Lucene search
+L

6270 matches found

Cvelist
Cvelist
added 2020/11/16 12:36 a.m.34 views

CVE-2020-8152

Insufficient protection of the server-side encryption keys in Nextcloud Server 19.0.1 allowed an attacker to replace the public key to decrypt them later on...

5.6AI score0.00323EPSS
SaveExploits2References3
OSV
OSV
added 2020/11/12 2:15 p.m.3 views

DEBIAN-CVE-2020-25658

It was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA decryption API to decrypt parts of the cipher text encrypted with RSA...

5.9CVSS6.3AI score0.01651EPSS
SaveExploits1References1
OSV
OSV
added 2020/11/12 2:15 p.m.34 views

CVE-2020-25658

It was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA decryption API to decrypt parts of the cipher text encrypted with RSA...

5.9CVSS5.6AI score
SaveExploits0References5
NVD
NVD
added 2020/11/12 2:15 p.m.27 views

CVE-2020-25658

It was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA decryption API to decrypt parts of the cipher text encrypted with RSA...

7.5CVSS7.4AI score0.01651EPSS
SaveExploits1References5
PyPA
PyPA
added 2020/11/12 2:15 p.m.9 views

PYSEC-2020-100

It was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA decryption API to decrypt parts of the cipher text encrypted with RSA...

7.5CVSS6.9AI score0.01651EPSS
SaveExploits1References3Affected Software1
UbuntuCve
UbuntuCve
added 2020/11/12 2:15 p.m.46 views

CVE-2020-25658

It was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA decryption API to decrypt parts of the cipher text encrypted with RSA...

7.5CVSS6.7AI score0.01651EPSS
SaveExploits1References3
OSV
OSV
added 2020/11/12 2:15 p.m.9 views

UBUNTU-CVE-2020-25658

It was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA decryption API to decrypt parts of the cipher text encrypted with RSA...

7.5CVSS6.7AI score0.01651EPSS
SaveExploits1References4
OSV
OSV
added 2020/11/12 2:15 p.m.70 views

PYSEC-2020-100

It was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA decryption API to decrypt parts of the cipher text encrypted with RSA...

7.5CVSS4.5AI score0.01651EPSS
SaveExploits1References3
Prion
Prion
added 2020/11/12 2:15 p.m.27 views

Code injection

It was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA decryption API to decrypt parts of the cipher text encrypted with RSA...

4.3CVSS5.7AI score0.01651EPSS
SaveExploits1References5Affected Software3
Cvelist
Cvelist
added 2020/11/12 1:48 p.m.33 views

CVE-2020-25658

It was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA decryption API to decrypt parts of the cipher text encrypted with RSA...

7.5CVSS6.8AI score0.01651EPSS
SaveExploits1References5
Debian CVE
Debian CVE
added 2020/11/12 1:48 p.m.36 views

CVE-2020-25658

It was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA decryption API to decrypt parts of the cipher text encrypted with RSA...

7.5CVSS5.6AI score0.01651EPSS
SaveExploits1
The Hacker News
The Hacker News
added 2020/11/12 10:31 a.m.34 views

New ModPipe Point of Sale (POS) Malware Targeting Restaurants, Hotels

Cybersecurity researchers today disclosed a new kind of modular backdoor that targets point-of-sale POS restaurant management software from Oracle in an attempt to pilfer sensitive payment information stored in the devices. The backdoor — dubbed "ModPipe" — impacts Oracle MICROS Restaurant...

0.9AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2020/11/12 12:0 a.m.6 views

PT-2020-16151 · Python +3 · Python-Rsa +3

Name of the Vulnerable Software and Affected Versions: python-rsa affected versions not specified Description: It was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA decryption API to decrypt parts of the cipher text encrypted with...

8.2CVSS4.9AI score0.01651EPSS
SaveExploits2References53
Veracode
Veracode
added 2020/11/10 6:54 a.m.34 views

Insecure RSA Decryption (Bleichenbacher Timing Attack)

rsa is using insecure RSA Decryption and is vulnerable to Bleichenbacher Timing attack. The library provides enough of a timing side channel to mount a Bleichenbacher style attack as it uses timed processing of valid PKCS1 v1.5 ciphertext...

7.5CVSS3.6AI score0.01651EPSS
SaveExploits1References14Affected Software2
RedhatCVE
RedhatCVE
added 2020/11/09 4:28 a.m.42 views

CVE-2020-25658

A flaw was found in python-rsa, where it is vulnerable to Bleichenbacher timing attacks. This flaw allows an attacker, via the RSA decryption API, to decrypt parts of the ciphertext encrypted with RSA. The highest threat from this vulnerability is to confidentiality...

7.5CVSS4.5AI score0.01651EPSS
SaveExploits1References4
CNVD
CNVD
added 2020/11/09 12:0 a.m.6 views

Nextcloud Server Encryption Issue Vulnerability

Nextcloud is a set of open source self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. A security vulnerability exists in Nextcloud Server 18.0.4, which stems from too small a random character set being used for encryption, making decryption tim...

3.5CVSS6.9AI score0.00369EPSS
SaveExploits1References1
Prion
Prion
added 2020/11/06 12:15 p.m.25 views

Design/Logic Flaw

Visual Components owned by KUKA is a robotic simulator that allows simulating factories and robots in order toimprove planning and decision-making processes. Visual Components software requires a special license which can beobtained from a network license server. The network license server binds ...

5CVSS7.4AI score0.01448EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2020/11/05 3:15 p.m.5 views

CVE-2020-27688

RVToolsPasswordEncryption.exe in RVTools 4.0.6 allows users to encrypt passwords to be used in the configuration files. This encryption used a static IV and key, and thus using the Decrypt method from VISKD.cs from the RVTools.exe executable allows for decrypting the encrypted passwords. The...

7.5CVSS5.8AI score0.01923EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2020/11/05 2:59 p.m.35 views

CVE-2020-27688

RVToolsPasswordEncryption.exe in RVTools 4.0.6 allows users to encrypt passwords to be used in the configuration files. This encryption used a static IV and key, and thus using the Decrypt method from VISKD.cs from the RVTools.exe executable allows for decrypting the encrypted passwords. The...

7.4AI score0.01923EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2020/11/04 12:0 a.m.16 views

Huawei EulerOS: Security Advisory for python-rsa (EulerOS-SA-2020-2390)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.7AI score0.01359EPSS
SaveExploits1References2
Rows per page
Query Builder