Design/Logic Flaw

Discuz! DiscuzX X3.4 has XSS via the include\spacecp\spacecpupload.php op parameter...

CVE-2018-5376

Discuz! DiscuzX X3.4 has XSS via the include\spacecp\spacecpupload.php op parameter...

CVE-2018-5376

CVE-2018-5376 affects Discuz! DiscuzX X3.4, with a cross-site scripting (XSS) vulnerability exploitable via the include/cp/cp_upload.php op parameter. The underlying issue is an input handling flaw in that parameter enabling arbitrary script/HTML injection. CVSS data indicate network access with ...

CVE-2018-5376: Improper Neutralization of Input During Web Page Generation

Discuz! DiscuzX X3.4 has XSS via the include\spacecp\spacecpupload.php op parameter...

PT-2018-16932

Name of the Vulnerable Software and Affected Versions DiscuzX version X3.4 Description The issue is related to a XSS vulnerability. It affects the includespacecpspacecp upload.php file, specifically the op parameter. Recommendations For DiscuzX version X3.4, avoid using the op parameter in the...

Code injection

Linaro's open source TEE solution called OP-TEE, version 2.4.0 and older is vulnerable a timing attack in the Montgomery parts of libMPA in OP-TEE resulting in a compromised private RSA key...

Code injection

Linaro's open source TEE solution called OP-TEE, version 2.4.0 and older is vulnerable to the bellcore attack in the LibTomCrypt code resulting in compromised private RSA key...

CVE-2017-1000412

Linaro's open source TEE solution called OP-TEE, version 2.4.0 and older is vulnerable to the bellcore attack in the LibTomCrypt code resulting in compromised private RSA key...

CVE-2017-1000413

Linaro's open source TEE solution called OP-TEE, version 2.4.0 and older is vulnerable a timing attack in the Montgomery parts of libMPA in OP-TEE resulting in a compromised private RSA key...

CVE-2017-1000412

Linaro's open source TEE solution called OP-TEE, version 2.4.0 and older is vulnerable to the bellcore attack in the LibTomCrypt code resulting in compromised private RSA key...

CVE-2017-1000413

Linaro's open source TEE solution called OP-TEE, version 2.4.0 and older is vulnerable a timing attack in the Montgomery parts of libMPA in OP-TEE resulting in a compromised private RSA key...

CVE-2017-1000412

OP-TEE (Linaro) versions 2.4.0 and older are vulnerable to a bellcore attack in the LibTomCrypt code, resulting in a compromised private RSA key. Root cause:LibTomCrypt usage within OP-TEE; affected component is the TEE implementation. Impact: potential exposure of private RSA keys. Exploitation ...

CVE-2017-1000413

CVE-2017-1000413 affects OP-TEE (Linaro) 2.4.0 and older. The root cause is a timing attack in the Montgomery portion of libMPA, enabling a compromised private RSA key. Documented impacts include potential exposure of private key material. Connected sources corroborate the same description; no ex...

CVE-2017-1000412

Linaro's open source TEE solution called OP-TEE, version 2.4.0 and older is vulnerable to the bellcore attack in the LibTomCrypt code resulting in compromised private RSA key...

CVE-2017-1000413

Linaro's open source TEE solution called OP-TEE, version 2.4.0 and older is vulnerable a timing attack in the Montgomery parts of libMPA in OP-TEE resulting in a compromised private RSA key...

CVE-2017-1000412

Linaro's open source TEE solution called OP-TEE, version 2.4.0 and older is vulnerable to the bellcore attack in the LibTomCrypt code resulting in compromised private RSA key...

CVE-2017-1000412

Linaro's open source TEE solution called OP-TEE, version 2.4.0 and older is vulnerable to the bellcore attack in the LibTomCrypt code resulting in compromised private RSA key...

CVE-2017-1000413

Linaro's open source TEE solution called OP-TEE, version 2.4.0 and older is vulnerable a timing attack in the Montgomery parts of libMPA in OP-TEE resulting in a compromised private RSA key...

CVE-2017-1000413

Linaro's open source TEE solution called OP-TEE, version 2.4.0 and older is vulnerable a timing attack in the Montgomery parts of libMPA in OP-TEE resulting in a compromised private RSA key...

CVE-2017-1000413: Exposure of Sensitive Information to an Unauthorized Actor

Linaro's open source TEE solution called OP-TEE, version 2.4.0 and older is vulnerable a timing attack in the Montgomery parts of libMPA in OP-TEE resulting in a compromised private RSA key...