VulnCheck KEV: CVE-2021-31201

Microsoft Enhanced Cryptographic Provider contains an unspecified vulnerability that allows for privilege escalation...

KLA12202 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, gain privileges, bypass security restrictions, cause denial of service. Below is a complete list of vulnerabilities: 1. An informati...

Adventures in Contacting the Russian FSB

KrebsOnSecurity recently had occasion to contact the Russian Federal Security Service FSB, the Russian equivalent of the U.S. Federal Bureau of Investigation FBI. In the process of doing so, I encountered a small snag: The FSBs website said in order to communicate with them securely, I needed to...

CVE-2021-28091

Lasso all versions prior to 2.7.0 has improper verification of a cryptographic signature...

DEBIAN-CVE-2021-28091

Lasso all versions prior to 2.7.0 has improper verification of a cryptographic signature...

CVE-2021-28091

Lasso all versions prior to 2.7.0 has improper verification of a cryptographic signature...

CVE-2021-28091

Lasso all versions prior to 2.7.0 has improper verification of a cryptographic signature...

Design/Logic Flaw

Lasso all versions prior to 2.7.0 has improper verification of a cryptographic signature...

CVE-2021-28091

Lasso all versions prior to 2.7.0 has improper verification of a cryptographic signature...

CVE-2021-28091

CVE-2021-28091 affects the Lasso library. All versions prior to 2.7.0 are vulnerable due to improper verification of a cryptographic signature in SAML/XML signature processing, which can allow manipulation of SAML responses and potential impersonation. Remediation is to upgrade to version 2.7.0 o...

CVE-2021-28091

Lasso all versions prior to 2.7.0 has improper verification of a cryptographic signature...

The vulnerability of Kaspersky Password Manager’s password manager, related to insufficient encryption strength, allows attackers to circumvent cryptographic security measures.

The vulnerability of Kaspersky Password Manager is related to insufficient encryption strength. Exploiting this vulnerability could allow an attacker to bypass cryptographic security measures...

The vulnerability of the IBM Security Guardium security tool lies in the use of cryptographic algorithms that contain defects and risks, allowing attackers to gain unauthorized access to the protected information.

The vulnerability of the IBM Security Guardium security tool is related to the use of cryptographic algorithms that contain defects and risks. Exploiting this vulnerability could allow an unauthorized attacker to gain unauthorized access to the protected information...

Insecure Verification Of Cryptographic Signature

aws-encryption-sdk suffers from an insecure verification of cryptographic signature. A flawed implementation of message decryption process allows the client code to read ESDK messages from untrusted sources to the end of the stream...

Improper Verification of Cryptographic Signature in Apache Pulsar in TensorFlow

If Apache Pulsar is configured to authenticate clients using tokens based on JSON Web Tokens JWT, the signature of the token is not validated if the algorithm of the presented token is set to "none". This allows an attacker to connect to Pulsar instances as any user incl. admins...

GHSA-3CV4-XXV7-934Q Improper Verification of Cryptographic Signature in Apache Pulsar in TensorFlow

If Apache Pulsar is configured to authenticate clients using tokens based on JSON Web Tokens JWT, the signature of the token is not validated if the algorithm of the presented token is set to "none". This allows an attacker to connect to Pulsar instances as any user incl. admins...

GHSA-H45P-W933-JXH3 Improper Verification of Cryptographic Signature in aws-encryption-sdk-javascript

Impact This advisory addresses several LOW severity issues with streaming signed messages and restricting processing of certain types of invalid messages. This ESDK supports a streaming mode where callers may stream the plaintext of signed messages before the ECDSA signature is validated. In...

Improper Verification of Cryptographic Signature in aws-encryption-sdk

Impact This advisory addresses several LOW severity issues with streaming signed messages and restricting processing of certain types of invalid messages. This ESDK supports a streaming mode where callers may stream the plaintext of signed messages before the ECDSA signature is validated. In...

Improper Verification of Cryptographic Signature in aws-encryption-sdk-java

Impact This advisory addresses several LOW severity issues with streaming signed messages and restricting processing of certain types of invalid messages. This update addresses an issue where certain invalid ECDSA signatures incorrectly passed validation. These signatures provide defense in depth...

GHSA-55XH-53M6-936R Improper Verification of Cryptographic Signature in aws-encryption-sdk-java

Impact This advisory addresses several LOW severity issues with streaming signed messages and restricting processing of certain types of invalid messages. This update addresses an issue where certain invalid ECDSA signatures incorrectly passed validation. These signatures provide defense in depth...