Lucene search
K

628 matches found

vulnersOsv
vulnersOsv
added 2022/05/13 1:11 a.m.3 views

com.ahome-it:ahome-tooling-server-core (>=1.0.110-RELEASE <=1.0.114-RELEASE), com.ahome-it:ahome-tooling-server-hazelcast (>=1.0.111-RELEASE <=1.0.112-RELEASE) +45 more potentially affected by CVE-2016-10027 via org.igniterealtime.smack:smack-core (>=4.0.0-rc1 <=4.1.8)

org.igniterealtime.smack:smack-core MAVEN version =4.0.0-rc1, =1.0.110-RELEASE, =1.0.111-RELEASE, =1.0.111-RELEASE, =1.0.111-RELEASE, =1.0.111-RELEASE, =0.1.3, =0.1.5, =0.0.0.1, =0.0.0.25, =0.1, =1.2.4, =0.2.5, =1.1.9, =1.1.55 and more Source cves: CVE-2016-10027 Source advisory:...

5.9CVSS6.7AI score0.01506EPSS
Exploits0
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.21 views

Mageia: Security Advisory (MGASA-2016-0208)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.7AI score0.02463EPSS
Exploits0References5
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.21 views

Mageia: Security Advisory (MGASA-2017-0422)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS5.5AI score0.00318EPSS
Exploits0References5
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.23 views

Mageia: Security Advisory (MGASA-2017-0327)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.5AI score0.01317EPSS
Exploits2References5
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.22 views

Mageia: Security Advisory (MGASA-2017-0321)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.6AI score0.01978EPSS
Exploits2References6
Veracode
Veracode
added 2021/09/12 1:25 p.m.20 views

Information Disclosure

botan is vulnerable to information disclosure. The vulnerability exists due to the system allowing plaintext recovery of the public key which allows an attacker to gain access to sensitive information...

5.9CVSS5.6AI score0.01483EPSS
Exploits1References10Affected Software1
OSV
OSV
added 2021/09/06 7:15 p.m.1 views

DEBIAN-CVE-2021-40529

The ElGamal implementation in Botan through 2.18.1, as used in Thunderbird and other products, allows plaintext recovery because, during interaction between two cryptographic libraries, a certain dangerous combination of the prime defined by the receiver's public key, the generator defined by the...

5.9CVSS5.9AI score0.01483EPSS
Exploits1References1
NVD
NVD
added 2021/09/06 7:15 p.m.10 views

CVE-2021-40529

The ElGamal implementation in Botan through 2.18.1, as used in Thunderbird and other products, allows plaintext recovery because, during interaction between two cryptographic libraries, a certain dangerous combination of the prime defined by the receiver's public key, the generator defined by the...

5.9CVSS0.01483EPSS
Exploits1References7
OSV
OSV
added 2021/09/06 7:15 p.m.2 views

ALPINE-CVE-2021-40529

The ElGamal implementation in Botan through 2.18.1, as used in Thunderbird and other products, allows plaintext recovery because, during interaction between two cryptographic libraries, a certain dangerous combination of the prime defined by the receiver's public key, the generator defined by the...

5.9CVSS8.8AI score0.01483EPSS
Exploits1References1
OSV
OSV
added 2021/09/06 7:15 p.m.22 views

CVE-2021-40529

The ElGamal implementation in Botan through 2.18.1, as used in Thunderbird and other products, allows plaintext recovery because, during interaction between two cryptographic libraries, a certain dangerous combination of the prime defined by the receiver's public key, the generator defined by the...

5.9CVSS2.5AI score
Exploits0References7
OSV
OSV
added 2021/09/06 7:15 p.m.1 views

UBUNTU-CVE-2021-40529

The ElGamal implementation in Botan through 2.18.1, as used in Thunderbird and other products, allows plaintext recovery because, during interaction between two cryptographic libraries, a certain dangerous combination of the prime defined by the receiver's public key, the generator defined by the...

5.9CVSS5.8AI score0.01483EPSS
Exploits1References6
Prion
Prion
added 2021/09/06 7:15 p.m.14 views

Cross site scripting

The ElGamal implementation in Botan through 2.18.1, as used in Thunderbird and other products, allows plaintext recovery because, during interaction between two cryptographic libraries, a certain dangerous combination of the prime defined by the receiver's public key, the generator defined by the...

2.6CVSS5.7AI score0.01483EPSS
Exploits1References7Affected Software3
UbuntuCve
UbuntuCve
added 2021/09/06 7:15 p.m.21 views

CVE-2021-40529

The ElGamal implementation in Botan through 2.18.1, as used in Thunderbird and other products, allows plaintext recovery because, during interaction between two cryptographic libraries, a certain dangerous combination of the prime defined by the receiver's public key, the generator defined by the...

5.9CVSS6.2AI score0.01483EPSS
Exploits1References5
Cvelist
Cvelist
added 2021/09/06 6:45 p.m.51 views

CVE-2021-40529

The ElGamal implementation in Botan through 2.18.1, as used in Thunderbird and other products, allows plaintext recovery because, during interaction between two cryptographic libraries, a certain dangerous combination of the prime defined by the receiver's public key, the generator defined by the...

6.1AI score0.01483EPSS
Exploits1References7
CVE
CVE
added 2021/09/06 6:45 p.m.144 views

CVE-2021-40529

The CVE-2021-40529 entry concerns the ElGamal implementation in Botan (through 2.18.1), used by Thunderbird and other products. A cross-configuration attack between two cryptographic libraries can lead to plaintext recovery by exploiting a dangerous combination of the receiver’s key prime and gen...

5.9CVSS5.7AI score0.01483EPSS
Exploits1References7Affected Software1
Debian CVE
Debian CVE
added 2021/09/06 6:45 p.m.19 views

CVE-2021-40529

The ElGamal implementation in Botan through 2.18.1, as used in Thunderbird and other products, allows plaintext recovery because, during interaction between two cryptographic libraries, a certain dangerous combination of the prime defined by the receiver's public key, the generator defined by the...

5.9CVSS5.7AI score0.01483EPSS
Exploits1
AlpineLinux
AlpineLinux
added 2021/09/06 6:45 p.m.38 views

CVE-2021-40529

The ElGamal implementation in Botan through 2.18.1, as used in Thunderbird and other products, allows plaintext recovery because, during interaction between two cryptographic libraries, a certain dangerous combination of the prime defined by the receiver's public key, the generator defined by the...

5.9CVSS5.9AI score0.01483EPSS
Exploits1
CNNVD
CNNVD
added 2021/09/06 12:0 a.m.5 views

Botan 加密问题漏洞

Botan is a library of cryptographic algorithms written in C++. It supports a variety of algorithms such as AES, DES, SHA-1, RSA, DSA and Diffie-Hellman. A security vulnerability exists in Botan 2.18.1 and earlier versions, which stems from the fact that a generator public key defined by the...

5.9CVSS7.4AI score0.01483EPSS
Exploits1References8
OSV
OSV
added 2021/05/25 12:5 p.m.4 views

OPENSUSE-SU-2021:0794-1 Security update for Botan

This update for Botan fixes the following issues: - CVE-2021-24115 In Botan before 2.17.3, or this backport, constant-time computations are not used for certain decoding and encoding operations boo1182670 This update was imported from the openSUSE:Leap:15.2:Update update project...

9.8CVSS9.5AI score0.01976EPSS
Exploits0References3
OPENSUSE Linux
OPENSUSE Linux
added 2021/05/25 12:0 a.m.20 views

Security update for Botan (important)

openSUSE Security Update: Security update for Botan Announcement ID: openSUSE-SU-2021:0794-1 Rating: important References: 1182670 Cross-References: CVE-2021-24115 CVSS scores: CVE-2021-24115 NVD : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-24115 SUSE: 9.8...

9.8CVSS7.3AI score0.01976EPSS
Exploits0References1
Rows per page
Query Builder