CVE-2020-13101: Improper Verification of Cryptographic Signature

In OASIS Digital Signature Services DSS 1.0, an attacker can control the validation outcome i.e., trigger either a valid or invalid outcome for a valid or invalid signature via a crafted XML signature, when the InlineXML option is used. This defeats the expectation of non-repudiation...

CVE-2020-1464: Improper Verification of Cryptographic Signature

A spoofing vulnerability exists when Windows incorrectly validates file signatures. An attacker who successfully exploited this vulnerability could bypass security features and load improperly signed files. In an attack scenario, an attacker could bypass security features intended to prevent...

CVE-2020-15827: Improper Verification of Cryptographic Signature

In JetBrains ToolBox version 1.17 before 1.17.6856, the set of signature verifications omitted the jetbrains-toolbox.exe file...

CVE-2020-15705: Improper Verification of Cryptographic Signature

GRUB2 fails to validate kernel signature when booted directly without shim, allowing secure boot to be bypassed. This only affects systems where the kernel signing certificate has been imported directly into the secure boot database and the GRUB image is booted directly without the use of shim...

Exploit for Improper Verification of Cryptographic Signature in Johnsoncontrols Exacqvision_Enterprise_Manager

Usage/Help Menu usage: CVE-2020-9047.py -h -p RPORT...

Improper Cryptographic Signature Verification

tuf improperly verifies cryptographic signatures. The vulnerability exists as it was possible for an attacker to use a duplicated valid signature to subvert the signature thresholds check and to use 1 set of signature with multiple keyid to bypass the intended signature threshold for the...

CVE-2020-15093: Improper Verification of Cryptographic Signature

The tough library Rust/crates.io prior to version 0.7.1 does not properly verify the threshold of cryptographic signatures. It allows an attacker to duplicate a valid signature in order to circumvent TUF requiring a minimum threshold of unique signatures before the metadata is considered valid. A...

PT-2020-6858

Name of the Vulnerable Software and Affected Versions CPAN version 2.28 Description The issue is related to the incorrect verification of cryptographic signatures in the CPAN language, specifically in the Module::Signature:: verify function. This could allow a remote attacker to access confidenti...

CVE-2020-15091: Improper Verification of Cryptographic Signature

TenderMint from version 0.33.0 and before version 0.33.6 allows block proposers to include signatures for the wrong block. This may happen naturally if you start a network, have it run for some time and restart it without changing chainID. A malicious block proposer even with a minimal amount of...

Exploit for Improper Verification of Cryptographic Signature in Paloaltonetworks Pan-Os

CVE-2020-2021 CVE-2...

CVE-2020-2021: Improper Verification of Cryptographic Signature

When Security Assertion Markup Language SAML authentication is enabled and the 'Validate Identity Provider Certificate' option is disabled unchecked, improper verification of signatures in PAN-OS SAML authentication enables an unauthenticated network-based attacker to access protected resources...

CVE-2020-9047 exacqVision Software - Improper Verification of Cryptographic Signature

A vulnerability exists that could allow the execution of unauthorized code or operating system commands on systems running exacqVision Web Service versions 20.06.3.0 and prior and exacqVision Enterprise Manager versions 20.06.4.0 and prior. An attacker with administrative privileges could...

CVE-2020-9047: Improper Verification of Cryptographic Signature

A vulnerability exists that could allow the execution of unauthorized code or operating system commands on systems running exacqVision Web Service versions 20.06.3.0 and prior and exacqVision Enterprise Manager versions 20.06.4.0 and prior. An attacker with administrative privileges could...

Improper Verification of Cryptographic Signature

Overview Versions of jsrsasignprior to 8.0.17 fail to properly verify cryptographic signatures. Its RSASSA-PSS RSA-PSS implementation does not detect signature manipulation/modification by prepending '\0' bytes to a signature it accepts these modified signatures as valid. An attacker can abuse th...

Johnson Controls exacqVision (Update A)

1. EXECUTIVE SUMMARY CVSS v3 6.8 ATTENTION: Exploitable remotely Vendor: Exacq Technologies, a subsidiary of Johnson Controls Equipment: exacqVision Vulnerability: Improper Verification of Cryptographic Signature 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an...

CVE-2020-13803: Improper Verification of Cryptographic Signature

An issue was discovered in Foxit PhantomPDF Mac and Foxit Reader for Mac before 4.0. It allows signature validation bypass via a modified file or a file with non-standard signatures...

CVE-2020-3209: Improper Verification of Cryptographic Signature

A vulnerability in software image verification in Cisco IOS XE Software could allow an unauthenticated, physical attacker to install and boot a malicious software image or execute unsigned binaries on an affected device. The vulnerability is due to an improper check on the area of code that manag...

PT-2020-2693

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software affected versions not specified Description The issue is related to errors in cryptographic signature verification during the initial boot process of system image files. This could allow an unauthenticated, physical...

Exploit for Improper Verification of Cryptographic Signature in Golang Package_Ssh

Exploit for CVE-2020-9283 This project is inspired by the o...

CVE-2020-13415: Improper Verification of Cryptographic Signature

An issue was discovered in Aviatrix Controller through 5.1. An attacker with any signed SAML assertion from the Identity Provider can establish a connection even if that SAML assertion has expired or is from a user who is not authorized to access Aviatrix, aka XML Signature Wrapping...