Improper Verification of Cryptographic Signature in starkbank-ecdsa

The verify function in the Stark Bank Python ECDSA library starkbank-ecdsa 2.0.0 fails to check that the signature is non-zero, which allows attackers to forge signatures on arbitrary messages...

Huawei EulerOS: Security Advisory for lasso (EulerOS-SA-2021-2589)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP3 : lasso (EulerOS-SA-2021-2589)

According to the versions of the lasso packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Lasso all versions prior to 2.7.0 has improper verification of a cryptographic signature. CVE-2021-28091 Note that Tenable Network Security has...

The vulnerability of the Apache OpenOffice office software, related to errors in checking the cryptographic signature, allows a hacker to modify the content of ODF documents.

The vulnerability of the Apache office software package is related to errors in checking the cryptographic signature. Exploiting this vulnerability could allow a malicious actor to modify the content of ODF documents remotely...

The vulnerability of the LibreOffice office software package, related to errors in verifying the cryptographic signature, allows a hacker to perform a spoofing attack.

The vulnerability of the LibreOffice office software package is related to errors in checking the cryptographic signature. Exploiting this vulnerability could allow a malicious actor to carry out spoofing attacks remotely...

The vulnerability of the authentication method for the SOGo collaborative work system, which stems from incorrect verification of the cryptographic signature of data, allows attackers to compromise the integrity of the data.

The vulnerability of the SOGo collaborative computing software’s authentication method is related to improper verification of the data’s cryptographic signature. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the data...

The vulnerability of the libdnf package manager library involves incorrect verification of the cryptographic signature of data. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the package manager library libdnf is related to a bug in the signature verification function. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

EulerOS 2.0 SP8 : lasso (EulerOS-SA-2021-2467)

According to the versions of the lasso package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Lasso all versions prior to 2.7.0 has improper verification of a cryptographic signature. CVE-2021-28091 Note that Tenable Network Security has...

Huawei EulerOS: Security Advisory for lasso (EulerOS-SA-2021-2467)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP2 : lasso (EulerOS-SA-2021-2393)

According to the version of the lasso packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Lasso all versions prior to 2.7.0 has improper verification of a cryptographic signature.CVE-2021-28091 Note that Tenable Network Security has...

Ubuntu 16.04 ESM : PySAML2 vulnerability (USN-5066-2)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-5066-2 advisory. USN-5066-1 fixed a vulnerability in PySAML2. This update provides the corresponding update for Ubuntu 16.04 ESM. Tenable has extracted the preceding description...

CVE-2021-3051

An improper verification of cryptographic signature vulnerability exists in Cortex XSOAR SAML authentication that enables an unauthenticated network-based attacker with specific knowledge of the Cortex XSOAR instance to access protected resources and perform unauthorized actions on the Cortex XSO...

CVE-2021-3051

An improper verification of cryptographic signature vulnerability exists in Cortex XSOAR SAML authentication that enables an unauthenticated network-based attacker with specific knowledge of the Cortex XSOAR instance to access protected resources and perform unauthorized actions on the Cortex XSO...

Design/Logic Flaw

An improper verification of cryptographic signature vulnerability exists in Cortex XSOAR SAML authentication that enables an unauthenticated network-based attacker with specific knowledge of the Cortex XSOAR instance to access protected resources and perform unauthorized actions on the Cortex XSO...

CVE-2021-3051 Cortex XSOAR: Authentication Bypass in SAML Authentication

An improper verification of cryptographic signature vulnerability exists in Cortex XSOAR SAML authentication that enables an unauthenticated network-based attacker with specific knowledge of the Cortex XSOAR instance to access protected resources and perform unauthorized actions on the Cortex XSO...

CVE-2021-3051

CVE-2021-3051 describes an improper verification of cryptographic signatures in Cortex XSOAR SAML authentication that allows an unauthenticated network attacker with knowledge of the instance to access protected resources and perform unauthorized actions. Affected are Cortex XSOAR 5.5.0 builds ea...

Cortex XSOAR: Authentication Bypass in SAML Authentication

An improper verification of cryptographic signature vulnerability exists in Cortex XSOAR SAML authentication that enables an unauthenticated network-based attacker with specific knowledge of the Cortex XSOAR instance to access protected resources and perform unauthorized actions on the Cortex XSO...

Ubuntu 18.04 LTS / 20.04 LTS : PySAML2 vulnerability (USN-5066-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5066-1 advisory. Brian Wolff discovered that PySAML2 incorrectly validated cryptographic signatures. A remote attacker could possibly use this issue to alter SAML...

EulerOS 2.0 SP5 : lasso (EulerOS-SA-2021-2337)

According to the version of the lasso packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Lasso all versions prior to 2.7.0 has improper verification of a cryptographic signature.CVE-2021-28091 Note that Tenable Network Security has...

Huawei EulerOS: Security Advisory for lasso (EulerOS-SA-2021-2337)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...