Amazon Linux 2 : libreoffice (ALASLIBREOFFICE-2024-004)

The version of libreoffice installed on the remote host is prior to 5.3.6.1-21. It is, therefore, affected by a vulnerability as referenced in the ALAS2LIBREOFFICE-2024-004 advisory. Certificate Validation user interface in LibreOffice allows potential vulnerability. Signed macros are scripts tha...

CVE-2024-23960

Alpine Halo9 Improper Verification of Cryptographic Signature Vulnerability. This vulnerability allows physically present attackers to bypass signature validation mechanism on affected installations of Alpine Halo9 devices. Authentication is not required to exploit this vulnerability. The specifi...

CVE-2024-23960

Alpine Halo9 Improper Verification of Cryptographic Signature Vulnerability. This vulnerability allows physically present attackers to bypass signature validation mechanism on affected installations of Alpine Halo9 devices. Authentication is not required to exploit this vulnerability. The specifi...

CVE-2024-23960 Alpine Halo9 Improper Verification of Cryptographic Signature Vulnerability

Alpine Halo9 Improper Verification of Cryptographic Signature Vulnerability. This vulnerability allows physically present attackers to bypass signature validation mechanism on affected installations of Alpine Halo9 devices. Authentication is not required to exploit this vulnerability. The specifi...

Alpine Halo9 安全漏洞

Alpine Halo9 is a multimedia player from Alpine. A security vulnerability exists in Alpine Halo9 that stems from improper cryptographic signature verification...

The vulnerability of the TeamViewer-service.exe component of the remote control software for computers, which allows a hacker to increase their privileges.

The vulnerability of the TeamViewer-service.exe component of the remote control software for computers is related to improper verification of the cryptographic signature. Exploiting this vulnerability can allow attackers to enhance their privileges by installing a specially crafted driver...

CVE-2024-7479

Improper verification of cryptographic signature during installation of a VPN driver via the TeamViewerservice.exe component of TeamViewer Remote Clients prior version 15.58.4 for Windows allows an attacker with local unprivileged access on a Windows system to elevate their privileges and install...

CVE-2024-7479 Improper signature verification of VPN driver installation in TeamViewer Remote Clients

Improper verification of cryptographic signature during installation of a VPN driver via the TeamViewerservice.exe component of TeamViewer Remote Clients prior version 15.58.4 for Windows allows an attacker with local unprivileged access on a Windows system to elevate their privileges and install...

CVE-2024-7479

CVE-2024-7479 affects TeamViewer for Windows prior to 15.58.4. A flaw in the cryptographic signature verification during VPN driver installation via TeamViewer_service.exe allows a local, unprivileged user to elevate privileges by loading an arbitrary kernel driver. Impact is privilege escalation...

CVE-2024-7481

CVE-2024-7481 relates to TeamViewer Remote Clients on Windows where improper verification of a cryptographic signature during Printer driver installation via TeamViewer_service.exe allows a local, unprivileged user to elevate privileges by loading a driver. The issue affects versions prior to 15....

Improper Verification Of Cryptographic Signature

Keycloak is vulnerable to an Improper Verification of Cryptographic Signature. The vulnerability is due to incorrect validation logic in the XMLSignatureUtil class, where the SAML signature's scope is determined based on its position in the XML document, rather than using the Reference element th...

BASM (Broken Authentication & Session Management) browserify-sign Dependency in Confluence Data Center

This High severity BASM Broken Authentication & Session Management vulnerability was introduced in version 7.11 of Confluence Data Center. This BASM Broken Authentication & Session Management vulnerability, with a CVSS Score of 7.5, allows an unauthenticated attacker to exploit a cryptographic...

The vulnerability of Microsoft Teams’ corporate platform for Mac OS, related to improper verification of the cryptographic signature, allows a hacker to circumvent existing security restrictions.

The vulnerability of Microsoft Teams’ corporate platform for Mac OS is related to improper verification of the cryptographic signature. Exploiting this vulnerability could allow an attacker to circumvent existing security restrictions by introducing malicious libraries...

The vulnerability of Microsoft Excel spreadsheet editors on the Mac OS, related to errors in verifying cryptographic signatures, allows attackers to escalate their privileges.

The vulnerability of Microsoft Excel spreadsheet editors on the Mac OS operating system is related to errors in verifying the cryptographic signature. Exploiting this vulnerability can allow attackers to increase their privileges...

The vulnerability of Microsoft Word text editor on the Mac OS allows a hacker to circumvent existing security restrictions.

The vulnerability of Microsoft Word text editors on the Mac OS is related to improper verification of the cryptographic signature. Exploiting this vulnerability can allow attackers to circumvent existing security restrictions by introducing malicious libraries...

The vulnerability of the Microsoft PowerPoint presentation preparation and viewing software for the Mac OS allows a hacker to circumvent existing security restrictions.

The vulnerability of the Microsoft PowerPoint presentation preparation and viewing software for the Mac OS is related to improper verification of the cryptographic signature. Exploiting this vulnerability can allow an attacker to circumvent existing security restrictions using a specially created...

The vulnerability of Microsoft Teams’ corporate platform on the Mac OS allows a hacker to circumvent existing security restrictions.

The vulnerability of Microsoft Teams’ corporate platform on the Mac OS is related to improper verification of the cryptographic signature. Exploiting this vulnerability could allow an attacker to circumvent existing security restrictions using a specially created library...

GHSA-CVP8-5R8G-FHVQ omniauth-saml vulnerable to Improper Verification of Cryptographic Signature

ruby-saml, the dependent SAML gem of omniauth-saml has a signature wrapping vulnerability in = v1.12.0 and v1.13.0 to v1.16.0 , see https://github.com/SAML-Toolkits/ruby-saml/security/advisories/GHSA-jw9c-mfg7-9rx2 As a result, omniauth-saml created a new release by upgrading ruby-saml to the...

omniauth-saml vulnerable to Improper Verification of Cryptographic Signature

ruby-saml, the dependent SAML gem of omniauth-saml has a signature wrapping vulnerability in = v1.12.0 and v1.13.0 to v1.16.0 , see https://github.com/SAML-Toolkits/ruby-saml/security/advisories/GHSA-jw9c-mfg7-9rx2 As a result, omniauth-saml created a new release by upgrading ruby-saml to the...

Improper Verification Of Cryptographic Signature

org.springframework.boot:spring-boot-loader and org.springframework.boot:spring-boot-loader-classic are vulnerable to Improper Verification of Cryptographic Signature due to the signature verification process in nested jar files. An attacker can manipulate the signature to appear as if it was...