-pay.io Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1146675 Security Researcher geeknik Helped patch 8815 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting p-pay.io website and its...

PT-2020-2060

Name of the Vulnerable Software and Affected Versions OpenVPN versions 2.4.x through 2.4.8 Description An issue was discovered in OpenVPN where an attacker can inject a data channel v2 P DATA V2 packet using a victim's peer-id. Normally such packets are dropped, but if this packet arrives before...

CVE-2018-21042

An issue was discovered on Samsung mobile devices with N7.x, O8.x, and P9.0 software. Dual Messenger allows installation of an arbitrary APK with resultant privileged code execution. The Samsung ID is SVE-2018-13299 December 2018...

CVE-2018-21053

This CVE (CVE-2018-21053) affects Samsung mobile devices running N(7.x), O(8.x), and P(9.0) software. The issue is described as clipboard access in the lockscreen state via a physical keyboard (Samsung ID SVE-2018-12684). The connected Red Hat and other entries corroborate the same description. T...

CVE-2018-21040

CVE-2018-21040 affects Samsung mobile devices with Exynos 9810 (O(8.x)/P(9.0)). Root cause: race condition leading to a use-after-free in the g2d driver. Impact: high with CVSSv3.1 base score 8.1 (Network, Privileges None, UI None; Confidentiality/Integrity/Availability High). Exploitation status...

CVE-2020-11604

An issue was discovered on Samsung mobile devices with P9.0 and Q10.0 incorporating TEEGRIS software. There is an Out-of-bounds read in the MLDAP Trustlet. The Samsung ID is SVE-2019-16565 April 2020...

CVE-2020-11607

An issue was discovered on Samsung mobile devices with P9.0 and Q10.0 software. Notification exposure occurs in Lockdown mode because of the Edge Lighting application. The Samsung ID is SVE-2020-16680 April 2020...

Information disclosure

An issue was discovered on Samsung mobile devices with O8.x, P9.0, and Q10.0 software. There is sensitive information exposure from dumpstate in NFC logs. The Samsung ID is SVE-2019-16359 April 2020...

CVE-2020-11603

CVE-2020-11603 affects Samsung mobile devices running P(9.0) and Q(10.0) that include TEEGRIS. The issue is a type confusion in the MLDAP Trustlet, leading to arbitrary code execution. The vulnerability is identified by Samsung as SVE-2020-16599 (April 2020). Exploitation details, affected versio...

CVE-2020-11607

CVE-2020-11607 concerns Samsung mobile devices running P(9.0)/Q(10.0). The issue is a notification exposure in Lockdown mode caused by the Edge Lighting application, enabling potential information disclosure. Affected component: Edge Lighting on affected Samsung firmware. Root cause: not explicit...

CVE-2020-11604

CVE-2020-11604 affects Samsung mobile devices running P (9.0) and Q (10.0) with TEEGRIS; the issue is an out-of-bounds read in the MLDAP Trustlet. Connected records confirm the vulnerability details and Samsung’s reference ID SVE-2019-16565. Impact details across sources indicate leakage of infor...

CVE-2020-11603: Access of Resource Using Incompatible Type

An issue was discovered on Samsung mobile devices with P9.0 and Q10.0 incorporating TEEGRIS software. Type confusion in the MLDAP Trustlet allows arbitrary code execution. The Samsung ID is SVE-2020-16599 April 2020...

CVE-2018-21042: Missing Authorization

An issue was discovered on Samsung mobile devices with N7.x, O8.x, and P9.0 software. Dual Messenger allows installation of an arbitrary APK with resultant privileged code execution. The Samsung ID is SVE-2018-13299 December 2018...

CVE-2020-11605: Insertion of Sensitive Information into Log File

An issue was discovered on Samsung mobile devices with O8.x, P9.0, and Q10.0 software. There is sensitive information exposure from dumpstate in NFC logs. The Samsung ID is SVE-2019-16359 April 2020...