4182 matches found
CVE-2023-39362: Improper Neutralization of Special Elements used in an OS Command
Cacti is an open source operational monitoring and fault management framework. In Cacti 1.2.24, under certain conditions, an authenticated privileged user, can use a malicious string in the SNMP options of a Device, performing command injection and obtaining remote code execution on the underlyin...
Malicious code in vesper-synth-user-lib (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3b63b940eccf15e831893fd295775cbbbee43515d20e431b70389d8775292f57 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-7989 Malicious code in vesper-synth-user-lib (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3b63b940eccf15e831893fd295775cbbbee43515d20e431b70389d8775292f57 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in metronome-synth-info-lib (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9e99092c601ede7db26a42e21544d65cff430ba4d36d1a76232973801b8d3fec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-7988 Malicious code in metronome-synth-info-lib (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9e99092c601ede7db26a42e21544d65cff430ba4d36d1a76232973801b8d3fec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in master-oracle-lib (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1b5d683c33e479ccc6ca6bb739fae7fc1a6d64781f08d95866becdfdd08e26fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-7987 Malicious code in master-oracle-lib (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1b5d683c33e479ccc6ca6bb739fae7fc1a6d64781f08d95866becdfdd08e26fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
tss-lib leaks secret keys in response to incorrectly constructed Paillier moduli
Impact The specification of the GG18 threshold ECDSA signature protocol contains a vulnerability allowing an attacker to recover the shared secret key. If a participant generates a Paillier modulus N containing small factors less than 2^100 they can interact with other participants in the signing...
GHSA-H24C-6P6P-M3VX tss-lib leaks secret keys in response to incorrectly constructed Paillier moduli
Impact The specification of the GG18 threshold ECDSA signature protocol contains a vulnerability allowing an attacker to recover the shared secret key. If a participant generates a Paillier modulus N containing small factors less than 2^100 they can interact with other participants in the signing...
CVE-2023-4695
The CVE-2023-4695 vulnerability affects pkp-lib prior to 3.3.0-16. It stems from using a predictable RNG algorithm (mt_rand) for password generation and seeding with time, leading to predictable outcomes and potentially total compromise of generated values. Affected component is the random number...
CVE-2023-4695 Use of Predictable Algorithm in Random Number Generator in pkp/pkp-lib
Use of Predictable Algorithm in Random Number Generator in GitHub repository pkp/pkp-lib prior to 3.3.0-16...
PT-2023-33022 · Tss-Lib · Tss-Lib
Name of the Vulnerable Software and Affected Versions: tss-lib affected versions not specified Description: The GG18 threshold ECDSA signature protocol specification contains an issue that allows an attacker to recover the shared secret key. This can occur when a participant generates a Paillier...
PT-2023-30268 · Public Knowledge · Pkp-Lib
Name of the Vulnerable Software and Affected Versions: pkp-lib versions prior to 3.3.0-16 Description: The issue concerns the use of a predictable algorithm in the random number generator. Recommendations: For versions prior to 3.3.0-16, update to version 3.3.0-16 or later to resolve the issue...
CVE-2023-4695: Use of Predictable Algorithm in Random Number Generator
Use of Predictable Algorithm in Random Number Generator in GitHub repository pkp/pkp-lib prior to 3.3.0-16...
CVE-2023-41627
O-RAN Software Community ric-plt-lib-rmr v4.9.0 does not validate the source of the routing tables it receives, potentially allowing attackers to send forged routing tables to the device...
CVE-2023-41627
The CVE-2023-41627 issue affects O-RAN Software Community ric-plt-lib-rmr v4.9.0, where routing-table sources are not validated, enabling forged routing tables to be sent to a device. Multiple sources (Red Hat, NVD/CVE records, CNNVD, PRION, and PT-Security) corroborate this description. Impact i...
CVE-2023-41627: Undefined Security Weakness
O-RAN Software Community ric-plt-lib-rmr v4.9.0 does not validate the source of the routing tables it receives, potentially allowing attackers to send forged routing tables to the device...
CVE-2023-40998
Buffer Overflow vulnerability in O-RAN Software Community ric-plt-lib-rmr v.4.9.0 allows a remote attacker to cause a denial of service via the packet size component...
