PT-2026-85227

Name of the Vulnerable Software and Affected Versions python-jose versions prior to 3.5.1 Description The software fails to properly validate asymmetric keys during HMAC initialization. It accepts DER-encoded public keys that lack PEM armor or SSH prefixes. This allows an attacker who possesses t...

python-cryptography: NULL-dereference when loading PKCS7 certificates

A null-pointer dereference vulnerability was found in python-cryptography during the loading of PKCS7 certificates. Invoking "loadpempkcs7certificates" or "loadderpkcs7certificates" can trigger this issue and lead to subsequent segmentation fault and result in a Denial of Service DoS for any...

ROS-20240409-06

A vulnerability in SaltStack Salt's configuration management and remote operations execution system is related to receiving multiple bad packets to the server equal to the number of worker threads, Salt will stop responding back requests before restarting. Exploitation of the vulnerability could...

der-zahnarzt.net Cross Site Scripting vulnerability OBB-3905562

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

openSUSE Security Advisory (SUSE-SU-2024:0157-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS 9 : nss-3.79.0-14.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the nss-3.79.0-14.el9 build changelog. - NSS Network Security Services versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap overflow when handling DER-encoded DSA or RSA-PSS...

nss security update

3.90.0-6 - Fix ecc DER wrapping. 3.90.0-5 - Pick up validated constant time implementations of p256, p384, and p521 from upsream - More Fips indicator changes...

nss security update

3.90.0-6 - Fix ecc DER wrapping. 3.90.0-5 - Pick up validated constant time implementations of p256, p384, and p521 from upsream - More Fips indicator changes...

TemporAI Code Issue Vulnerability

TemporAI is a machine learning-centered medical time series library open-sourced by vanderSchaar LAB. A code issue vulnerability exists in vanderSchaar LAB TemporAI version 0.0.3, which stems from an incorrect operation that can lead to deserialization...

SUSE-SU-2024:0157-1 Security update for libcryptopp

This update for libcryptopp fixes the following issues: - CVE-2023-50981: Fixed a potential denial of service issue via crafted DER public key data bsc1218222...

fest-der-sinne.info Improper Access Control vulnerability OBB-3836965

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

der-blomberg.de Cross Site Scripting vulnerability OBB-3831726

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

SUSE-SU-2024:0030-1 Security update for libcryptopp

This update for libcryptopp fixes the following issues: - CVE-2023-50980: Fixed DoS via malformed DER public key file bsc1218219...

SUSE-SU-2023:4957-1 Security update for libcryptopp

This update for libcryptopp fixes the following issues: - CVE-2023-50980: Fixed DoS via malformed DER public key file bsc1218219...

garten-der-steine.de Improper Access Control vulnerability OBB-3818717

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Denial Of Service (DoS)

libcryptopp.so is vulnerable to Denial Of Service DoS. The vulnerability exists in the ModularSquareRoot function due to an infinite loop caused by crafted DER public-key data with squared odd numbers, which allows an attacker to cause DoS...

Denial Of Service (DoS)

libcryptopp.so is vulnerable to Denial Of Service DoS. The vulnerability is caused when DER public key data for an F2^m curve is not strictly decreasing each polynomial term, which allows an attacker to cause an application crash...

CVE-2023-50980

gf2n.cpp in Crypto++ aka cryptopp through 8.9.0 allows attackers to cause a denial of service application crash via DER public-key data for an F2^m curve, if the degree of each term in the polynomial is not strictly decreasing...

CVE-2023-50980

gf2n.cpp in Crypto++ aka cryptopp through 8.9.0 allows attackers to cause a denial of service application crash via DER public-key data for an F2^m curve, if the degree of each term in the polynomial is not strictly decreasing...

CVE-2023-50981

ModularSquareRoot in Crypto++ aka cryptopp through 8.9.0 allows attackers to cause a denial of service infinite loop via crafted DER public-key data associated with squared odd numbers, such as the square of 268995137513890432434389773128616504853...