6704 matches found
CVE-2019-10929: Use of a Broken or Risky Cryptographic Algorithm
A vulnerability has been identified in SIMATIC CP 1626 All versions, SIMATIC ET 200SP Open Controller CPU 1515SP PC incl. SIPLUS variants All versions, SIMATIC ET 200SP Open Controller CPU 1515SP PC2 incl. SIPLUS variants All versions V20.8, SIMATIC HMI Panel incl. SIPLUS variants All versions,...
Mailpile Encryption Problem Vulnerability
Mailpile is a Web-based open source e-mail client . A cryptographic vulnerability exists in the "Security and Privacy" encryption feature in Mailpile versions prior to 1.0.0rc4. The vulnerability stems from the incorrect use of cryptographic algorithms in a networked system or product, and can be...
RHEL 7 : openssl (RHSA-2019:2304)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:2304 advisory. OpenSSL is a toolkit that implements the Secure Sockets Layer SSL and Transport Layer Security TLS protocols, as well as a full-strength...
Hidden Algorithm Flaws Expose Websites to DoS Attacks
Why throw a bunch of junk traffic at a service, when all it takes to stall it out is just a few bytes?...
Signature Verification Bypass
gree/jose is vulnerable to signature verification bypass. The vulnerability exists as there was an issue in the key confusion/algorithm substitution...
CVE-2019-1918
A vulnerability in the implementation of Intermediate SystemtoIntermediate System ISIS routing protocol functionality in Cisco IOS XR Software could allow an unauthenticated attacker who is in the same IS-IS area to cause a denial of service DoS condition. The vulnerability is due to incorrect...
Cisco IOS XR Software Intermediate System-to-Intermediate System Denial of Service Vulnerability
A vulnerability in the implementation of Intermediate System–to–Intermediate System IS–IS routing protocol functionality in Cisco IOS XR Software could allow an unauthenticated attacker who is in the same IS-IS area to cause a denial of service DoS condition. The vulnerability is due to incorrect...
CVE-2016-5431
The PHP JOSE Library by Gree Inc. before version 2.2.1 is vulnerable to key confusion/algorithm substitution in the JWS component resulting in bypassing the signature verification via crafted tokens...
CVE-2016-5431
The PHP JOSE Library by Gree Inc. before version 2.2.1 is vulnerable to key confusion/algorithm substitution in the JWS component resulting in bypassing the signature verification via crafted tokens...
CVE-2016-5431
The CVE concerns the PHP JOSE Library by Gree Inc. prior to version 2.2.1. The underlying issue is key confusion/algorithm substitution in the JWS component, which allows bypassing signature verification with crafted tokens. Affected software/version: PHP JOSE Library
CVE-2016-5431
The PHP JOSE Library by Gree Inc. before version 2.2.1 is vulnerable to key confusion/algorithm substitution in the JWS component resulting in bypassing the signature verification via crafted tokens...
PT-2019-3068
Name of the Vulnerable Software and Affected Versions Cisco IOS XR Software affected versions not specified Description A vulnerability in the implementation of Intermediate System–to–Intermediate System IS–IS routing protocol functionality could allow an unauthenticated attacker who is in the sa...
CVE-2016-5431: Use of a Broken or Risky Cryptographic Algorithm
The PHP JOSE Library by Gree Inc. before version 2.2.1 is vulnerable to key confusion/algorithm substitution in the JWS component resulting in bypassing the signature verification via crafted tokens...
PT-2019-7833 · Php · Php Jose Library
Name of the Vulnerable Software and Affected Versions: PHP JOSE Library versions prior to 2.2.1 Description: The issue allows for key confusion/algorithm substitution in the JWS component, resulting in the bypassing of signature verification via crafted tokens. Recommendations: For versions prior...
openssl: timing side channel attack in the DSA signature algorithm
The OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.1a Affected 1.1.1. Fixed in OpenSSL 1.1.0j Affected 1.1.0-1.1.0i. Fixed in OpenSSL 1.0.2q...
EulerOS 2.0 SP2 : grub2 (EulerOS-SA-2019-1735)
According to the version of the grub2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An integer overflow flaw was found in the way the lzo library decompressed certain archives compressed with the LZO algorithm. An attacker could...
Sn5CrPack.sys Sn5Crypto.sys Driver DoS
The vulnerability of the Sn5CrPack.sys and Sn5Crypto.sys drivers of the Secret Net Studio information protection system is related to errors in processing changed algorithm parameters. Exploiting this vulnerability can allow an attacker to cause a service failure...
Security Bulletin: IBM has announced a release for IBM Security Identity Governance and Intelligence in response to a security vulnerability (CVE-2017-1399)
Summary IBM has announced a release for IBM Security Identity Governance and Intelligence IGI in response to a security vulnerability. Use of a Broken or Risky Cryptographic Algorithm. Vulnerability Details CVEID: CVE-2017-1399 DESCRIPTION: IBM Security Identity Governance Virtual Appliance uses...
CVE-2019-13604: Use of a Broken or Risky Cryptographic Algorithm
There is a short key vulnerability in HID Global DigitalPersona formerly Crossmatch U.are.U 4500 Fingerprint Reader v24. The key for obfuscating the fingerprint image is vulnerable to brute-force attacks. This allows an attacker to recover the key and decrypt that image using the key. Successful...
