217 matches found
CVE-2026-65626
A flaw was found in the jose library. The fallback RSA decryption mechanism reveals whether decrypted data has valid padding through distinguishable error responses and timing discrepancies. An unauthenticated attacker can exploit this vulnerability by submitting a series of specially crafted...
CVE-2026-118040
Progress Telerik Document Processing Libraries prior to version 2026.3.1027 are vulnerable to improper verification of cryptographic signatures and improper certificate validation within the RadPdfProcessing digital signature validation component. This flaw allows an unauthenticated attacker to u...
PT-2026-128222
In ProgressĀ® TelerikĀ® Document Processing Libraries prior to version 2026.3.1027, improper verification of cryptographic signatures and improper certificate validation in RadPdfProcessing digital signature validation allow an unauthenticated attacker to cause signature validation to report forged...
erlang-jose Improper Signature Bypass
The vulnerability in the erlang-jose module for signing and encrypting JSON objects in Erlang and Elixir is caused by an incorrect half-byte division of cryptographic signatures and the subsequent conversion of each half into a whole number. Exploitation of this vulnerability may allow an attacke...
Microsoft Office SharePoint Privilege Escalation
The vulnerability of the Microsoft Office SharePoint web platform for collaborative work and document management is related to errors in verifying cryptographic signatures. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...
CVE-2026-14999
IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to bypass authentication by forging valid JSON Web Signatures due to improper verification of cryptographic signatures...
CVE-2026-14497
IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote authenticated attacker to bypass security restrictions due to improper verification of cryptographic signatures...
EUVD-2026-94997
IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote authenticated attacker to bypass security restrictions due to improper verification of cryptographic signatures...
PT-2026-108015
šØ CVE-2026-14999 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to bypass authentication by forging valid JSON Web Signatures due to improper verification of cryptographic signatures...
PT-2026-108004
Name of the Vulnerable Software and Affected Versions IBM DataPower Gateway versions 10.5.0.0 through 10.5.0.22 IBM DataPower Gateway versions 10.6.0.0 through 10.6.0.10 IBM DataPower Gateway versions 10.6.1 through 10.6.6 IBM DataPower Gateway versions 11.0.0.0 through 11.0.0.2 Description A...
DEBIAN-CVE-2026-47554
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where improper verification of cryptographic signatures may cause signature verification to be bypassed under memory pressure. A successful exploit of this vulnerability might lead to denial of service and data...
CVE-2026-47554
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where improper verification of cryptographic signatures may cause signature verification to be bypassed under memory pressure. A successful exploit of this vulnerability might lead to denial of service and data...
UBUNTU-CVE-2026-47554
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where improper verification of cryptographic signatures may cause signature verification to be bypassed under memory pressure. A successful exploit of this vulnerability might lead to denial of service and data...
CVE-2026-47554
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where improper verification of cryptographic signatures may cause signature verification to be bypassed under memory pressure. A successful exploit of this vulnerability might lead to denial of service and data...
EUVD-2026-84946
IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote attacker to forge validly-signed messages due to improper verification of cryptographic signatures...
CVE-2026-18152
IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to a flaw where a remote attacker can forge validly-signed messages . This issue stems from the improper verification of cryptographic signatures . The vulnerability has a CVSS 3.1 base score of 7.4 (HIGH) , with an integr...
CVE-2026-18152 IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote attacker to forge validly-signed messages due to improper verification of cryptographic signatures...
dotnet: .NET Security Feature Bypass Vulnerability
A flaw was found in .NET. An unauthorized attacker can exploit this vulnerability over a network due to improper verification of cryptographic signatures. This allows the attacker to bypass a critical security feature, potentially leading to significant compromise of confidentiality, integrity, a...
CVE-2026-62918
Improper verification of cryptographic signature in Microsoft Teams allows an unauthorized attacker to perform spoofing over a network...
PT-2026-68835
Name of the Vulnerable Software and Affected Versions Microsoft Teams affected versions not specified Description Improper verification of cryptographic signatures allows an unauthorized attacker to perform spoofing over a network. Spoofing is a technique where a person or program successfully...