CVE-2021-0152

Improper verification of cryptographic signature in the installer for some IntelR Wireless BluetoothR and KillerTM BluetoothR products in Windows 10 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2021-0152

CVE-2021-0152 affects Intel® Wireless Bluetooth® and Killer™ Bluetooth® installer on Windows 10. The Red Hat/NVD entries and Intel advisory confirm the root cause: improper verification of the cryptographic signature in the installer, enabling a local, authenticated user to potentially cause a de...

Oracle Linux 8 : lasso (ELSA-2021-4325)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-4325 advisory. - Resolves: rhbz1951653 - CVE-2021-28091 lasso: XML signature wrapping vulnerability when parsing SAML responses rhel-8 - Resolves: rhbz1951653 - CVE-2021-28091...

CVE-2021-0152: Improper Verification of Cryptographic Signature

Improper verification of cryptographic signature in the installer for some IntelR Wireless BluetoothR and KillerTM BluetoothR products in Windows 10 may allow an authenticated user to potentially enable denial of service via local access...

The vulnerability of the Apache OpenOffice office software, related to errors in checking the cryptographic signature, allows a perpetrator to manipulate signed documents.

The vulnerability of the Apache OpenOffice office software is related to errors during the verification of the cryptographic signature. Exploiting this vulnerability could allow a malicious actor to manipulate signed documents remotely...

Intel Wireless Bluetooth Denial of Service Vulnerability

Intel Wireless Bluetooth is a driver tool from the United States Intel Intel that can effectively solve some problems with intel Bluetooth in Win10. Intel Wireless Bluetooth has a denial of service vulnerability that stems from some Intel Wireless Bluetooth and Killer Bluetooth products incorrect...

CVE-2021-34420: Improper Verification of Cryptographic Signature

The Zoom Client for Meetings for Windows installer before version 5.5.4 does not properly verify the signature of files with .msi, .ps1, and .bat extensions. This could lead to a malicious actor installing malicious software on a customer’s computer...

Improper Verification of Cryptographic Signature in starkbank-ecdsa

The verify function in the Stark Bank Java ECDSA library ecdsa-java 1.0.0 fails to check that the signature is non-zero, which allows attackers to forge signatures on arbitrary messages...

Improper Verification of Cryptographic Signature in starkbank-ecdsa

The verify function in the Stark Bank Python ECDSA library starkbank-ecdsa 2.0.0 fails to check that the signature is non-zero, which allows attackers to forge signatures on arbitrary messages...

GHSA-92VM-MXJF-JQF3 Improper Verification of Cryptographic Signature in starkbank-ecdsa

The verify function in the Stark Bank Python ECDSA library starkbank-ecdsa 2.0.0 fails to check that the signature is non-zero, which allows attackers to forge signatures on arbitrary messages...

CVE-2021-43570: Improper Verification of Cryptographic Signature

The verify function in the Stark Bank Java ECDSA library ecdsa-java 1.0.0 fails to check that the signature is non-zero, which allows attackers to forge signatures on arbitrary messages...

Huawei EulerOS: Security Advisory for lasso (EulerOS-SA-2021-2589)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP3 : lasso (EulerOS-SA-2021-2589)

According to the versions of the lasso packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Lasso all versions prior to 2.7.0 has improper verification of a cryptographic signature. CVE-2021-28091 Note that Tenable Network Security has...

The vulnerability of the LibreOffice office software package, related to errors in verifying the cryptographic signature, allows a hacker to perform a spoofing attack.

The vulnerability of the LibreOffice office software package is related to errors in checking the cryptographic signature. Exploiting this vulnerability could allow a malicious actor to carry out spoofing attacks remotely...

The vulnerability of the Apache OpenOffice office software, related to errors in checking the cryptographic signature, allows a hacker to modify the content of ODF documents.

The vulnerability of the Apache office software package is related to errors in checking the cryptographic signature. Exploiting this vulnerability could allow a malicious actor to modify the content of ODF documents remotely...

CVE-2021-41831: Improper Verification of Cryptographic Signature

It is possible for an attacker to manipulate the timestamp of signed documents. All versions of Apache OpenOffice up to 4.1.10 are affected. Users are advised to update to version 4.1.11. See CVE-2021-25634 for the LibreOffice advisory...

CVE-2021-41830: Improper Verification of Cryptographic Signature

It is possible for an attacker to manipulate signed documents and macros to appear to come from a trusted source. All versions of Apache OpenOffice up to 4.1.10 are affected. Users are advised to update to version 4.1.11. See CVE-2021-25633 for the LibreOffice advisory...

PT-2021-4369

Name of the Vulnerable Software and Affected Versions LibreOffice affected versions not specified Description The issue is related to errors in cryptographic signature verification. It may allow a remote attacker to conduct spoofing attacks. The flaw leads to LibreOffice presenting a valid...

CVE-2021-41832: Improper Verification of Cryptographic Signature

It is possible for an attacker to manipulate documents to appear to be signed by a trusted source. All versions of Apache OpenOffice up to 4.1.10 are affected. Users are advised to update to version 4.1.11. See CVE-2021-25635 for the LibreOffice advisory...

The vulnerability of the authentication method for the SOGo collaborative work system, which stems from incorrect verification of the cryptographic signature of data, allows attackers to compromise the integrity of the data.

The vulnerability of the SOGo collaborative computing software’s authentication method is related to improper verification of the data’s cryptographic signature. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the data...