5525 matches found
CVE-2019-19962
wolfSSL before 4.3.0 mishandles calls to wcSignatureGenerateHash, leading to fault injection in RSA cryptography...
Design/Logic Flaw
wolfSSL before 4.3.0 mishandles calls to wcSignatureGenerateHash, leading to fault injection in RSA cryptography...
CVE-2019-19962
wolfSSL before 4.3.0 mishandles calls to wcSignatureGenerateHash, leading to fault injection in RSA cryptography...
CVE-2019-19962
CVE-2019-19962 affects wolfSSL older than 4.3.0. The vulnerability arises from mishandling calls to wc_SignatureGenerateHash, enabling fault injection in RSA cryptography. Impact per sources is confined to information in the provided documents; no exploitation details are given beyond fault injec...
CVE-2019-19962
wolfSSL before 4.3.0 mishandles calls to wcSignatureGenerateHash, leading to fault injection in RSA cryptography...
Security Bulletin: Multiple Vulnerabilities in Go affects IBM Watson Studio Local
Summary Security Bulletin: Multiple Vulnerabilities in Go affects IBM Watson Studio Local Vulnerability Details CVEID: CVE-2019-11841 DESCRIPTION: A message-forgery issue was discovered in crypto/openpgp/clearsign/clearsign.go in supplementary Go cryptography libraries 2019-03-25. According to th...
CVE-2019-4609
IBM API Connect 2018.4.1.7 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 168510...
The vulnerability of Infineon’s RSA Library, related to errors in generating prime numbers in the RSA algorithm, allows a perpetrator to disclose the secret part of the key.
The vulnerability of Infineon’s RSA Library is related to errors in generating prime numbers using the RSA algorithm. Exploiting this vulnerability could allow a malicious actor to disclose the secret part of the key...
CVE-2019-18340
A vulnerability has been identified in Control Center Server CCS All versions = V1.5.0, SiNVR/SiVMS Video Server All versions = V5.0.0. Both the SiVMS/SiNVR Video Server and the Control Center Server CCS store user and device passwords by applying weak cryptography. A local attacker could exploit...
Design/Logic Flaw
A vulnerability has been identified in Control Center Server CCS All versions = V1.5.0, SiNVR/SiVMS Video Server All versions = V5.0.0. Both the SiVMS/SiNVR Video Server and the Control Center Server CCS store user and device passwords by applying weak cryptography. A local attacker could exploit...
CVE-2019-18340
The CVE-2019-18340 vulnerability concerns weak cryptography used to store user and device passwords in both Siemens/ PKE SiNVR/SiVMS Video Server and the Control Center Server (CCS). A local attacker could extract passwords from the user database or device configuration files. Affected products i...
PT-2019-15359 · Siemens · Control Center Server +1
Name of the Vulnerable Software and Affected Versions: Control Center Server CCS versions prior to V1.5.0 SiNVR/SiVMS Video Server versions prior to V5.0.0 Description: A vulnerability has been identified where the SiVMS/SiNVR Video Server and the Control Center Server CCS store user and device...
Kernel: page cache side channel attacks
A new software page cache side channel attack scenario was discovered in operating systems that implement the very common 'page cache' caching mechanism. A malicious user/process could use 'in memory' page-cache knowledge to infer access timings to shared memory and gain knowledge which can be us...
Siemens and PKE SiNVR, SiVMS Video Server (Update A)
1. EXECUTIVE SUMMARY --------- Begin Update A Part 1 of 6 --------- CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendors: Siemens and PKE Equipment: SiNVR, SiVMS Video Servers Vulnerabilities: Missing Authentication for Critical Function, Weak Cryptography for Passwords...
EulerOS 2.0 SP2 : python-crypto (EulerOS-SA-2019-2511)
According to the version of the python-crypto package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Heap-based buffer overflow in the ALGnew function in blocktemplace.c in Python Cryptography Toolkit aka pycrypto allows remote attackers to...
Kernel: page cache side channel attacks
A new software page cache side channel attack scenario was discovered in operating systems that implement the very common 'page cache' caching mechanism. A malicious user/process could use 'in memory' page-cache knowledge to infer access timings to shared memory and gain knowledge which can be us...
Authorities Break Up Imminent Monitor Spyware Organization
The developers behind a commodity remote-access tool RAT that allows full control of a victim’s computer has been taken down by Australian and global authorities. The Imminent Monitor RAT IM-RAT first appeared in 2012, the work of a developer going by the handle of “Shockwave,” according to...
Going in-depth on the Windows 10 random number generation infrastructure
Throughout the years, we've had ongoing conversations with researchers, developers, and customers around our implementation of certain security features within the Windows operating system. Most recently, we have open-sourced our cryptography libraries as a way to contribute and show our continue...
elliptic-php competitive conditions issue vulnerability
elliptic-php is a PHP-based elliptic curve cryptographic library. A competitive condition issue vulnerability exists in versions of elliptic-php prior to 1.0.6, which can be exploited by an attacker to recover long-lived private keys...
